This paper presents lightweight Post-Quantum Cryptography (PQC), identifying its importance for a shift from traditional cryptographic schemes, vulnerable to quantum threats, to efficient PQC algorithms. Lattice-based cryptography stands out owing to its small key sizes and computational efficiency, with CRYSTALS-Kyber and NTRU algorithms being substantial representatives for Internet of Things (IoT) applications. However, PQC implementation in IoT environments has various obstacles to overcome. Minimizing energy consumption, scalability, and hardware limitations remain key challenges for PQC smooth integration into these resource-constrained networks. The present review analyzes the state-of-the-art PQC, makes security and performance comparisons among leading algorithms, and evaluates optimization techniques aimed at reducing resource overheads. Algorithmic refinement, hardware acceleration, and hybrid cryptography are also discussed as methods for mitigating these challenges. The results indicate that continuous research and development efforts should be made to improve the PQC technologies, and thus achieve their practical deployment in IoT systems. Quantum threats in IoT will be, hence, prevented with the employment of secure and scalable IoT ecosystems in a post-quantum world.
This paper presents lightweight Post-Quantum Cryptography (PQC), identifying its importance for a shift from traditional cryptographic schemes, vulnerable to quantum threats, to efficient PQC algorithms. Lattice-based cryptography stands out owing to its small key sizes and computational efficiency, with CRYSTALS-Kyber and NTRU algorithms being substantial representatives for Internet of Things (IoT) applications. However, PQC implementation in IoT environments has various obstacles to overcome. Minimizing energy consumption, scalability, and hardware limitations remain key challenges for PQC smooth integration into these resource-constrained networks. The present review analyzes the state-of-the-art PQC, makes security and performance comparisons among leading algorithms, and evaluates optimization techniques aimed at reducing resource overheads. Algorithmic refinement, hardware acceleration, and hybrid cryptography are also discussed as methods for mitigating these challenges. The results indicate that continuous research and development efforts should be made to improve the PQC technologies, and thus achieve their practical deployment in IoT systems. Quantum threats in IoT will be, hence, prevented with the employment of secure and scalable IoT ecosystems in a post-quantum world.
The rapid deployment of Internet of Things (IoT) devices across critical infrastructure’s sectors such as healthcare, transportation, and smart cities brings unprecedented security challenges; particularly as quantum computing threatens the classical cryptography. This systematic review analyzes IoT security in relation to post-quantum cryptography (PQC), highlighting vulnerabilities, evolving threat, and cryptographic countermeasures. Using the PRISMA 2020 protocol, our work employed a rigorous and reproducible search strategy, where the initial Boolean query, ((“IoT” OR “Internet of Things”) AND (“Cryptography” OR “Encryption Scheme”) AND “Quantum”), was developed and effectively customized for nine reputable databases to maximize the coverage. From an initial pool of 5,151 publications dated between 2020 and February 12, 2025, a content-based screening was conducted at the title, abstract, and full-text levels. This meticulous filtering resulted in a final corpus of 161 studies deemed relevant for in-depth analysis and synthesis. Then, we categorize and analyze PQC algorithms by vulnerabilities, suitability for resource-constrained IoT environments, performance evaluation, scalability, and quantum resilience. We also identify key limitations in implementations of current cryptographic schemes, including issues in key management and authentication; and outline major challenges such as resource constraints of IoT devices, environmental noise, quantum reversible computing, security vulnerabilities, quantum hardware constraints, and complexities in integration. To counter these threats, we propose a framework of PQC countermeasures and illustrated by a hypothetical case study of PQC adoption in a real-world IoT system. Finally, we propose future research directions in lightweight PQC, hybrid frameworks, improved key management and distribution, addressing quantum distance matters, countering quantum threats, and standardization for IoT environments.
The rapid advancement of quantum computing poses significant threats to classical cryptographic methods, such as Rivest–Shamir–Adleman (RSA) and Elliptic Curve Cryptography (ECC), which currently secure Internet of Things (IoT) and cloud communications. Post-Quantum Cryptography (PQC), particularly lattice-based schemes, has emerged as a promising alternative. CRYSTALS-Kyber, standardized by the National Institute of Standards and Technology (NIST) as ML-KEM, has shown efficiency and practicality for constrained IoT devices. Most existing research has focused on PQC within the Transport Layer Security (TLS) protocol. Consequently, a critical gap exists in understanding PQC’s performance in lightweight IoT protocols. These are Message Queuing Telemetry Transport (MQTT) and Constrained Application Protocol (CoAP), particularly under adverse network conditions. To address this gap, this paper provides a systematic review of the literature on the network resilience and performance of CRYSTALS-Kyber when integrated into these protocols operating over lossy and high-latency networks. Additional challenges include non-standardized integration, resource limitations, and side-channel vulnerabilities. This review provides a structured synthesis of current knowledge, highlights unresolved trade-offs between security and efficiency, and outlines future research directions, including protocol-level optimization, lightweight signature schemes, and resilience testing of PQC-secured IoT protocols under realistic conditions.
The rapid proliferation of Internet of Things (IoT) devices has introduced significant security challenges, particularly with the looming threat posed by quantum computing to classical cryptographic algorithms. This paper explores the integration of quantum-resistant cryptographic techniques to secure IoT ecosystems against future quantum attacks. We analyze the vulnerabilities inherent in traditional cryptographic approaches and discuss the implementation feasibility of post-quantum cryptography (PQC) in resource-constrained IoT devices. The study further highlights key PQC algorithms suitable for IoT and evaluates their performance impact. A comparative analysis graph of classical versus quantum-resistant algorithms in IoT environments is presented. This work aims to provide insights and recommendations for adopting quantum-resistant solutions to future-proof IoT security.
Abstract As the number and characteristics of smart devices change, the concept of the Internet of Things (IoT) emerges. The IoT provides the connected devices with a variety of resources that enable effective communication. At this point, several security issues arise to get the sensitive information behind every communication in the IoT. To provide users with security and privacy, cryptographic schemes are adopted, the most popular being public key cryptographic systems (PKC). However, with the advent of quantum computing, the level of security that can be provided by the PKC schemes is a big question. Another important issue is that the IoT environment is resource‐constrained, which necessitates the implementation of lightweight cryptographic algorithms for better security. In response to these issues, the post‐quantum cryptographic (PQC) schemes are one of the significant developments contributing to IoT security in the post‐quantum world. This article examines the key security issues in the IoT environment and examines the effective solutions found in the literature. The problems in IoT in the quantum era are discussed and appropriate solutions by PKC schemes under limited resources in IoT are focused. As the lattice‐based cryptosystems are more effective, the importance of these schemes in the resource‐constrained IoT is highlighted. This survey also leads to feasible future directions that can support developers and researchers in this field.
The Internet of Things (IoT) is involved in almost every industry, paving the way for innovative applications, including smart cities, intelligent systems, smart homes, smart agriculture, healthcare, and more. However, due to their asset value, these applications are under continuous and evolving cyberattacks. Furthermore, the advent of quantum computing presents a severe threat to traditional cryptographic methods that typically secure IoT systems, potentially rendering existing security mechanisms ineffective against quantum-enabled attacks. To tackle quantum-enabled and traditional cyberattacks, post-quantum cryptography (PQC) has emerged as a promising solution for providing future-proof security for IoT devices and networks against the quantum computing threat. PQC algorithms can resist cyberattacks from classical and quantum computers, ensuring long-term security solutions. This article explores the integration of PQC into practical IoT systems. It highlights the vulnerabilities of classical cryptographic methods and the necessity of transitioning to quantum-resistant solutions. Moreover, the implementation of PQC on IoT systems is analyzed. By proactively exploring the opportunities and challenges associated with PQC, this research lays out future directions for implementing robust, scalable, and secure IoT systems.
The emergence of quantum computing poses significant threats to classical cryptographic systems, particularly in smart urban environments powered by the internet of things (IoT). This chapter explores the sustainability aspects and future prospects of integrating post-quantum cryptography (PQC) into IoT-based infrastructures. It examines various PQC algorithms, their deployment challenges in resource-constrained devices, and the trade-offs between energy efficiency, performance, and security. The chapter also highlights quantum-specific threats, including communication vulnerabilities and supply chain risks, and emphasizes sustainable strategies such as lightweight cryptography, hybrid models, green computing paradigms, and AI-based optimization. Future research directions call for energy-efficient algorithm design, cryptographic hardware co-development, and multidisciplinary collaboration. The study underscores the importance of aligning cryptographic resilience with long-term sustainability goals in smart city systems.