The rise of quantum computing presents substantial challenges to the security of Peer-to-Peer (P2P) energy trading systems. This paper introduces an innovative mutual authenticated session key agreement protocol aimed at protecting edge-IoT P2P energy trading communications in the quantum era. Each peer is an IoT-enabled smart metering device that is registered by an edge registration authority and acts as both producer and consumer. The proposed protocol incorporates CRYSTALS-Kyber's quantum-resistant cryptographic suite to guarantee the authenticity and confidentiality of negotiated session keys in the presence of quantum threats. Furthermore, it leverages the Hedera Hashgraph public blockchain, which is recognized for its quantum-resilient design, to ensure transparency and support efficient revocation mechanisms. Extensive comparative analyses have been conducted to demonstrate the protocol's superiority over existing alternatives, including both traditional schemes based on classical cryptography and emerging early-stage post-quantum approaches, in terms of performance and security features. By combining robust security and high efficiency, the proposed protocol fosters the development of resilient decentralized energy markets, paving the way for secure and sustainable energy distribution in the future.
The rise of quantum computing presents substantial challenges to the security of Peer-to-Peer (P2P) energy trading systems. This paper introduces an innovative mutual authenticated session key agreement protocol aimed at protecting edge-IoT P2P energy trading communications in the quantum era. Each peer is an IoT-enabled smart metering device that is registered by an edge registration authority and acts as both producer and consumer. The proposed protocol incorporates CRYSTALS-Kyber's quantum-resistant cryptographic suite to guarantee the authenticity and confidentiality of negotiated session keys in the presence of quantum threats. Furthermore, it leverages the Hedera Hashgraph public blockchain, which is recognized for its quantum-resilient design, to ensure transparency and support efficient revocation mechanisms. Extensive comparative analyses have been conducted to demonstrate the protocol's superiority over existing alternatives, including both traditional schemes based on classical cryptography and emerging early-stage post-quantum approaches, in terms of performance and security features. By combining robust security and high efficiency, the proposed protocol fosters the development of resilient decentralized energy markets, paving the way for secure and sustainable energy distribution in the future.
The rapid development of quantum computers is emerging as a significant threat to end to end encryption protocols such as Signal. To address this issue, this paper enhances the Signal protocol by integrating Post Quantum Cryptography(PQC) algorithms. Specifically, this project integrates the PQXDH algorithm, which is the combination of X3DH and Kyber Key Encapsulation Mechanism to provide quantum resistant key exchange and encryption. A distinctive contribution of this work is the architectural shift from centralized client-server models to a fully decentralized peer-to-peer (P2P) communication model. This ensures greater resilience, fault tolerance, and preservation of privacy. To validate the feasibility of the proposed design, a real-world IoT use case is presented, highlighting the applicability of the system in resource-constrained environments where computational efficiency and low communication overhead are critical. The implementation is developed on Linux and leverages modern cryptographic libraries, ensuring compatibility with emerging PQC standards and integration into existing security infrastructures. Overall, this work demonstrates the combination of the E2E protocol Signal with quantum resistant Kyber to provide a quantum resistant cryptographic algorithm that can be used in decentralized architecture demonstrated using the IoT use case. The result is a robust, scalable, and future-proof framework for quantum-secure distributed communication.
Device-to-device (D2D) communication is expected to become a key component of 6G and IoT systems, enabling low-latency and infrastructure-independent connectivity. A major challenge is to establish secure session keys between previously unknown devices without relying on an online trusted third party, while also ensuring resilience against future quantum adversaries. This paper proposes a lightweight hybrid authentication and key agreement protocol for decentralized D2D communication. The approach combines IPFS-assisted distributed key discovery with a two-message protocol that uses post-quantum key encapsulation for long-term confidentiality, while retaining elliptic curve cryptography (ECC) for efficient real-time authentication under classical security assumptions.This design reflects the different temporal security requirements of confidentiality and authentication and provides a practical trade-off between quantum resilience and computational efficiency. The proposed scheme achieves mutual authentication under classical ECC assumptions, secure session key establishment, and resistance against common attacks, while providing post-quantum confidentiality protection against future quantum adversaries and removing the need for an online trusted third party (TTP) during protocol execution. The results demonstrate that the protocol offers a competitive and practical solution for secure decentralized D2D communication in IoT and future 6G environments.
The emergence and growth of the Internet of Medical Things (IoMT) have transformed the way healthcare services are delivered, but this growth comes with its own security challenges, especially with the emergence of quantum computing. This paper presents a lightweight, privacy-preserving authentication scheme for edge-based IoMT environments, integrating CRYSTALS-Kyber Key Encapsulation Mechanism (KEM) to securely establish session keys between participating entities and resilience against quantum attacks, while CRYSTALS-Dilithium is utilized as the digital signature scheme to ensure message integrity, authentication, and non-repudiation. These NIST-standardized post-quantum primitives collectively strengthen the system's resistance against quantum adversaries and enhance overall cryptographic robustness. The proposed system comprises two phases: Registration and Authentication. During registration, patients, wearable devices that utilize Physically Unclonable Functions (PUFs), and medical specialists register with a Trusted Authority via edge nodes. The authentication phase encompasses mutual authentication among patients, devices, medical specialists, edge nodes, and cloud servers, ensuring that only authorized entities access sensitive health information. In addition, the proposed scheme employs the formal security properties, such as authenticity and secrecy, are verified using the AVISPA tool under the Dolev-Yao model, with results confirming that all defined goals are achieved and no attacks are found. Performance evaluations indicate that the scheme is computationally efficient and suitable for resource-constrained IoMT devices. Furthermore, BAN logic is employed to formally verify the correctness of the authentication protocol, demonstrating that mutual authentication is securely established among the participating entities under well-defined trust assumptions. By integrating post-quantum cryptographic techniques, this authentication framework addresses emerging security challenges posed by quantum computing, aligning with the objectives of enhancing edge-based consumer electronics devices and Internet of Things (IoT) ecosystems with post-quantum cryptosystems.
The integration of blockchain with hybrid cryptographic models was redefining the security paradigm for decentralized energy transactions. As energy infrastructures increasingly adopt digital and distributed ledger technologies, ensuring data integrity, confidentiality, and resilience against emerging cyber threats was paramount. Conventional cryptographic mechanisms employed in blockchain networks face significant vulnerabilities, particularly with the advent of quantum computing. Hybrid cryptographic models, which combine classical cryptographic techniques with post-quantum security frameworks, offer a viable solution to address these challenges. This chapter explores the key challenges associated with implementing blockchain-based hybrid cryptographic models, including computational overhead, interoperability constraints, security vulnerabilities, and scalability concerns. It also examines the future prospects of integrating quantum-resistant cryptographic techniques such as lattice-based cryptography, hash-based signatures, and quantum key distribution (QKD) to enhance blockchain security. It highlights the role of advanced key management strategies and optimized consensus mechanisms in ensuring efficient and secure energy transactions. By bridging blockchain technology with quantum-secure cryptographic advancements, this study provides a comprehensive outlook on the evolution of decentralized security frameworks for energy systems, paving the way for robust, scalable, and future-proof solutions.
The smart grid (SG) embodies the future of power systems, featuring self-healing mechanisms, adaptability, and sustainability. Nevertheless, its interconnected and widely distributed architecture presents substantial cybersecurity challenges, rendering it susceptible to cyber attacks that may cause outages, infrastructure failures, and data breaches, including the exposure of personal information. Public-key cryptography (PKC) has historically been utilized to ensure confidentiality, authenticate devices, and maintain data integrity. However, the rise of quantum computing poses a serious threat to the viability of these PKC algorithms, particularly with the potential implementation of algorithms such as Shor’s algorithm. To address these vulnerabilities, we propose an innovative security protocol for post-quantum communication within SG applications, engineered to resist both classical and quantum threats. Our comparative study reveals that this protocol delivers enhanced security and improved functionality while maintaining low communication and computational costs compared to existing methods. We further demonstrate its practicality through real-time testbed experiments and implementations on a Raspberry Pi, supported by an extensive security assessment using the Scyther automated validation tool. A detailed comparison with Kyber in terms of computational efficiency, storage requirements, and implementation overhead to support our lightweight claim. Finally, a network simulation conducted using Network Simulator 3 (NS3) further demonstrates the performance of the proposed scheme, highlighting its scalability and reliability.
In emerging environments such as cloud computing and the Internet of Things (IoT), secure authentication and key negotiation play a crucial role in protecting data transmitted over public networks. However, many existing authentication protocols are still designed based on classical public-key cryptography primitives, and quantum computing may threaten their security. To address this challenge, we propose a post-quantum authentication and key agreement protocol that uses the lattice-based Kyber key encapsulation mechanism (KEM). Our proposed protocol integrates cryptographic authentication, smart card protection, and post-quantum key encapsulation mechanisms, enabling mutual authentication between users and servers and securely establishing session keys. The security of the protocol is formally analyzed in the Real-or-Random (ROR) model under the random oracle assumption and the IND-CCA security of the underlying KEM scheme. Furthermore, through informal security analysis, we have further demonstrated that the protocol possesses important security properties, including anonymity, untraceability, perfect forward confidentiality, and resistance to known attacks. In addition, the computational cost and communication overhead of the proposed scheme are evaluated and compared with several representative authentication protocols. The results show that the proposed protocol can provide strong security while maintaining low computational cost and communication overhead.