The Internet of Things (IoT) is a growing area of technology and has been identified as a key tool for enhancing industries' operation and performance. As IoT deployment rises worldwide, so do the threats; hence, security, especially authen-tication and integrity, is a critical consideration. One significant future threat is quantum attacks, which can only be defeated using Post-Quantum (PQ) cryptosystems. New Digital Signature (DS) standards for PQ security have been selected by the US National Institute of Standards and Technology (NIST). However, IoT comes with its own technical challenges from the constrained resources allocated to sensors and other similar devices. As a consequence, the use and suitability of these PQ schemes for IoT remains an open research area. In this paper, we identify an IoT architecture built from three distinct layers represented by a server, a gateway and an IoT device, respectively. We first test PQ DS scheme standards and compare them with current standards in order to assess their practicality for use in this architecture to provide authentication and integrity. Then, we select the most suitable PQ scheme at each layer according to the features of the corresponding device (server, gateway, IoT device) and the security property (authentication, integrity). We finally carry out experiments on our selection and provide an architectural model for making IoT communication and interaction PQ secure.
The Internet of Things (IoT) is a growing area of technology and has been identified as a key tool for enhancing industries' operation and performance. As IoT deployment rises worldwide, so do the threats; hence, security, especially authen-tication and integrity, is a critical consideration. One significant future threat is quantum attacks, which can only be defeated using Post-Quantum (PQ) cryptosystems. New Digital Signature (DS) standards for PQ security have been selected by the US National Institute of Standards and Technology (NIST). However, IoT comes with its own technical challenges from the constrained resources allocated to sensors and other similar devices. As a consequence, the use and suitability of these PQ schemes for IoT remains an open research area. In this paper, we identify an IoT architecture built from three distinct layers represented by a server, a gateway and an IoT device, respectively. We first test PQ DS scheme standards and compare them with current standards in order to assess their practicality for use in this architecture to provide authentication and integrity. Then, we select the most suitable PQ scheme at each layer according to the features of the corresponding device (server, gateway, IoT device) and the security property (authentication, integrity). We finally carry out experiments on our selection and provide an architectural model for making IoT communication and interaction PQ secure.
The rapid expansion of the Internet of Things (IoT) has connected billions of devices, creating a global network that manages everything from smart homes to critical industrial infrastructure. However, this connectivity faces an existential threat: the rise of Quantum Computing. Standard encryption methods like RSA and ECC, which currently protect these devices, will be easily broken by future quantum computers using Shor's Algorithm. While the National Institute of Standards and Technology (NIST) has standardized new "Post-Quantum" algorithms (like Kyber and Dilithium), simply plugging them into small IoT devices is not easy. These new algorithms are often heavy, and IoT devices have very limited battery and processing power. This paper bridges this gap by proposing "PQ-IoT", a complete, end-to-end security framework designed specifically for the real-world constraints of IoT. Unlike previous studies that look at algorithms in isolation, we designed a unified system with three layers: (1) A robust Hybrid Cryptosystem (X25519 + Kyber-768) for secure servers, (2) A lightweight encryption module (Kyber-512) for battery-powered sensors, and (3) A fast authentication mechanism (ML-DSA-44) for gateways. We built a virtual laboratory using ARM64 emulation to test this framework. Our results show that the entire system is incredibly efficient, with encryption taking only 0.20 ms and verification taking 0.50 ms. This proves that we can secure the future of IoT without sacrificing performance.
The rapid expansion of Internet of Things (IoT) ecosystems has introduced significant security challenges due to resource-constrained devices, heterogeneous network architectures, and largescale connectivity. Traditional authentication and key exchange mechanisms, primarily based on classical cryptographic algorithms such as RSA and ECC, are vulnerable to future quantum computing attacks. The emergence of quantum algorithms, particularly Shor’s algorithm, threatens the long-term confidentiality and integrity of IoT communications. This paper proposes a Quantum-Resistant Authentication and Key Exchange Protocol specifically designed for secure IoT architectures. The proposed framework integrates post-quantum cryptographic primitives, including lattice-based key exchange mechanisms and hash-based authentication schemes, optimized for low computational overhead suitable for constrained IoT devices. The protocol ensures mutual authentication, forward secrecy, and resistance against quantum adversaries while maintaining minimal communication latency. Security analysis demonstrates robustness against replay, man-in-the-middle, and key-compromise attacks. Performance evaluation shows that the proposed solution achieves a balance between quantum security strength and resource efficiency, making it suitable for next-generation IoT deployments in smart cities, healthcare systems, and industrial automation.
The increasing ubiquity of Internet of Things (IoT) devices has necessitated robust security measures, especially with the impending threat of quantum computing to conventional cryptographic protocols.In this study, we address the imperative of selecting an optimized post-quantum cryptographic algorithm tailored for implementation on resource-constrained IoT devices while ensuring compliance with stringent security standards.This research employs a comprehensive evaluation framework that considers the unique constraints of IoT devices, including limited computational capabilities and memory resources.Furthermore, our assessment accounts for the diverse security requirements stipulated by prevailing standards to guarantee resilience against both classical and quantum threats.Through a systematic analysis of various post-quantum cryptographic algorithms, encompassing factors such as computational efficiency and resistance to quantum attacks, this study identifies a select set of algorithms that exhibit promising suitability for IoT device deployment.The evaluation considers renowned standards, including NIST's Post-Quantum Cryptography Standardization initiative to align with industry best practices and interoperability.The findings presented in this study offer guidance to IoT device manufacturers, system architects, and security practitioners in making informed decisions regarding the adoption of post-quantum cryptographic algorithms.The selected algorithms not only demonstrate adeptness in mitigating quantum threats but also address resource constraints inherent in IoT environments, ensuring a secure foundation for the rapidly expanding ecosystem of interconnected devices.
Quantum computing poses a significant threat to classical asymmetric cryptography, which is essential for ensuring confidentiality, authentication, and key exchange in contemporary digital infrastructures. Although post-quantum cryptography (PQC) provides mechanisms that resist quantum attacks, its implementation in Internet of Things (IoT) systems is challenged by constrained resources, including limitations in computation, memory, energy, latency, and bandwidth, and the heterogeneity of devices. This paper offers a comprehensive narrative review of PQC approaches applicable to IoT, systematically organizing 30 peer-reviewed studies published between 2022 and 2026 across four layers: device, communication, distributed trust, and application. Additionally, the review examines two cross-cutting dimensions, privacy and side-channel resistance. The analysis indicates a significant prevalence of lattice-based schemes, hybrid strategies, and integrations with blockchain technology, zero-knowledge proofs, federated learning, homomorphic encryption, AI, and Zero Trust architectures. Notably, key gaps remain in side-channel evaluation, migration pathways, deployment costs, and real-world validation—issues that are particularly critical given the long lifecycles of IoT devices and the ongoing threat of “harvest now, decrypt later” attacks.
The growth of quantum computing reveals a series of significant threats to cryptographic systems known today, such as RSA, ECC, and Diffie-Hellman, which are extremely important for Internet security, but are threatened by the increase in possible quantum attacks. The area of public and private key cryptography is vast. Therefore, this article addresses post-quantum cryptography (PQC) algorithms and the challenges of implementing them in Internet of Things (IoT) devices, given the difficulty of application due to restricted resources, such as RAM and clock speed . To this end, we will discuss the need for standardization of algorithms considering low-resource IoT devices, prioritizing RAM over ROM, meeting the needs of low-memory devices, which are lighter. The National Institute of Standards and Technology (NIST) has validated four cryptographic systems that are secure against quantum attacks. We analyze the implications of these systems on the infrastructure of current networks and will compare in detail these algorithms and their respective strengths, weaknesses, and trade-offs. We evaluate the feasibility of post-quantum encryption (PQC) algorithms in resource-constrained IoT devices using the ESP-WROOM-32 microcontroller. Three cryptographic schemes were implemented and compared.
The Internet of Things (IoT) has grown rapidly, transforming various aspects of daily life into intelligent systems capable of collecting and exchanging data in real time. At the same time, advances in quantum computing have given rise to powerful quantum computers capable of processing complex tasks at unprecedented speed. This disparity between the limited resources of IoT devices and the capabilities of quantum computers poses significant security challenges. Quantum computers introduce new vulnerabilities that threaten IoT systems, particularly in critical applications such as connected healthcare, industrial networks, smart infrastructure, and secure embedded systems. This study reviews the existing literature on post-quantum cryptography (PQC) applied to IoT devices. It analyzes the characteristics and security requirements of IoT environments, current security technologies, and unresolved issues. It highlights the growing threat of post-quantum attacks and the need to adapt security strategies. Finally, the study explores post-quantum code-based cryptosystems as solutions to enhance the security of resource-constrained IoT applications and ensure their resilience against future challenges.