With Internet of Things (IoT) becoming increasingly popular and widespread, the somewhat secure devices could potentially become completely insecure with the emergence of quantum computers. The problem is that a lot of IoT devices in crucial places are not secured and use unencrypted communication or use the current recommended encryption algorithms. This paper explores public key encryption (PKE) with post quantum cryptography (PQC) algorithm Kyber, despite it being usually used as key-encapsulation mechanism (KEM). The proposed approach has been evaluated experimentally. The conducted experiment encrypts the data on one scenario on the IoT device itself and in the other scenario the data is encrypted on a fog node. Obtained results are promising and suggest that quantum resilient public key cryptography is applicable in internet of things.
With Internet of Things (IoT) becoming increasingly popular and widespread, the somewhat secure devices could potentially become completely insecure with the emergence of quantum computers. The problem is that a lot of IoT devices in crucial places are not secured and use unencrypted communication or use the current recommended encryption algorithms. This paper explores public key encryption (PKE) with post quantum cryptography (PQC) algorithm Kyber, despite it being usually used as key-encapsulation mechanism (KEM). The proposed approach has been evaluated experimentally. The conducted experiment encrypts the data on one scenario on the IoT device itself and in the other scenario the data is encrypted on a fog node. Obtained results are promising and suggest that quantum resilient public key cryptography is applicable in internet of things.
Cryptographic algorithms are crucial for secure communication in the Internet of Things (IoT). Quantum computers threaten public key cryptography algorithms like RSA (Rivest, Shamir, Adleman) and Diffie-Hellman (DH) key exchange schemes, which are widely in use today. As cryptographic algorithms are the foundation of secure internet communication, the development of Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC) is essential to protect transactions over the internet. However, solutions like Quantum Key Distribution require heavy infrastructure. So, it is not feasible for the Internet of Things with fewer resources in computing power and form factor. Post-Quantum Cryptography is helpful on these devices. But, it needs further developments and improvements. This paper analyzes cryptography algorithms and protocols of IoT with different categories. Integrated PQC of National Institute of Standards and Technology (NIST) third level finalists on Raspberry Pi 4 (RPI4) board with Linux operating system. The performance of Post-Quantum Cryptography schemes for IoT has been evaluated. Finally, a Post-Quantum Cryptography scheme has been suggested for the Internet of Things based on the performance analysis.
The growth of quantum computing reveals a series of significant threats to cryptographic systems known today, such as RSA, ECC, and Diffie-Hellman, which are extremely important for Internet security, but are threatened by the increase in possible quantum attacks. The area of public and private key cryptography is vast. Therefore, this article addresses post-quantum cryptography (PQC) algorithms and the challenges of implementing them in Internet of Things (IoT) devices, given the difficulty of application due to restricted resources, such as RAM and clock speed . To this end, we will discuss the need for standardization of algorithms considering low-resource IoT devices, prioritizing RAM over ROM, meeting the needs of low-memory devices, which are lighter. The National Institute of Standards and Technology (NIST) has validated four cryptographic systems that are secure against quantum attacks. We analyze the implications of these systems on the infrastructure of current networks and will compare in detail these algorithms and their respective strengths, weaknesses, and trade-offs. We evaluate the feasibility of post-quantum encryption (PQC) algorithms in resource-constrained IoT devices using the ESP-WROOM-32 microcontroller. Three cryptographic schemes were implemented and compared.
Abstract As the number and characteristics of smart devices change, the concept of the Internet of Things (IoT) emerges. The IoT provides the connected devices with a variety of resources that enable effective communication. At this point, several security issues arise to get the sensitive information behind every communication in the IoT. To provide users with security and privacy, cryptographic schemes are adopted, the most popular being public key cryptographic systems (PKC). However, with the advent of quantum computing, the level of security that can be provided by the PKC schemes is a big question. Another important issue is that the IoT environment is resource‐constrained, which necessitates the implementation of lightweight cryptographic algorithms for better security. In response to these issues, the post‐quantum cryptographic (PQC) schemes are one of the significant developments contributing to IoT security in the post‐quantum world. This article examines the key security issues in the IoT environment and examines the effective solutions found in the literature. The problems in IoT in the quantum era are discussed and appropriate solutions by PKC schemes under limited resources in IoT are focused. As the lattice‐based cryptosystems are more effective, the importance of these schemes in the resource‐constrained IoT is highlighted. This survey also leads to feasible future directions that can support developers and researchers in this field.
The expansion of Internet of Things (IoT) ecosystems has created a high demand for secure cryptographic solutions, even in a future with quantum computing capabilities. Traditional mappings, such as RSA or Elliptic Curve Cryptography (ECC), are expected to be broken by Shor's algorithm, driving the realization of post-quantum cryptography (PQC). This work presents a simulative and prototypical framework for assessing PQC integration in IoT communication. With the liboqs library and NS-3 network simulator, along with the Python scripting language, we implement both NIST-standardized algorithms, such as Dilithium (for signatures) and Kyber (for key encapsulation), as well as the classical RSA and ECC baselines. IoT networks of 50-500 virtual nodes are simulated based on IEEE 802.15.4/6LoWPAN with RPL routing. Performance attributes, including encryption/decryption time, key length, packet delivery ratio, latency, and energy consumption, are collected and evaluated. Preliminary results indicate that PQC incurs additional handshake and key overhead, but is relatively practical, with an average overhead of15−25msper processed secure transaction. The effort provides a replicable testbed, showcasing what we consider the best and worst PQC has to offer for resource-constrained IoT. Targeted at master's students and researchers, this book provides an applied approach to investigate quantum-resilient security in IoT. It encourages future expansion to hardware-in-the-loop validation on embedded devices.
The rapid proliferation of Internet of Things (IoT) devices has heightened concerns regarding their security and privacy. Conventional cryptographic methods underpinning IoT security are increasingly threatened by the emergence of quantum computing, which promises to break widely used encryption algorithms such as RSA and ECC. This paper explores post-quantum cryptographic (PQC) algorithms tailored to the resource-constrained nature of IoT environments. It analyzes lattice-based, hash-based, code-based, and multivariate polynomial cryptographic schemes as promising candidates for securing IoT communications against quantum attacks. The paper further discusses implementation challenges, performance considerations, and potential pathways for integrating PQC within existing IoT architectures. Empirical data on computational efficiency and security strength are also presented to guide future deployment.
The rapid advancement of quantum computing poses significant threats to classical cryptographic methods, such as Rivest–Shamir–Adleman (RSA) and Elliptic Curve Cryptography (ECC), which currently secure Internet of Things (IoT) and cloud communications. Post-Quantum Cryptography (PQC), particularly lattice-based schemes, has emerged as a promising alternative. CRYSTALS-Kyber, standardized by the National Institute of Standards and Technology (NIST) as ML-KEM, has shown efficiency and practicality for constrained IoT devices. Most existing research has focused on PQC within the Transport Layer Security (TLS) protocol. Consequently, a critical gap exists in understanding PQC’s performance in lightweight IoT protocols. These are Message Queuing Telemetry Transport (MQTT) and Constrained Application Protocol (CoAP), particularly under adverse network conditions. To address this gap, this paper provides a systematic review of the literature on the network resilience and performance of CRYSTALS-Kyber when integrated into these protocols operating over lossy and high-latency networks. Additional challenges include non-standardized integration, resource limitations, and side-channel vulnerabilities. This review provides a structured synthesis of current knowledge, highlights unresolved trade-offs between security and efficiency, and outlines future research directions, including protocol-level optimization, lightweight signature schemes, and resilience testing of PQC-secured IoT protocols under realistic conditions.