Group communication plays a vital role in our interconnected society, facilitating efficient and secure data exchange among multiple endpoints. The issue pertains to the intricate nature that emerges within the limited settings of the Internet of Things and sensor networks. GKM plays a crucial role in maintaining security in group communication schemes. Existing GKM schemes commonly rely on public-key cryptography, which may be susceptible to potential threats posed by quantum computers. This study investigated the usage of post-quantum GKM schemes in the realm of IoTs. To enhance communication security and efficiency in the era of quantum computing, we made significant progress in implementing a post-quantum GKM scheme. Specifically, we have chosen the SABER Key Encapsulation Mechanism, which is one of the four finalists in the National Institute for Standards and Technology (NIST) process. We also present preliminary simulation results for our scheme.
Group communication plays a vital role in our interconnected society, facilitating efficient and secure data exchange among multiple endpoints. The issue pertains to the intricate nature that emerges within the limited settings of the Internet of Things and sensor networks. GKM plays a crucial role in maintaining security in group communication schemes. Existing GKM schemes commonly rely on public-key cryptography, which may be susceptible to potential threats posed by quantum computers. This study investigated the usage of post-quantum GKM schemes in the realm of IoTs. To enhance communication security and efficiency in the era of quantum computing, we made significant progress in implementing a post-quantum GKM scheme. Specifically, we have chosen the SABER Key Encapsulation Mechanism, which is one of the four finalists in the National Institute for Standards and Technology (NIST) process. We also present preliminary simulation results for our scheme.
In our interconnected society, effective group communication is crucial for facilitating the efficient and secure interchange of data between multiple endpoints, particularly within the complex landscapes of the IoTs and sensor networks. Group Key Management (GKM) arises as a fundamental element for ensuring safety amidst these complexities. However, the emergence of quantum computers has sparked worries about the vulnerability of current GKM schemes that depend on asymmetric cryptography, also known as public-key cryptography. This study investigates post-quantum GKM schemes, concentrating on their integration in the IoT context and addressing the underexplored field of GKM in the context of quantum computing advancements. By examining the security features of GKM protocols, particularly in relation to their resistance to quantum attacks, this study not only identifies current challenges but also outlines a path for future research directions, posing light on potential pathways in this changing landscape.
Quantum computing poses a threat on current cryptography methods, prompting initiatives such as the U.S. National Institute for Standards and Technology (NIST) standardization process toward developing post-quantum cryptographic tools. This process concentrates on deploying “key encapsulation mechanisms” and “signature schemes”, mainly focusing on Group Authenticated key exchange (GAKE), which is crucial for secure group communication while ensuring authentication is immune to quantum attacks. Despite various two-party key exchange designs adaptable for group key exchange protocols with multiple parties, experts face challenges in secure group interactions in a post-quantum environment due to the lack of such group protocols solutions. Addressing the necessity of secure group communication in IoTs, we proposed a GAKE protocol. This paper presents its design and implementation secure under QROM; we compared our initial findings on the “Saber-based GAKE” with a Kyber-based GAKE implementation named “Complied Kyber” proposed by Pablos, focusing on IoTs. Our findings show better efficiency than “Compiled Kyber” regarding overall communication duration, especially when involving up to 2000 participants in group communication. Furthermore, thorough investigation and calculations confirm the Saber-GAKE protocol’s interoperability with IoT contexts. The protocol has worthy computational efficiency, with execution speeds of 0.064 ms on ARM Cortex-M4 and 1.56 ms on ARM Cortex-M0 systems. The memory use is well below the allowed limits, with 50.86 KB on Cortex-M4 and 35.84 KB on Cortex-M0. The performance data validate that the Saber-GAKE protocol can effectively and safely function on IoT devices with limited resources, offering strong protection against quantum computing assaults.
Cryptographic algorithms are crucial for secure communication in the Internet of Things (IoT). Quantum computers threaten public key cryptography algorithms like RSA (Rivest, Shamir, Adleman) and Diffie-Hellman (DH) key exchange schemes, which are widely in use today. As cryptographic algorithms are the foundation of secure internet communication, the development of Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC) is essential to protect transactions over the internet. However, solutions like Quantum Key Distribution require heavy infrastructure. So, it is not feasible for the Internet of Things with fewer resources in computing power and form factor. Post-Quantum Cryptography is helpful on these devices. But, it needs further developments and improvements. This paper analyzes cryptography algorithms and protocols of IoT with different categories. Integrated PQC of National Institute of Standards and Technology (NIST) third level finalists on Raspberry Pi 4 (RPI4) board with Linux operating system. The performance of Post-Quantum Cryptography schemes for IoT has been evaluated. Finally, a Post-Quantum Cryptography scheme has been suggested for the Internet of Things based on the performance analysis.
The Internet of Things (IoT) plays a significant role in shaping different aspects of our lives. IoT devices have become increasingly important due to their ability to connect, collect, and analyze data, automate processes, improve safety and efficiency, and deliver personalized experiences. However, the advancement in quantum computer development poses a significant threat to resource-constrained IoT devices. This new generation of computers can break the classic public-key cryptographic schemes and digital signatures implemented in these IoT devices. While protecting IoT devices from quantum computer attacks poses many challenges, researchers are continuously making significant progress in developing lightweight post-quantum cryptographic algorithms for efficient key exchange mechanisms and digital signature algorithms tailored to IoT devices to overcome this issue. This paper proposes Q-SECURE, a post-Quantum resistant Security Enhancing Cryptography for Unified Resource-constrained device Encryption. A novel scheme that enables any IoT system to leverage the assistance of other devices in the network to gain the capability to generate any proposed post-quantum cryptographic key of a given size using distributed and parallel computing.
The rapid expansion of Internet of Things (IoT) ecosystems has increased the need for communication mechanisms that can remain secure against emerging computational threats. Conventional asymmetric cryptographic schemes, including RSA and Elliptic Curve Cryptography (ECC), are vulnerable to advances in quantum computing due to the ability of Shor's algorithm to undermine their underlying mathematical assumptions. To address these challenges, this paper presents PQ-IoT SecureCom, a quantum-resistant communication framework built using NIST-standardized post-quantum cryptographic primitives. The proposed framework employs ML-KEM (derived from Kyber) for secure key encapsulation and ML-DSA (derived from Dilithium) for digital authentication, combined with AESGCM to ensure data confidentiality and integrity. Additional security mechanisms, including PQC-based device certification, periodic session key updates, and nonce-based timestamp validation, are incorporated to mitigate replay and impersonation attacks. The framework also supports a hybrid operational mode that enables performance comparison between classical and postquantum cryptographic schemes. System behavior is monitored using a real-time dashboard that records cryptographic overhead, communication metrics, and detected security events. Experimental evaluation shows that ML-KEM and ML-DSA significantly enhance security while introducing computational overhead that remains acceptable for contemporary IoT devices. Through automated attack simulations and detailed event logging, PQ-IoT SecureCom demonstrates the practical feasibility of deploying scalable post-quantum security in IoT communication systems.
The Internet of Things (IoT) strongly influences the world economy; this emphasizes the importance of securing all four aspects of the IoT model: sensors, networks, cloud, and applications. Considering the significant value of public-key cryptography threats on IoT system confidentiality, it is vital to secure it. One of the potential candidates to assist in securing public key cryptography in IoT is quantum computing. Although the notion of IoT and quantum computing convergence is not new, it has been referenced in various works of literature and covered by many scholars. Quantum computing eliminates most of the challenges in IoT. This research provides a comprehensive introduction to the Internet of Things and quantum computing before moving on to public-key cryptography difficulties that may be encountered across the convergence of quantum computing and IoT. An enhanced architecture is then proposed for resolving these public-key cryptography challenges using SimuloQron to implement the BB84 protocol for quantum key distribution (QKD) and one-time pad (OTP). The proposed model prevents eavesdroppers from performing destructive operations in the communication channel and cyber side by preserving its state and protecting the public key using quantum cryptography and the BB84 protocol. A modified version is introduced for this IoT situation. A traditional cryptographic mechanism called "one-time pad" (OTP) is employed in hybrid management.