The Internet of Things (IoT) has become a reality: Healthcare, smart cities, intelligent manufacturing, e-agriculture, real-time traffic controls, environment monitoring, camera security systems, etc. are developing services that rely on an IoT infrastructure. Thus, ensuring the security of devices during operation and information exchange becomes a fundamental requirement inherent in providing safe and reliable IoT services. NIST requires hardware implementations that are protected against SCAs for the lightweight cryptography standardization process. These attacks are powerful and non-invasive and rely on observing the physical properties of IoT hardware devices to obtain secret information. In this paper, we present a survey of research on hardware security for the IoT. In addition, the challenges of IoT in the quantum era with the first results of the NIST standardization process for post-quantum cryptography are discussed.
The Internet of Things (IoT) has become a reality: Healthcare, smart cities, intelligent manufacturing, e-agriculture, real-time traffic controls, environment monitoring, camera security systems, etc. are developing services that rely on an IoT infrastructure. Thus, ensuring the security of devices during operation and information exchange becomes a fundamental requirement inherent in providing safe and reliable IoT services. NIST requires hardware implementations that are protected against SCAs for the lightweight cryptography standardization process. These attacks are powerful and non-invasive and rely on observing the physical properties of IoT hardware devices to obtain secret information. In this paper, we present a survey of research on hardware security for the IoT. In addition, the challenges of IoT in the quantum era with the first results of the NIST standardization process for post-quantum cryptography are discussed.
The Internet of Things (IoT) has grown rapidly, transforming various aspects of daily life into intelligent systems capable of collecting and exchanging data in real time. At the same time, advances in quantum computing have given rise to powerful quantum computers capable of processing complex tasks at unprecedented speed. This disparity between the limited resources of IoT devices and the capabilities of quantum computers poses significant security challenges. Quantum computers introduce new vulnerabilities that threaten IoT systems, particularly in critical applications such as connected healthcare, industrial networks, smart infrastructure, and secure embedded systems. This study reviews the existing literature on post-quantum cryptography (PQC) applied to IoT devices. It analyzes the characteristics and security requirements of IoT environments, current security technologies, and unresolved issues. It highlights the growing threat of post-quantum attacks and the need to adapt security strategies. Finally, the study explores post-quantum code-based cryptosystems as solutions to enhance the security of resource-constrained IoT applications and ensure their resilience against future challenges.
The Internet of Things (IoT) is involved in almost every industry, paving the way for innovative applications, including smart cities, intelligent systems, smart homes, smart agriculture, healthcare, and more. However, due to their asset value, these applications are under continuous and evolving cyberattacks. Furthermore, the advent of quantum computing presents a severe threat to traditional cryptographic methods that typically secure IoT systems, potentially rendering existing security mechanisms ineffective against quantum-enabled attacks. To tackle quantum-enabled and traditional cyberattacks, post-quantum cryptography (PQC) has emerged as a promising solution for providing future-proof security for IoT devices and networks against the quantum computing threat. PQC algorithms can resist cyberattacks from classical and quantum computers, ensuring long-term security solutions. This article explores the integration of PQC into practical IoT systems. It highlights the vulnerabilities of classical cryptographic methods and the necessity of transitioning to quantum-resistant solutions. Moreover, the implementation of PQC on IoT systems is analyzed. By proactively exploring the opportunities and challenges associated with PQC, this research lays out future directions for implementing robust, scalable, and secure IoT systems.
The Internet of Things (IoT) now underpins critical systems like healthcare monitors, smart home, smart grids, automotive V2V & V2X networks, and industrial controls but it still relies on classical cryptography, whose security assumptions are vulnerable to quantum computers. A large quantum computer could run Shor’s algorithm to break RSA/ECC and use Grover’s algorithm to accelerate brute-forcing of symmetric keys, undermining the confidentiality and authentication of data in these IoT applications. Researchers have proposed quantum cryptographic solutions. Quantum key distribution (QKD) and quantum random number generators (QRNGs) exploit quantum mechanics to detect eavesdropping and deliver provably secure key material. For example, chip-scale QRNGs can be embedded in IoT sensors to generate true random keys, boosting resistance to brute-force attacks. These quantum techniques provide information-theoretic secrecy, for instance, QKD-generated keys have been used to authenticate smart-grid SCADA. However, most IoT devices are resource-constrained, making direct deployment of conventional QKD hardware challenging. Post-quantum cryptography (PQC) complements quantum methods by providing algorithms such as lattice-based, hash-based that resist quantum attacks on existing hardware. Standardized PQC can be deployed via software updates on legacy IoT nodes, enabling scalable and quantum-safe security within current constraints. Researchers are exploring lightweight PQC for connected cars and e-health sensors. Hybrid approaches combining QKD/QRNG with PQC offer a layered defense. Since QKD protocols are regarded as ‘future-proof’ and PQC standards mature, their combined use will be essential for robust, quantum-safe IoT security. Miniaturizing quantum components such as integrated QKD/QRNG modules and optimizing lightweight PQC schemes for low-power IoT devices are future research directions to secure IoT networks.
Although quantum computing is still in its nascent age, its evolution threatens the most popular public-key encryption systems. Such systems are essential for today's Internet security due to their ability for solving the key distribution problem and for providing high security in insecure communications channels that allow for accessing websites or for exchanging e-mails, financial transactions, digitally signed documents, military communications or medical data. Cryptosystems like Rivest-Shamir-Adleman (RSA), elliptic curve cryptography (ECC) or Diffie-Hellman have spread worldwide and are part of diverse key Internet standards like Transport Layer Security (TLS), which are used both by traditional computers and Internet of Things (IoT) devices. It is especially difficult to provide high security to IoT devices, mainly because many of them rely on batteries and are resource constrained in terms of computational power and memory, which implies that specific energy-efficient and lightweight algorithms need to be designed and implemented for them. These restrictions become relevant challenges when implementing cryptosystems that involve intensive mathematical operations and demand substantial computational resources, which are often required in applications where data privacy has to be preserved for the long term, like IoT applications for defense, mission-critical scenarios or smart healthcare. Quantum computing threatens such a long-term IoT device security and researchers are currently developing solutions to mitigate such a threat. This article provides a survey on what can be called post-quantum IoT systems (IoT systems protected from the currently known quantum computing attacks): the main post-quantum cryptosystems and initiatives are reviewed, the most relevant IoT architectures and challenges are analyzed, and the expected future trends are indicated. Thus, this article is aimed at providing a wide view of post-quantum IoT security and give useful guidelines to the future post-quantum IoT developers.
The internet of things (IoT) has been used in a wide range of applications since its emergence, including smart cities, intelligent systems, smart homes, smart agriculture, and healthcare. IoT systems rely on information processing and sharing, where data leakages may jeopardize their security and privacy. On the other hand, quantum computers are poised to solve complex problems that traditional computers cannot. However, due to the fact that the majority of cyber algorithms are based on significant computational complexity, quantum computing poses a substantial threat to the cyber security of global digital infrastructure, including IoT networks, smart cities, banking, and intelligent infrastructure. This chapter discusses potential security and privacy measures for a post-quantum world against threats posed by quantum computing, including post-quantum cryptography, quantum software testing, post-quantum blockchain technology, and architectural considerations for creating post-quantum secure IoT systems.
The rapid deployment of Internet of Things (IoT) devices across critical infrastructure’s sectors such as healthcare, transportation, and smart cities brings unprecedented security challenges; particularly as quantum computing threatens the classical cryptography. This systematic review analyzes IoT security in relation to post-quantum cryptography (PQC), highlighting vulnerabilities, evolving threat, and cryptographic countermeasures. Using the PRISMA 2020 protocol, our work employed a rigorous and reproducible search strategy, where the initial Boolean query, ((“IoT” OR “Internet of Things”) AND (“Cryptography” OR “Encryption Scheme”) AND “Quantum”), was developed and effectively customized for nine reputable databases to maximize the coverage. From an initial pool of 5,151 publications dated between 2020 and February 12, 2025, a content-based screening was conducted at the title, abstract, and full-text levels. This meticulous filtering resulted in a final corpus of 161 studies deemed relevant for in-depth analysis and synthesis. Then, we categorize and analyze PQC algorithms by vulnerabilities, suitability for resource-constrained IoT environments, performance evaluation, scalability, and quantum resilience. We also identify key limitations in implementations of current cryptographic schemes, including issues in key management and authentication; and outline major challenges such as resource constraints of IoT devices, environmental noise, quantum reversible computing, security vulnerabilities, quantum hardware constraints, and complexities in integration. To counter these threats, we propose a framework of PQC countermeasures and illustrated by a hypothetical case study of PQC adoption in a real-world IoT system. Finally, we propose future research directions in lightweight PQC, hybrid frameworks, improved key management and distribution, addressing quantum distance matters, countering quantum threats, and standardization for IoT environments.