The growth of quantum computing reveals a series of significant threats to cryptographic systems known today, such as RSA, ECC, and Diffie-Hellman, which are extremely important for Internet security, but are threatened by the increase in possible quantum attacks. The area of public and private key cryptography is vast. Therefore, this article addresses post-quantum cryptography (PQC) algorithms and the challenges of implementing them in Internet of Things (IoT) devices, given the difficulty of application due to restricted resources, such as RAM and clock speed . To this end, we will discuss the need for standardization of algorithms considering low-resource IoT devices, prioritizing RAM over ROM, meeting the needs of low-memory devices, which are lighter. The National Institute of Standards and Technology (NIST) has validated four cryptographic systems that are secure against quantum attacks. We analyze the implications of these systems on the infrastructure of current networks and will compare in detail these algorithms and their respective strengths, weaknesses, and trade-offs. We evaluate the feasibility of post-quantum encryption (PQC) algorithms in resource-constrained IoT devices using the ESP-WROOM-32 microcontroller. Three cryptographic schemes were implemented and compared.
The growth of quantum computing reveals a series of significant threats to cryptographic systems known today, such as RSA, ECC, and Diffie-Hellman, which are extremely important for Internet security, but are threatened by the increase in possible quantum attacks. The area of public and private key cryptography is vast. Therefore, this article addresses post-quantum cryptography (PQC) algorithms and the challenges of implementing them in Internet of Things (IoT) devices, given the difficulty of application due to restricted resources, such as RAM and clock speed . To this end, we will discuss the need for standardization of algorithms considering low-resource IoT devices, prioritizing RAM over ROM, meeting the needs of low-memory devices, which are lighter. The National Institute of Standards and Technology (NIST) has validated four cryptographic systems that are secure against quantum attacks. We analyze the implications of these systems on the infrastructure of current networks and will compare in detail these algorithms and their respective strengths, weaknesses, and trade-offs. We evaluate the feasibility of post-quantum encryption (PQC) algorithms in resource-constrained IoT devices using the ESP-WROOM-32 microcontroller. Three cryptographic schemes were implemented and compared.
Cryptographic algorithms are crucial for secure communication in the Internet of Things (IoT). Quantum computers threaten public key cryptography algorithms like RSA (Rivest, Shamir, Adleman) and Diffie-Hellman (DH) key exchange schemes, which are widely in use today. As cryptographic algorithms are the foundation of secure internet communication, the development of Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC) is essential to protect transactions over the internet. However, solutions like Quantum Key Distribution require heavy infrastructure. So, it is not feasible for the Internet of Things with fewer resources in computing power and form factor. Post-Quantum Cryptography is helpful on these devices. But, it needs further developments and improvements. This paper analyzes cryptography algorithms and protocols of IoT with different categories. Integrated PQC of National Institute of Standards and Technology (NIST) third level finalists on Raspberry Pi 4 (RPI4) board with Linux operating system. The performance of Post-Quantum Cryptography schemes for IoT has been evaluated. Finally, a Post-Quantum Cryptography scheme has been suggested for the Internet of Things based on the performance analysis.
Although quantum computing is still in its nascent age, its evolution threatens the most popular public-key encryption systems. Such systems are essential for today's Internet security due to their ability for solving the key distribution problem and for providing high security in insecure communications channels that allow for accessing websites or for exchanging e-mails, financial transactions, digitally signed documents, military communications or medical data. Cryptosystems like Rivest-Shamir-Adleman (RSA), elliptic curve cryptography (ECC) or Diffie-Hellman have spread worldwide and are part of diverse key Internet standards like Transport Layer Security (TLS), which are used both by traditional computers and Internet of Things (IoT) devices. It is especially difficult to provide high security to IoT devices, mainly because many of them rely on batteries and are resource constrained in terms of computational power and memory, which implies that specific energy-efficient and lightweight algorithms need to be designed and implemented for them. These restrictions become relevant challenges when implementing cryptosystems that involve intensive mathematical operations and demand substantial computational resources, which are often required in applications where data privacy has to be preserved for the long term, like IoT applications for defense, mission-critical scenarios or smart healthcare. Quantum computing threatens such a long-term IoT device security and researchers are currently developing solutions to mitigate such a threat. This article provides a survey on what can be called post-quantum IoT systems (IoT systems protected from the currently known quantum computing attacks): the main post-quantum cryptosystems and initiatives are reviewed, the most relevant IoT architectures and challenges are analyzed, and the expected future trends are indicated. Thus, this article is aimed at providing a wide view of post-quantum IoT security and give useful guidelines to the future post-quantum IoT developers.
The rapid proliferation of Internet of Things (IoT) devices has heightened concerns regarding their security and privacy. Conventional cryptographic methods underpinning IoT security are increasingly threatened by the emergence of quantum computing, which promises to break widely used encryption algorithms such as RSA and ECC. This paper explores post-quantum cryptographic (PQC) algorithms tailored to the resource-constrained nature of IoT environments. It analyzes lattice-based, hash-based, code-based, and multivariate polynomial cryptographic schemes as promising candidates for securing IoT communications against quantum attacks. The paper further discusses implementation challenges, performance considerations, and potential pathways for integrating PQC within existing IoT architectures. Empirical data on computational efficiency and security strength are also presented to guide future deployment.
The rapid proliferation of Internet of Things (IoT) devices has introduced significant security challenges, particularly with the looming threat posed by quantum computing to classical cryptographic algorithms. This paper explores the integration of quantum-resistant cryptographic techniques to secure IoT ecosystems against future quantum attacks. We analyze the vulnerabilities inherent in traditional cryptographic approaches and discuss the implementation feasibility of post-quantum cryptography (PQC) in resource-constrained IoT devices. The study further highlights key PQC algorithms suitable for IoT and evaluates their performance impact. A comparative analysis graph of classical versus quantum-resistant algorithms in IoT environments is presented. This work aims to provide insights and recommendations for adopting quantum-resistant solutions to future-proof IoT security.
The rapid deployment of Internet of Things (IoT) devices across critical infrastructure’s sectors such as healthcare, transportation, and smart cities brings unprecedented security challenges; particularly as quantum computing threatens the classical cryptography. This systematic review analyzes IoT security in relation to post-quantum cryptography (PQC), highlighting vulnerabilities, evolving threat, and cryptographic countermeasures. Using the PRISMA 2020 protocol, our work employed a rigorous and reproducible search strategy, where the initial Boolean query, ((“IoT” OR “Internet of Things”) AND (“Cryptography” OR “Encryption Scheme”) AND “Quantum”), was developed and effectively customized for nine reputable databases to maximize the coverage. From an initial pool of 5,151 publications dated between 2020 and February 12, 2025, a content-based screening was conducted at the title, abstract, and full-text levels. This meticulous filtering resulted in a final corpus of 161 studies deemed relevant for in-depth analysis and synthesis. Then, we categorize and analyze PQC algorithms by vulnerabilities, suitability for resource-constrained IoT environments, performance evaluation, scalability, and quantum resilience. We also identify key limitations in implementations of current cryptographic schemes, including issues in key management and authentication; and outline major challenges such as resource constraints of IoT devices, environmental noise, quantum reversible computing, security vulnerabilities, quantum hardware constraints, and complexities in integration. To counter these threats, we propose a framework of PQC countermeasures and illustrated by a hypothetical case study of PQC adoption in a real-world IoT system. Finally, we propose future research directions in lightweight PQC, hybrid frameworks, improved key management and distribution, addressing quantum distance matters, countering quantum threats, and standardization for IoT environments.
The increasing ubiquity of Internet of Things (IoT) devices has necessitated robust security measures, especially with the impending threat of quantum computing to conventional cryptographic protocols.In this study, we address the imperative of selecting an optimized post-quantum cryptographic algorithm tailored for implementation on resource-constrained IoT devices while ensuring compliance with stringent security standards.This research employs a comprehensive evaluation framework that considers the unique constraints of IoT devices, including limited computational capabilities and memory resources.Furthermore, our assessment accounts for the diverse security requirements stipulated by prevailing standards to guarantee resilience against both classical and quantum threats.Through a systematic analysis of various post-quantum cryptographic algorithms, encompassing factors such as computational efficiency and resistance to quantum attacks, this study identifies a select set of algorithms that exhibit promising suitability for IoT device deployment.The evaluation considers renowned standards, including NIST's Post-Quantum Cryptography Standardization initiative to align with industry best practices and interoperability.The findings presented in this study offer guidance to IoT device manufacturers, system architects, and security practitioners in making informed decisions regarding the adoption of post-quantum cryptographic algorithms.The selected algorithms not only demonstrate adeptness in mitigating quantum threats but also address resource constraints inherent in IoT environments, ensuring a secure foundation for the rapidly expanding ecosystem of interconnected devices.