In this paper, we deal with the deployment of Post-Quantum Cryptography (PQC) in Internet of Things (IoT). Concretely, we focus on the MQTT (Message Queuing Telemetry Transport) protocol that is widely used in IoT services. The paper presents our novel quantum-resistant security proposal for the MQTT protocol that supports secure broadcast. Our solution omits using TLS with the handshake causing delay and is suitable for sending irregular short messages. Finally, we show how our solution can practically affect concrete use cases by the performance results of the proposed solution.
In this paper, we deal with the deployment of Post-Quantum Cryptography (PQC) in Internet of Things (IoT). Concretely, we focus on the MQTT (Message Queuing Telemetry Transport) protocol that is widely used in IoT services. The paper presents our novel quantum-resistant security proposal for the MQTT protocol that supports secure broadcast. Our solution omits using TLS with the handshake causing delay and is suitable for sending irregular short messages. Finally, we show how our solution can practically affect concrete use cases by the performance results of the proposed solution.
The proliferation of Internet of Things (IoT) devices that use the Message Queuing Telemetry Transport (MQTT) protocol poses significant security challenges in the emerging quantum computing era. Current Transport Layer Security (TLS) implementations rely on classical cryptographic algorithms vulnerable to Shor's algorithm. This paper proposes PQ-MQTT, a hybrid post-quantum secure communication protocol that integrates ML-KEM-768 with X25519 for key encapsulation and a lightweight session-key derivation mechanism optimized for resource-constrained IoT publishers. We present a formal security analysis under the Quantum Random Oracle Model (QROM), demonstrating resilience against store-now-decryptlater attacks. Experimental evaluation on the Raspberry Pi 4, ESP32, and Arduino Nano 33 platforms shows that PQ-MQTT achieves handshake latencies of127.3ms,412.7ms, and1,847.2ms, respectively, with 18.2 KB of additional memory overhead. A comparative analysis of pure post-quantum and classical TLS implementations shows energy reductions of23.5%−40.5%relative to pure PQC, achieved through our hybrid optimization approach, while maintaining 94.2 % throughput efficiency.
The rapid proliferation of Internet of Things (IoT) devices has introduced significant security challenges, particularly with the looming threat posed by quantum computing to classical cryptographic algorithms. This paper explores the integration of quantum-resistant cryptographic techniques to secure IoT ecosystems against future quantum attacks. We analyze the vulnerabilities inherent in traditional cryptographic approaches and discuss the implementation feasibility of post-quantum cryptography (PQC) in resource-constrained IoT devices. The study further highlights key PQC algorithms suitable for IoT and evaluates their performance impact. A comparative analysis graph of classical versus quantum-resistant algorithms in IoT environments is presented. This work aims to provide insights and recommendations for adopting quantum-resistant solutions to future-proof IoT security.
The use of the MQTT (Message Queuing Telemetry Transport) communication protocol in the Industry 4.0 faces the challenge of data protection. The security layer provided by Transport Layer Security (TLS) is threatened by the emergence of quantum computers, accelerating the need for MQTT to sup-port post-quantum algorithms. This work evaluates secure imple-mentations of MQTT with pre-quantum cryptography algorithms (those used nowadays) and with hybrid algorithms, combining pre and post-quantum techniques. In both cases, the system performance is assessed in terms of memory consumption and CPU cycles, identifying the main challenges for the deployment of hybrid cryptography in an industrial Internet of Things context.
The Internet of Things (IoT) is involved in almost every industry, paving the way for innovative applications, including smart cities, intelligent systems, smart homes, smart agriculture, healthcare, and more. However, due to their asset value, these applications are under continuous and evolving cyberattacks. Furthermore, the advent of quantum computing presents a severe threat to traditional cryptographic methods that typically secure IoT systems, potentially rendering existing security mechanisms ineffective against quantum-enabled attacks. To tackle quantum-enabled and traditional cyberattacks, post-quantum cryptography (PQC) has emerged as a promising solution for providing future-proof security for IoT devices and networks against the quantum computing threat. PQC algorithms can resist cyberattacks from classical and quantum computers, ensuring long-term security solutions. This article explores the integration of PQC into practical IoT systems. It highlights the vulnerabilities of classical cryptographic methods and the necessity of transitioning to quantum-resistant solutions. Moreover, the implementation of PQC on IoT systems is analyzed. By proactively exploring the opportunities and challenges associated with PQC, this research lays out future directions for implementing robust, scalable, and secure IoT systems.
The Internet of Things (IoT) has revolutionized the way devices communicate and interact, enabling seamless integration into various aspects of daily life by billions of connected devices equipped with small, embedded controllers that monitor and manage our increasingly interconnected world. The swift growth of IoT devices has led to significant concerns about data security and privacy. Traditional cryptographic algorithms, usually lightweight cryptography, are effective against classical computing threats. However, they are vulnerable to attacks from emerging quantum computing technologies, which can quickly solve the mathematically hard problems used in classical cryptography. Post-Quantum Cryptography (PQC) offers promising solution by providing cryptographic primitives resistant to quantum attacks. This chapter addresses challenges posed by resource constrained IoT devices, like limited processing power and memory. It also explores the integration of PQC algorithms suitable for IoT environments, considering factors like computational efficiency and resistance to quantum attacks.
Abstract With the emergence of quantum computing, traditional cryptographic algorithms face the threat of being compromised, necessitating the development of quantum-resistant alternatives. The Internet of Things (IoT) paradigm presents unique security challenges due to its vast scale and resource-constrained devices. This research aims to address these challenges by proposing a novel quantum-resistant cryptographic algorithm QuantIoT specifically designed for securing IoT devices. The research begins by evaluating the vulnerabilities of existing cryptographic algorithms against quantum attacks and identifying the need for post-quantum solutions in the IoT context. Various families of post quantum cryptographic algorithms, including lattice based and hash based schemes, are examined to assess their suitability for securing IoT devices. Based on the analysis, a novel quantum-resistant cryptographic algorithm tailored for IoT devices is proposed. The algorithm takes into account the limited computational capabilities, power constraints, and communication requirements of IoT devices while offering strong defence against both conventional and quantum threats. The proposed algorithm is evaluated through simulations and practical experiments on a representative IoT platform. Performance metrics, including computation time, memory usage, and communication overhead, are measured and compared against traditional cryptographic algorithms. The results show that the suggested quantum-resistant technique for protecting IoT devices is workable and effective. This research contributes to the growing body of knowledge on post-quantum cryptography and provides valuable insights for the design and implementation of secure IoT systems in the face of quantum threats.