With the increasing demand of consumers for food safety, the application of Internet of Things (IoT) in agriculture is more and more extensive, especially the use of technologies such as QR codes and sensors for food information traceability. However, the Internet of Things still faces challenges in ensuring the authenticity of food data transmission and the integrity of food anti-counterfeiting authentication, especially the traditional digital signature algorithm that the Internet of Things relies on is vulnerable to the security threat brought by future quantum computers. In order to solve this problem, we propose a domestic replacement solution for the post-quantum digital signature algorithm SPHINCS-α(an improvement of the standardized post-quantum digital signature scheme SPHINCS+), and use the chinese national standard cryptographic hash function Shang Mi 3 (SM3) to replace its underlying hash function. Finally, we conducted experiments, gave the benchmark test results under three security parameters, and compared the performance with the original scheme using SHA256 and Shake256 hash function. The results prove the feasibility of our method, although there is a small rate drop, but in exchange for a more secure domestic hash function. It provides strong support for the early deployment of post-quantum cryptography algorithm in the Internet of Things environment of sustainable agriculture and industry, and ensures the integrity of the Internet of Things data in the practice of sustainable agriculture.
With the increasing demand of consumers for food safety, the application of Internet of Things (IoT) in agriculture is more and more extensive, especially the use of technologies such as QR codes and sensors for food information traceability. However, the Internet of Things still faces challenges in ensuring the authenticity of food data transmission and the integrity of food anti-counterfeiting authentication, especially the traditional digital signature algorithm that the Internet of Things relies on is vulnerable to the security threat brought by future quantum computers. In order to solve this problem, we propose a domestic replacement solution for the post-quantum digital signature algorithm SPHINCS-α(an improvement of the standardized post-quantum digital signature scheme SPHINCS+), and use the chinese national standard cryptographic hash function Shang Mi 3 (SM3) to replace its underlying hash function. Finally, we conducted experiments, gave the benchmark test results under three security parameters, and compared the performance with the original scheme using SHA256 and Shake256 hash function. The results prove the feasibility of our method, although there is a small rate drop, but in exchange for a more secure domestic hash function. It provides strong support for the early deployment of post-quantum cryptography algorithm in the Internet of Things environment of sustainable agriculture and industry, and ensures the integrity of the Internet of Things data in the practice of sustainable agriculture.
The Internet of Things (IoT) is a growing area of technology and has been identified as a key tool for enhancing industries' operation and performance. As IoT deployment rises worldwide, so do the threats; hence, security, especially authen-tication and integrity, is a critical consideration. One significant future threat is quantum attacks, which can only be defeated using Post-Quantum (PQ) cryptosystems. New Digital Signature (DS) standards for PQ security have been selected by the US National Institute of Standards and Technology (NIST). However, IoT comes with its own technical challenges from the constrained resources allocated to sensors and other similar devices. As a consequence, the use and suitability of these PQ schemes for IoT remains an open research area. In this paper, we identify an IoT architecture built from three distinct layers represented by a server, a gateway and an IoT device, respectively. We first test PQ DS scheme standards and compare them with current standards in order to assess their practicality for use in this architecture to provide authentication and integrity. Then, we select the most suitable PQ scheme at each layer according to the features of the corresponding device (server, gateway, IoT device) and the security property (authentication, integrity). We finally carry out experiments on our selection and provide an architectural model for making IoT communication and interaction PQ secure.
The classic methods of encryption and ciphering techniques have a major threat due to the rapid growth of quantum computing. This is particularly true for the Internet of Medical Things (IoMT) where sensitive patients’ data needs to be protected in terms of confidentiality, integrity, and authenticity. RSA and ECC serve as two examples of public key cryptographic algorithms that are highly vulnerable to quantum attacks especially the Shor’s and Grover’s algorithm. In the context of resource constrained IoMT systems, this thesis proposes a new hash-based hybrid cryptographic algorithm that is resilient to post-quantum cryptographic (PQC) attacks. In order to achieve resistance against quantum threats the proposed method uses hash-based digital signatures such as XMSS, SPHINCS+, or symmetric encryption like AES-256 with higher key sizes. In the Qiskit environment (Python, Anaconda Navigator, and Jupyter Notebook), Grover’s algorithm is modeled to simulate quantum threats. The proposed method is tested through quantum circuit analysis to evaluate their robustness. Our results will prove that the hybrid scheme, while remaining lightweight and suitable for real-time medical applications, significantly lowers the efficiency gains of quantum attacks. The proposed method will bridge the gap between the theoretical world of PQC and the practical world of IoMT networks, improving the long-term security and trust in critical healthcare systems.
The rapid proliferation of Internet of Things (IoT) devices has revolutionized digital communication, yet it simultaneously poses unprecedented security challenges due to constrained device capabilities and increasing cyber threats. Conventional cryptographic techniques, while currently effective, are vulnerable to emerging quantum computing technologies that threaten to render classical encryption obsolete. This paper explores the integration of quantum-safe cryptographic techniques within IoT networks to ensure long-term confidentiality, integrity, and authentication. It examines post-quantum cryptographic primitives, including lattice-based, hash-based, multivariate, and code-based schemes, and evaluates their suitability for resource-constrained IoT environments. The study focuses on lightweight implementation strategies, balancing computational efficiency with robust security requirements. Simulation analyses demonstrate that properly optimized quantum safe protocols can provide resilient encryption, key exchange, and digital signature functionalities without overwhelming device resources. Furthermore, the integration of these techniques with IoT communication standards and secure network protocols ensures end-to-end protection across heterogeneous networks. Challenges such as latency, energy consumption, and scalability are addressed, highlighting the necessity of tailored cryptographic solutions for diverse IoT applications. The findings confirm that quantum safe cryptography is essential for future-proofing IoT networks, offering sustainable security measures that remain resilient against both classical and quantum adversaries, thereby supporting the continued expansion of secure and intelligent interconnected systems.
Blockchain has been paving the way for new business opportunities as we have witnessed over the last few years. It will continue to proliferate further and be adopted in increasingly diverse sectors. One area of research in Blockchain is how it can be used in Internet of Things (IoT) based applications like Unmanned Aerial Vehicles (UAV), Smart cities and Healthcare. However, with the advent of quantum technology, some widely used security algorithms in blockchain are vulnerable (i.e., quantum algorithms can exponentially solve cryptographic algorithms used to digitally sign or encrypt data), thereby diminishing communication security. Thus, post-quantum algorithms are at the forefront of research to secure data before quantum technologies can fully mature. Early standardized post-quantum algorithms such as hash-based one-time signatures, relies on the proven one-way-ness of hashing algorithm. Hash-based one-time signatures require robust secret key management systems to prevent security degradation. To safeguard IoT applications from quantum threats, this paper proposes a solution which utilizes both hash-based one-time signatures and blockchain to cover each technology's weaknesses.
The Internet of Things (IoT) is gaining ground as a pervasive presence around us by enabling miniaturized “things” with computation and communication capabilities to collect, process, analyze, and interpret information. Consequently, trustworthy data act as fuel for applications that rely on the data generated by these things, for critical decision-making processes, data debugging, risk assessment, forensic analysis, and performance tuning. Currently, secure and reliable data communication in IoT is based on public-key cryptosystems such as the elliptic curve cryptosystem (ECC). Nevertheless, the reliance on the security of de-facto cryptographic primitives is at risk of being broken by the impending quantum computers. Therefore, the transition from classical primitives to quantum-safe primitives is indispensable to ensure the overall security of data en route. In this article, we investigate applications of one of the postquantum signatures called hash-based signature (HBS) schemes for the security of IoT devices in the quantum era. We give a succinct overview of the evolution of HBS schemes with an emphasis on their construction parameters and associated strengths and weaknesses. Then, we outline the striking features of HBS schemes and their significance for IoT security in the quantum era. We also investigate the optimal selection of HBS in the IoT networks with respect to their performance-constrained requirements, resource-constrained nature, and design optimization objectives. In addition to ongoing standardization efforts, we also highlight current and future research and deployment challenges along with possible solutions. Finally, we outline the essential measures and recommendations that must be adopted by the IoT ecosystem while preparing for the quantum world.
The rapid advancement of quantum computing poses a serious threat to classical digital signature algorithms such as RSA and ECDSA, which rely on mathematical problems vulnerable to quantum attacks. Hash-based digital signatures offer a strong post-quantum alternative due to their reliance on cryptographic hash functions and their resistance to both classical and quantum adversaries. This study evaluates the feasibility of hash-based signatures in lightweight and resource-constrained environments by implementing three representative schemes: Lamport One-Time Signatures (OTS), Winternitz One-Time Signatures (WOTS), and Merkle-WOTS. The analysis focuses on key performance factors relevant to constrained devices, including key size, signature size, signing time, and verification speed. Experimental results show that while Lamport OTS provides conceptual simplicity and WOTS offers improved efficiency, the Merkle-WOTS scheme delivers the most practical balance. It supports multiple signatures under a compact public key while maintaining moderate signature sizes and competitive performance. These findings indicate that Merkle-WOTS is a strong candidate for post-quantum authentication in IoT and other lightweight embedded systems.