The international archives of the photogrammetry, remote sensing and spatial information sciences/International archives of the photogrammetry, remote sensing and spatial information sciences
A Prototype for evaluating Post-Quantum Cryptography on resource-constrained Hardware with real-world Smart City Sensor Data
Jan Seedorf, Darshana Rawal, Jonas Möwes, Omar Haj Abdulaziz, Ayham Alhasan, Thunyathep Santhanavanich
Abstract. As the threat of quantum computing to classical cryptography grows, the transition to post-quantum cryptographic (PQC) systems becomes essential—particularly for smart city infrastructures that rely heavily on secure, real-time sensor data. This paper investigates the performance of PQC algorithms currently in the final stages of standardization by the U.S. National Institute of Standards and Technology (NIST), focusing on their deployment in resource-constrained Internet of Things (IoT) devices. Leveraging real-world smart city sensor datasets, we develop a research prototype that simulates a realistic urban sensing scenario, using Raspberry Pi 3 and Pi Zero 2 W devices to cryptographically secure and transmit data to a central server. Experimental results demonstrate that the Kyber family is the most efficient for key encapsulation tasks, while Dilithium and Falcon offer strong performance for digital signatures. In contrast, PQC algorithms such as McEliece, HQC, and Rainbow exhibit substantial computational overhead—especially at higher security levels—limiting their suitability for time-sensitive or low-power environments. Our findings highlight the practical implications of PQC adoption in smart cities and provide evidence-based guidance for selecting efficient quantum-safe algorithms for real-world urban sensor networks.
Abstract. As the threat of quantum computing to classical cryptography grows, the transition to post-quantum cryptographic (PQC) systems becomes essential—particularly for smart city infrastructures that rely heavily on secure, real-time sensor data. This paper investigates the performance of PQC algorithms currently in the final stages of standardization by the U.S. National Institute of Standards and Technology (NIST), focusing on their deployment in resource-constrained Internet of Things (IoT) devices. Leveraging real-world smart city sensor datasets, we develop a research prototype that simulates a realistic urban sensing scenario, using Raspberry Pi 3 and Pi Zero 2 W devices to cryptographically secure and transmit data to a central server. Experimental results demonstrate that the Kyber family is the most efficient for key encapsulation tasks, while Dilithium and Falcon offer strong performance for digital signatures. In contrast, PQC algorithms such as McEliece, HQC, and Rainbow exhibit substantial computational overhead—especially at higher security levels—limiting their suitability for time-sensitive or low-power environments. Our findings highlight the practical implications of PQC adoption in smart cities and provide evidence-based guidance for selecting efficient quantum-safe algorithms for real-world urban sensor networks.
The rapid advancement of quantum computing poses a critical threat to classical cryptographic algorithms such as RSA and ECC, particularly in Internet of Things (IoT) devices, where secure communication is essential but often constrained by limited computational resources. This paper investigates the feasibility of deploying post-quantum cryptography (PQC) algorithms on resource-constrained devices. In particular, we implement three PQC algorithms - BIKE, CRYSTALS-Kyber, and HQC - on a lightweight IoT platform built with Raspberry Pi devices. Leveraging the Open Quantum Safe (liboqs) library in conjunction with mbedTLS, we develop quantumsecure key exchange protocols, and evaluate their performance in terms of computational overhead, memory usage, and energy consumption for quantum secure communication. Experimental results demonstrate that the integration of PQC algorithms on constrained hardware is practical, reinforcing the urgent need for quantum-resilient cryptographic frameworks in next-generation IoT devices. The implementation of this paper is available at https://iqsec-lab.github.io/PQC-IoT/.
ABSTRACT Smart cities are built on a vast interconnected network of Internet of things (IoT), edge and cloud systems to optimise urban services and enhance the quality of life for the residents. However, this integration of cyber‐physical infrastructure expands the attack surface, making it vulnerable to advanced cyber threats. The most notable emerging threat is quantum computers, which can break the classical cryptographic algorithms, such as RSA and ECC, that form the foundation of cybersecurity. Integrating liboqs execution benchmarks with an analytical network fragmentation model simulated with NS‐3, evaluating NIST‐approved PQC key encapsulation mechanisms, ML‐KEM (Kyber512/768/1024), HQC (128/192/256) and classic McEliece variants, alongside signature schemes ML‐DSA (Dilithium), Falcon and SLH‐DSA (SPHINCS+) within a smart city network. We also extended the benchmarking to include NIST's SP 800‐230 draft and provide preliminary benchmarks of the six new parameter sets. To assess embedded feasibility, all algorithms are additionally executed on the ESP32 P4 microcontroller, measuring timing, energy consumption and memory under resource‐constrained conditions. This dual platform methodology enables cross‐validation of network‐level overhead and hardware‐level performance. Results show consistent behaviour across platforms. ML KEM 512 (NIST Security Level 1) provides the best KEM performance, with key generation at 7.2 µs (NS‐3) and 122.6 ms (ESP32 P4), and similarly efficient encapsulation/decapsulation. ML DSA 44 (NIST Security Level 2) achieves the fastest signatures at 64 µs on NS‐3 and 490.6 ms on ESP32 P4. These findings provide evidence‐based guidelines for deploying postquantum cryptography across smart city IoT–Edge–Cloud infrastructures, emphasising crypto‐agility and hybrid cryptography for smart city networks.
The rapid advancement of quantum computing poses a critical threat to classical cryptographic algorithms such as RSA and ECC, particularly in Internet of Things (IoT) devices, where secure communication is essential but often constrained by limited computational resources. This paper investigates the feasibility of deploying post-quantum cryptography (PQC) algorithms on resource-constrained devices. In particular, we implement three PQC algorithms - BIKE, CRYSTALS-Kyber, and HQC - on a lightweight IoT platform built with Raspberry Pi devices. Leveraging the Open Quantum Safe (liboqs) library in conjunction with mbedTLS, we develop quantumsecure key exchange protocols, and evaluate their performance in terms of computational overhead, memory usage, and energy consumption for quantum secure communication. Experimental results demonstrate that the integration of PQC algorithms on constrained hardware is practical, reinforcing the urgent need for quantum-resilient cryptographic frameworks in next-generation IoT devices. The implementation of this paper is available at https://iqsec-lab.github.io/PQC-IoT/.
The rapid advancement of quantum computing poses a critical threat to classical cryptographic algorithms such as RSA and ECC, particularly in Internet of Things (IoT) devices, where secure communication is essential but often constrained by limited computational resources. This paper investigates the feasibility of deploying post-quantum cryptography (PQC) algorithms on resource-constrained devices. In particular, we implement three PQC algorithms -- BIKE, CRYSTALS-Kyber, and HQC -- on a lightweight IoT platform built with Raspberry Pi devices. Leveraging the Open Quantum Safe (\texttt{liboqs}) library in conjunction with \texttt{mbedTLS}, we develop quantum-secure key exchange protocols, and evaluate their performance in terms of computational overhead, memory usage, and energy consumption for quantum secure communication. Experimental results demonstrate that the integration of PQC algorithms on constrained hardware is practical, reinforcing the urgent need for quantum-resilient cryptographic frameworks in next-generation IoT devices. The implementation of this paper is available at https://iqsec-lab.github.io/PQC-IoT/.
The emergence of large-scale quantum computing presents an imminent threat to contemporary public-key cryptosystems, with quantum algorithms such as Shor’s algorithm capable of efficiently breaking RSA and elliptic curve cryptography (ECC). This vulnerability has catalyzed accelerated standardization efforts for post-quantum cryptography (PQC) by the U.S. National Institute of Standards and Technology (NIST) and global security stakeholders. While theoretical security analysis of these quantum-resistant algorithms has advanced considerably, comprehensive real-world performance benchmarks spanning diverse computing environments—from high-performance cloud infrastructure to severely resource-constrained IoT devices—remain insufficient for informed deployment planning. This paper presents the most extensive cross-platform empirical evaluation to date of NIST-selected PQC algorithms, including CRYSTALS-Kyber and NTRU for key encapsulation mechanisms (KEMs), alongside BIKE as a code-based alternative, and CRYSTALS-Dilithium and Falcon for digital signatures. Our systematic benchmarking framework measures computational latency, memory utilization, key sizes, and protocol overhead across multiple security levels (NIST Levels 1, 3, and 5) in three distinct hardware environments and various network conditions. Results demonstrate that contemporary server architectures can implement these algorithms with negligible performance impact (<5% additional latency), making immediate adoption feasible for cloud services. In contrast, resource-constrained devices experience more significant overhead, with computational demands varying by up to 12× between algorithms at equivalent security levels, highlighting the importance of algorithm selection for edge deployments. Beyond standalone algorithm performance, we analyze integration challenges within existing security protocols, revealing that naive implementation of PQC in TLS 1.3 can increase handshake size by up to 7× compared to classical approaches. To address this, we propose and evaluate three optimization strategies that reduce bandwidth requirements by 40–60% without compromising security guarantees. Our investigation further encompasses memory-constrained implementation techniques, side-channel resistance measures, and hybrid classical-quantum approaches for transitional deployments. Based on these comprehensive findings, we present a risk-based migration framework and algorithm selection guidelines tailored to specific use cases, including financial transactions, secure firmware updates, vehicle-to-infrastructure communications, and IoT fleet management. This practical roadmap enables organizations to strategically prioritize systems for quantum-resistant upgrades based on data sensitivity, resource constraints, and technical feasibility. Our results conclusively demonstrate that PQC is deployment-ready for most applications, provided that implementations are carefully optimized for the specific performance characteristics and security requirements of target environments. We also identify several remaining research challenges for the community, including further optimization for ultra-constrained devices, standardization of hybrid schemes, and hardware acceleration opportunities.
The advent of quantum computing poses significant challenges to traditional cryptographic systems, threatening the confidentiality, integrity and authenticity of digital communications. This paper investigates the integration of Post-Quantum Cryptography (PQC) algorithms into mobile communication systems to address these challenges. The study focuses on evaluating key PQC algorithms shortlisted by the National Institute of Standards and Technology (NIST), including CRYSTALS-Kyber, CRYSTALS-Dilithium, Falcon and SPHINCS+, within the context of 5G and future mobile network architectures. The research encompasses the design and implementation of an experimental framework involving mobile devices, servers, and cloud-based infrastructure to simulate real-world communication scenarios. Performance metrics such as key generation time, signature generation, encryption and decryption speed, and resource consumption were analyzed across various devices to identify algorithms suitable for mobile environments. The findings reveal that lattice-based algorithms, such as Kyber and Dilithium, offer a promising balance between security and efficiency, making them ideal for resource-constrained devices. In contrast, hash-based algorithms like SPHINCS+ exhibit higher computational demands, limiting their practicality in certain applications. This work highlights the importance of algorithm selection and hardware optimization in ensuring secure and efficient communications in the quantum era. By integrating theoretical advancements in PQC with practical applications, this research lays the foundation for quantum-resistant security in mobile networks, ensuring secure and future-ready digital communications.