The seamless integration of Unmanned Aerial Systems (UAS) into public airspace necessitates a robust UAV Traffic Management (UTM) system. Information security in communications plays a pivotal role in ensuring the operational safety of the UTM. Maintaining the integrity and authentication of unicast communications, such as command and video information, is imperative to thwart tampering and impersonation. Encryption emerges as an optimal solution for safeguarding such data. Efficient utilization of symmetrical encryption mandates the imple-mentation of secure key exchange mechanisms. However, intro-ducingAuthenticated Key Exchange (AKE) standards on diminutive Unmanned Aerial Vehicles (UAVs) encounters problems due to hardware limitations. To surmount this challenge, lightweight cryptographic algorithms tailored for resource-constrained hard-ware have been developed. Nonetheless, both lightweight and conventional cryptographic algorithms are susceptible to quantum computing threats. In response, post-quantum cryptographic primitives are undergoing standardization. This study assesses post-quantumKey Encapsulation Mechanism (KEM) candidates, namely CRYSTALS-Kyber, Hamming Quasi-Cyclic (HQC), and BIKE, on hardware resembling small UAVs. The evaluation of these algorithms focuses on computation time, considering real-time tasks during flights. The findings affirm the viability of employing unmodified standards on resource-constrained hardware concurrently with other priority tasks. Furthermore, quantum-vulnerable standards are also investigated to compare their performance against their more secure counterparts. All three post-quantum KEM candidates demonstrate usability in this environment, with CRYSTALS-Kyber being recommended for its superior performance, even surpassing certain prevailing standards.
The seamless integration of Unmanned Aerial Systems (UAS) into public airspace necessitates a robust UAV Traffic Management (UTM) system. Information security in communications plays a pivotal role in ensuring the operational safety of the UTM. Maintaining the integrity and authentication of unicast communications, such as command and video information, is imperative to thwart tampering and impersonation. Encryption emerges as an optimal solution for safeguarding such data. Efficient utilization of symmetrical encryption mandates the imple-mentation of secure key exchange mechanisms. However, intro-ducingAuthenticated Key Exchange (AKE) standards on diminutive Unmanned Aerial Vehicles (UAVs) encounters problems due to hardware limitations. To surmount this challenge, lightweight cryptographic algorithms tailored for resource-constrained hard-ware have been developed. Nonetheless, both lightweight and conventional cryptographic algorithms are susceptible to quantum computing threats. In response, post-quantum cryptographic primitives are undergoing standardization. This study assesses post-quantumKey Encapsulation Mechanism (KEM) candidates, namely CRYSTALS-Kyber, Hamming Quasi-Cyclic (HQC), and BIKE, on hardware resembling small UAVs. The evaluation of these algorithms focuses on computation time, considering real-time tasks during flights. The findings affirm the viability of employing unmodified standards on resource-constrained hardware concurrently with other priority tasks. Furthermore, quantum-vulnerable standards are also investigated to compare their performance against their more secure counterparts. All three post-quantum KEM candidates demonstrate usability in this environment, with CRYSTALS-Kyber being recommended for its superior performance, even surpassing certain prevailing standards.
ABSTRACT This paper presents a simulation- and model-based study — all results are derived from validated simulation frameworks rather than physical hardware measurements — of the post-quantum migration of unmanned aerial vehicle (UAV) command-and-control links. The advent of cryptographically relevant quantum computers (CRQCs) fundamentally threatens the security of unmanned aerial systems (UAS), particularly command and control links that rely on classical public-key cryptography. Compounded by "harvest now, decrypt later” strategies, this necessitates a proactive transition to post-quantum cryptography (PQC). We develop a quantum threat model for UAV communications and evaluates a migration pathway anchored by the NIST-standardized ML-KEM (Kyber) algorithm. We model and benchmark ML-KEM on a simulated ARM Cortex-M4-class flight controller plat-form, analysing computational performance, memory footprint, energy consumption, and real-time scheduling behaviour. Results demonstrate that ML-KEM-768 encapsulation reduces latency by approximately 39% compared to elliptic curve Diffie-Hellman, while a hybrid ECDH+ML-KEM-768 configuration introduces moderate computational and memory overhead. However, the substantial increase in ciphertext size creates critical fragmentation bottlenecks on low-bandwidth telemetry links such as LoRa, motivating a proposed symmetric key derivation architecture for bandwidth-efficient rekeying. Side-channel analysis under an idealised leakage model confirms susceptibility to correlation power analysis, highlighting the necessity for hardened implementations. Furthermore, real-time operating system scheduling simulations under a two-task discrete-event model reveal that naive task co-scheduling induces significant jitter, necessitating strict priority isolation to maintain flight controller determinism. These findings establish simulation-grounded guidance for integrating PQC into resource-constrained UAV platforms without compromising real-time performance or communication reliability.
The rapid advancement of quantum technology brings significant trouble to the public key encryption standards used presently. Traditional cryptographic algorithms rely on the complexity of a specific number of theoretical problems, but the computational capabilities of large-scale quantum computers would swiftly compromise these specific mathematics-based cryptographic algorithms. These quantum technology-based computers consist of millions of qubits which can enable them to damage nearly all modern public-key cryptographic systems. This security issue is particularly concerning Internet of Things (IoT) devices, which typically have limited resources and are thus more susceptible to emerging threats from quantum computing. To address this concern, the National Institute of Standards and Technology (NIST) has started the process of standardizing Post-Quantum Cryptography (PQC). In this paper, a detailed taxonomy of lightweight PQC algorithms are presented. The performance analysis of NIST Round 3 finalist (CRYSTALS-Kyber, SABER, NTRU and NTRU Encrypt) is done on a real Unmanned Aerial Vehicle (UAV) environment. The performance of these algorithms is analyzed with respect to the ten essential metrics such as throughput, latency, power consumption, energy consumption, memory usage, clock cycles, etc., for different payloads. The experimental results for each performance metrics is plotted individually for better analysis. The experimental result show that the SABER cipher outperforms other post-quantum ciphers.
Unencrypted communications between unmanned aerial vehicles (UAVs) are susceptible to various security attacks, such as interception and spoofing. Both symmetric and asymmetric cryptography currently allow for secure communication between parties. However, industry and academia are working on implementing quantum computers, which will invalidate several of the most widely used cryptographic algorithms. As researchers develop novel quantum encryption methods, they will need standardized testing approaches to determine which are most optimal, especially for the unique characteristics of UAV systems. This paper describes a methodology to test and measure the efficiency of key exchange algorithms for a UAV communicating with a ground control station (GCS). The method requires a framework that models a UAV performing tasks while communicating in encrypted messages with the GCS. In addition, the calculations used for comparing algorithms require a purpose-built bandwidth equation for the quantum algorithm. The first test of this methodology is an experiment designed to compare classical key exchange with the 256-bit Advanced Encryption Standard (AES-256) and quantum key distribution (QKD) used with a variety of parameters in the framework. A comparison of the runtime of each model facilitates the evaluation of each key exchange algorithm for UAV systems. This methodology can be used to test the efficiency of other post-quantum cryptographic algorithms in the future.
Unmanned Aerial Vehicles (UAVs), commonly known as drones, are increasingly being employed across a broad spectrum of applications, ranging from military operations to commercial purposes. However, as UAVs become more integrated into everyday life, security and privacy concerns are similarly escalating due to vulnerabilities arising from operating on open wireless channels and having limited onboard computational resources. Moreover, with the emergence of quantum computers, conventional cryptographic methods that ensure the security and privacy of UAV communications are at severe risk. These risks encompass the possibility of unauthorized access, breaches of data, and cyber-physical attacks that jeopardize the integrity, confidentiality, and availability of UAV operations. Quantum computers are expected to break the conventional cryptography methods, such as symmetric and asymmetric schemes, with the support of Grover’s and Shor’s algorithms, respectively. Consequently, traditional cryptographic algorithms must give way to quantum-resistant algorithms, referred to as Post-Quantum Cryptography (PQC) algorithms. Although researchers actively develop, test, and standardize new PQC algorithms, the threat persists despite the progress made through these consistent efforts. This review article first examines the security and privacy landscape, including threats and requirements of UAVs. This article also discusses PQC and various PQC families and the status of the NIST’s implementation and standardization process. Lastly, we explore challenges and future directions in implementing PQC for UAVs.
With the widespread deployment of unmanned aerial vehicles (UAVs) in both military and civilian domains, the demand for secure and encrypted communications in UAV networks integrated with ground stations has become increasingly prominent. Authentication and key agreement protocols are widely regarded as essential technical mechanisms for ensuring the security of data transmission in wireless communication environments. However, the rapid advancement of quantum computing technologies poses potential security threats to conventional protocols based on elliptic curve cryptography. To address these challenges, this paper proposes a quantum-secure authentication and key agreement protocol tailored for UAV–ground station communication scenarios. By incorporating Crystal-Kyber, the proposed protocol ensures quantum resistance while striving to minimize system computational overhead. The results of the informal security analysis indicate that the proposed protocol can effectively withstand a variety of known attacks. In addition, comprehensive comparative evaluations with existing related protocols demonstrate that, while maintaining low computational overhead, the proposed scheme exhibits stronger robustness in terms of security and functional properties.
Current improvements in quantum computing present a substantial challenge to classical cryptographic systems, which typically rely on problems that can be solved in polynomial time using quantum algorithms. Consequently, post-quantum cryptography (PQC) has emerged as a promising solution to emerging quantum-based cryptographic challenges. The greatest threat is public-key cryptosystems, which are primarily responsible for key exchanges. In PQC, key encapsulation mechanisms (KEMs) are crucial for securing key exchange protocols, particularly in Internet communication, virtual private networks (VPNs), and secure messaging applications. CRYSTALS-Kyber and NTRU are two well-known PQC KEMs offering robust security in the quantum world. However, even when quantum computers are functional, they are not easily accessible. IoT devices will not be able to utilize them directly, so there will still be a requirement to protect IoT devices from quantum attacks. Concerns such as limited computational power, energy efficiency, and memory constraints in devices such as those used in IoTs, embedded systems, and smart cards limit the use of these techniques in constrained environments. These concerns always arise there. To address this issue, this study conducts a broad comparative analysis of Kyber and NTRU, with special focus on their security, performance, and implementation efficiency in such environments (IOT/constrained environments). In addition, a case study was conducted by applying KEMs to a low-power embedded device to analyze their performance in real-world scenarios. These results offer an important comparison for cyber security engineers and cryptographers who are involved in integrating post-quantum cryptography into resource-constrained devices.