IEEE Communications Magazine

Securing the Internet of Things in a Quantum World

Cheng Chi, Rongxing Lu, Albrecht Petzoldt, Tsuyoshi Takagi

Published Feb 1, 2017• 231 citations

Abstract

Currently, we rely on cryptographic algorithms such as elliptic curve cryptosystems (ECCs) as basic building blocks to secure the communication in the IoT. However, public key schemes like ECC can easily be broken by the upcoming quantum computers. Due to recent advances in quantum computing, we should act now to prepare the IoT for the quantum world. In this article, we focus on the current state of the art and recent developments in the area of quantum-resistant cryptosystems for securing the IoT. We first demonstrate the impacts of quantum computers on the security of the cryptographic schemes used today, and then give an overview of the recommendations for cryptographic schemes that can be secure under the attacks of both classical and quantum computers. After that, we present the existing implementations of quantum-resistant cryptographic schemes on constrained devices suitable for the IoT. Finally, we give an introduction to ongoing projects for quantum-resistant schemes that will help develop future security solutions for the IoT.

DOI: 10.1109/mcom.2017.1600522cm

Related papers

Securing IoT Ecosystems with Quantum-Resistant Cryptography

E. Zhang

The rapid proliferation of Internet of Things (IoT) devices has introduced significant security challenges, particularly with the looming threat posed by quantum computing to classical cryptographic algorithms. This paper explores the integration of quantum-resistant cryptographic techniques to secure IoT ecosystems against future quantum attacks. We analyze the vulnerabilities inherent in traditional cryptographic approaches and discuss the implementation feasibility of post-quantum cryptography (PQC) in resource-constrained IoT devices. The study further highlights key PQC algorithms suitable for IoT and evaluates their performance impact. A comparative analysis graph of classical versus quantum-resistant algorithms in IoT environments is presented. This work aims to provide insights and recommendations for adopting quantum-resistant solutions to future-proof IoT security.

American Journal Of Cryptography And Network SecurityDec 31, 20250 citations

Securing IoT in Quantum World

Harjot Singh, Shailendra, Amey R Hasabnis

All data sent to and from IOT devices, (as well as any data held), must be encrypted in order to enhance the security of IOT devices. At the moment, elliptic curve cryptosystems (ECCs) are used as fundamental building blocks to secure communication in the Internet of Things. Yet, forthcoming quantum computers can quickly compromise public key systems like ECC. We should take action right away to get the IOT ready for the quantum future due to recent developments in quantum computing. This paper at first will give a brief overview on Crystal - Kyber, SIKE and BIKE algorithm which are among the NIST’s third round candidate. Then the comparison of these three on the basis of key size, computational power and memory requirement. Finally a recommendation on the most suitable algorithm for making IoT secure in quantum world.

International Conference on Intelligent Technologies (CONIT)Jun 23, 20231 citation

From Pre-Quantum to Post-Quantum IoT Security: A Survey on Quantum-Resistant Cryptosystems for the Internet of Things

Tiago M. Fernández‐Caramés

Although quantum computing is still in its nascent age, its evolution threatens the most popular public-key encryption systems. Such systems are essential for today's Internet security due to their ability for solving the key distribution problem and for providing high security in insecure communications channels that allow for accessing websites or for exchanging e-mails, financial transactions, digitally signed documents, military communications or medical data. Cryptosystems like Rivest-Shamir-Adleman (RSA), elliptic curve cryptography (ECC) or Diffie-Hellman have spread worldwide and are part of diverse key Internet standards like Transport Layer Security (TLS), which are used both by traditional computers and Internet of Things (IoT) devices. It is especially difficult to provide high security to IoT devices, mainly because many of them rely on batteries and are resource constrained in terms of computational power and memory, which implies that specific energy-efficient and lightweight algorithms need to be designed and implemented for them. These restrictions become relevant challenges when implementing cryptosystems that involve intensive mathematical operations and demand substantial computational resources, which are often required in applications where data privacy has to be preserved for the long term, like IoT applications for defense, mission-critical scenarios or smart healthcare. Quantum computing threatens such a long-term IoT device security and researchers are currently developing solutions to mitigate such a threat. This article provides a survey on what can be called post-quantum IoT systems (IoT systems protected from the currently known quantum computing attacks): the main post-quantum cryptosystems and initiatives are reviewed, the most relevant IoT architectures and challenges are analyzed, and the expected future trends are indicated. Thus, this article is aimed at providing a wide view of post-quantum IoT security and give useful guidelines to the future post-quantum IoT developers.

arXiv:2402.00790IEEE Internet of Things JournalDec 13, 2019323 citations

Fortifying IoT Against Quantum Threats: Strategies for Securing Connected Devices in the Quantum Era

Subhadra Rajpoot, Puneet Singh, Pankaj Singh +2 more

All data sent to and from IOT devices, (as well as any data held), must be encrypted in order to enhance the security of IOT devices. At the moment, elliptic curve cryptosystems (ECCs) are used as fundamental building blocks to secure communication in the Internet of Things. Yet, forthcoming quantum computers can quickly compromise public key systems like ECC. We should take action right away to get the IOT ready for the quantum future due to recent developments in quantum computing. This paper at first will give a brief overview on Crystal - Kyber, SIKE and BIKE algorithm which are among the NIST's third round candidate. Then the comparison of these three on the basis of key size, computational power and memory requirement. Finally a recommendation on the most suitable algorithm for making IoT secure in quantum world.

International Conference on Contemporary Computing and Informatics (IC3I)Sep 14, 20232 citations

Quantum-Resistant Security for IoT Systems: Challenges and Implementation Strategies

Amit Awasthi

The imminent arrival of quantum computing presents unprecedented challenges to Internet of Things (IoT) security, threatening to compromise the cryptographic protocols that safeguard billions of connected devices worldwide. This article examines the critical intersection of quantum computing capabilities and IoT vulnerabilities, with particular emphasis on resource-constrained devices, heterogeneous networks, and legacy system integration. This article presents a comprehensive framework for implementing quantum-resistant security measures in IoT environments, introducing a hybrid approach that combines lightweight quantum-resistant algorithms with modular architecture design. This article demonstrates traditional encryption methods like RSA and ECC remain vulnerable to quantum attacks; strategic implementation of lattice-based and hash-based cryptography can provide robust protection without overwhelming device resources. This article also addresses practical considerations for industry adoption, including development lifecycle integration, governance frameworks, and compliance requirements. Through examination of real-world implementation scenarios, this article establishes a successful quantum-resistant IoT security required for a balanced approach between immediate protective measures and long-term strategic planning, providing organizations with actionable guidelines for securing their IoT infrastructure against quantum threats.

International Journal of Scientific Research in Computer Science Engineering and Information TechnologyJan 3, 20259 citations

Post‐quantum cryptography techniques for secure communication in resource‐constrained Internet of Things devices: A comprehensive survey

Swati Kumari, Maninder Singh, Raman Singh +1 more

Abstract As the number and characteristics of smart devices change, the concept of the Internet of Things (IoT) emerges. The IoT provides the connected devices with a variety of resources that enable effective communication. At this point, several security issues arise to get the sensitive information behind every communication in the IoT. To provide users with security and privacy, cryptographic schemes are adopted, the most popular being public key cryptographic systems (PKC). However, with the advent of quantum computing, the level of security that can be provided by the PKC schemes is a big question. Another important issue is that the IoT environment is resource‐constrained, which necessitates the implementation of lightweight cryptographic algorithms for better security. In response to these issues, the post‐quantum cryptographic (PQC) schemes are one of the significant developments contributing to IoT security in the post‐quantum world. This article examines the key security issues in the IoT environment and examines the effective solutions found in the literature. The problems in IoT in the quantum era are discussed and appropriate solutions by PKC schemes under limited resources in IoT are focused. As the lattice‐based cryptosystems are more effective, the importance of these schemes in the resource‐constrained IoT is highlighted. This survey also leads to feasible future directions that can support developers and researchers in this field.

Software Practice and ExperienceJul 11, 202254 citations