In this chapter, we assess the security considerations associated with integrating wireless sensor networks (WSNs) into the Internet of Things (IoT). Our main concern stems from new potential threats to the current security solutions employed in these applications. Particularly, the potential construction of a large-scale quantum computer in the upcoming decade could enable attackers to compromise some widely used public-key cryptography (PKC) algorithms: RSA, DSA, Diffie–Hellman, ECDH, and ECDSA. In order to counteract this threat, multiple organizations led by the U.S. National Institute for Standards and Technology have launched a standardization process seeking PKC algorithms that can resist quantum-enabled attacks. Hence, it can be expected that IoT standards will consequently be updated to adapt for this new threat scenario. However, it is unclear whether these solutions can be adopted by WSN devices, given the processing, memory, power, and bandwidth constraints of this technology. In our work, we study multiple foreseeable outcomes as a result of this shift in security concerns and identify the different challenges and opportunities for each case.
In this chapter, we assess the security considerations associated with integrating wireless sensor networks (WSNs) into the Internet of Things (IoT). Our main concern stems from new potential threats to the current security solutions employed in these applications. Particularly, the potential construction of a large-scale quantum computer in the upcoming decade could enable attackers to compromise some widely used public-key cryptography (PKC) algorithms: RSA, DSA, Diffie–Hellman, ECDH, and ECDSA. In order to counteract this threat, multiple organizations led by the U.S. National Institute for Standards and Technology have launched a standardization process seeking PKC algorithms that can resist quantum-enabled attacks. Hence, it can be expected that IoT standards will consequently be updated to adapt for this new threat scenario. However, it is unclear whether these solutions can be adopted by WSN devices, given the processing, memory, power, and bandwidth constraints of this technology. In our work, we study multiple foreseeable outcomes as a result of this shift in security concerns and identify the different challenges and opportunities for each case.
The growth of quantum computing reveals a series of significant threats to cryptographic systems known today, such as RSA, ECC, and Diffie-Hellman, which are extremely important for Internet security, but are threatened by the increase in possible quantum attacks. The area of public and private key cryptography is vast. Therefore, this article addresses post-quantum cryptography (PQC) algorithms and the challenges of implementing them in Internet of Things (IoT) devices, given the difficulty of application due to restricted resources, such as RAM and clock speed . To this end, we will discuss the need for standardization of algorithms considering low-resource IoT devices, prioritizing RAM over ROM, meeting the needs of low-memory devices, which are lighter. The National Institute of Standards and Technology (NIST) has validated four cryptographic systems that are secure against quantum attacks. We analyze the implications of these systems on the infrastructure of current networks and will compare in detail these algorithms and their respective strengths, weaknesses, and trade-offs. We evaluate the feasibility of post-quantum encryption (PQC) algorithms in resource-constrained IoT devices using the ESP-WROOM-32 microcontroller. Three cryptographic schemes were implemented and compared.
Although quantum computing is still in its nascent age, its evolution threatens the most popular public-key encryption systems. Such systems are essential for today's Internet security due to their ability for solving the key distribution problem and for providing high security in insecure communications channels that allow for accessing websites or for exchanging e-mails, financial transactions, digitally signed documents, military communications or medical data. Cryptosystems like Rivest-Shamir-Adleman (RSA), elliptic curve cryptography (ECC) or Diffie-Hellman have spread worldwide and are part of diverse key Internet standards like Transport Layer Security (TLS), which are used both by traditional computers and Internet of Things (IoT) devices. It is especially difficult to provide high security to IoT devices, mainly because many of them rely on batteries and are resource constrained in terms of computational power and memory, which implies that specific energy-efficient and lightweight algorithms need to be designed and implemented for them. These restrictions become relevant challenges when implementing cryptosystems that involve intensive mathematical operations and demand substantial computational resources, which are often required in applications where data privacy has to be preserved for the long term, like IoT applications for defense, mission-critical scenarios or smart healthcare. Quantum computing threatens such a long-term IoT device security and researchers are currently developing solutions to mitigate such a threat. This article provides a survey on what can be called post-quantum IoT systems (IoT systems protected from the currently known quantum computing attacks): the main post-quantum cryptosystems and initiatives are reviewed, the most relevant IoT architectures and challenges are analyzed, and the expected future trends are indicated. Thus, this article is aimed at providing a wide view of post-quantum IoT security and give useful guidelines to the future post-quantum IoT developers.
The Internet of Things (IoT) has revolutionized the way devices communicate and interact, enabling seamless integration into various aspects of daily life by billions of connected devices equipped with small, embedded controllers that monitor and manage our increasingly interconnected world. The swift growth of IoT devices has led to significant concerns about data security and privacy. Traditional cryptographic algorithms, usually lightweight cryptography, are effective against classical computing threats. However, they are vulnerable to attacks from emerging quantum computing technologies, which can quickly solve the mathematically hard problems used in classical cryptography. Post-Quantum Cryptography (PQC) offers promising solution by providing cryptographic primitives resistant to quantum attacks. This chapter addresses challenges posed by resource constrained IoT devices, like limited processing power and memory. It also explores the integration of PQC algorithms suitable for IoT environments, considering factors like computational efficiency and resistance to quantum attacks.
Cryptographic algorithms are crucial for secure communication in the Internet of Things (IoT). Quantum computers threaten public key cryptography algorithms like RSA (Rivest, Shamir, Adleman) and Diffie-Hellman (DH) key exchange schemes, which are widely in use today. As cryptographic algorithms are the foundation of secure internet communication, the development of Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC) is essential to protect transactions over the internet. However, solutions like Quantum Key Distribution require heavy infrastructure. So, it is not feasible for the Internet of Things with fewer resources in computing power and form factor. Post-Quantum Cryptography is helpful on these devices. But, it needs further developments and improvements. This paper analyzes cryptography algorithms and protocols of IoT with different categories. Integrated PQC of National Institute of Standards and Technology (NIST) third level finalists on Raspberry Pi 4 (RPI4) board with Linux operating system. The performance of Post-Quantum Cryptography schemes for IoT has been evaluated. Finally, a Post-Quantum Cryptography scheme has been suggested for the Internet of Things based on the performance analysis.
The increasing ubiquity of Internet of Things (IoT) devices has necessitated robust security measures, especially with the impending threat of quantum computing to conventional cryptographic protocols.In this study, we address the imperative of selecting an optimized post-quantum cryptographic algorithm tailored for implementation on resource-constrained IoT devices while ensuring compliance with stringent security standards.This research employs a comprehensive evaluation framework that considers the unique constraints of IoT devices, including limited computational capabilities and memory resources.Furthermore, our assessment accounts for the diverse security requirements stipulated by prevailing standards to guarantee resilience against both classical and quantum threats.Through a systematic analysis of various post-quantum cryptographic algorithms, encompassing factors such as computational efficiency and resistance to quantum attacks, this study identifies a select set of algorithms that exhibit promising suitability for IoT device deployment.The evaluation considers renowned standards, including NIST's Post-Quantum Cryptography Standardization initiative to align with industry best practices and interoperability.The findings presented in this study offer guidance to IoT device manufacturers, system architects, and security practitioners in making informed decisions regarding the adoption of post-quantum cryptographic algorithms.The selected algorithms not only demonstrate adeptness in mitigating quantum threats but also address resource constraints inherent in IoT environments, ensuring a secure foundation for the rapidly expanding ecosystem of interconnected devices.
The Internet of Things (IoT) is involved in almost every industry, paving the way for innovative applications, including smart cities, intelligent systems, smart homes, smart agriculture, healthcare, and more. However, due to their asset value, these applications are under continuous and evolving cyberattacks. Furthermore, the advent of quantum computing presents a severe threat to traditional cryptographic methods that typically secure IoT systems, potentially rendering existing security mechanisms ineffective against quantum-enabled attacks. To tackle quantum-enabled and traditional cyberattacks, post-quantum cryptography (PQC) has emerged as a promising solution for providing future-proof security for IoT devices and networks against the quantum computing threat. PQC algorithms can resist cyberattacks from classical and quantum computers, ensuring long-term security solutions. This article explores the integration of PQC into practical IoT systems. It highlights the vulnerabilities of classical cryptographic methods and the necessity of transitioning to quantum-resistant solutions. Moreover, the implementation of PQC on IoT systems is analyzed. By proactively exploring the opportunities and challenges associated with PQC, this research lays out future directions for implementing robust, scalable, and secure IoT systems.