The impending advent of cryptographically relevant quantum computers threatens classical public-key primitives that underpin 5G and IoT security, including key exchange, authentication, and device onboarding. Ultra-dense networks, constrained endpoints, and long device lifetimes heighten exposure to “harvest-now, decrypt-later” risks. Mobile operators and IoT platform providers need migration ready cryptography that fits radio-access latency budgets, scales to billions of low-power nodes, and integrates cleanly with 3GPP and IETF protocols without degrading quality of service. Many post quantum options impose prohibitive bandwidth and compute costs or lack deployment guidance tuned to network slices and massive machine-type communications. We propose a lattice-based encryption and key-encapsulation framework grounded in Module-LWE/LWR assumptions. The design pairs an IND-CCA-secure KEM for control plane bootstrapping with lightweight AEAD for user-plane data, delivered through a hybrid handshake combining classical ECDH with a post-quantum KEM to ensure continuity during transition. Parameter tiers align with eMBB, URLLC, and mMTC device classes. Implementation emphasizes constant-time polynomial arithmetic, NTT-accelerated convolution, centered-binomial noise sampling, public-key compression, and stateless hash-based signatures for attestation. A gNB-assisted enrollment workflow and session-key rotation via 5G NAS/RRC are specified. Analytical modeling and prototype measurements indicate sub-millisecond encapsulation on ARM Cortex-M33 microcontrollers and ~1.5 ms on RAN baseband paths, while handshake message growth remains within existing NAS and RRC budgets. In ns-3 simulations of dense mMTC topologies, the hybrid handshake achieves >99.99% success under 1% packet loss, and energy profiling shows <5% battery impact for weekly rekeying. Security analysis demonstrates resistance to known lattice attacks at NIST Levels 3–5, forward secrecy via ephemeral KEMs, downgrade resistance through authenticated algorithm negotiation, and post compromise security with frequent rekeying.
The impending advent of cryptographically relevant quantum computers threatens classical public-key primitives that underpin 5G and IoT security, including key exchange, authentication, and device onboarding. Ultra-dense networks, constrained endpoints, and long device lifetimes heighten exposure to “harvest-now, decrypt-later” risks. Mobile operators and IoT platform providers need migration ready cryptography that fits radio-access latency budgets, scales to billions of low-power nodes, and integrates cleanly with 3GPP and IETF protocols without degrading quality of service. Many post quantum options impose prohibitive bandwidth and compute costs or lack deployment guidance tuned to network slices and massive machine-type communications. We propose a lattice-based encryption and key-encapsulation framework grounded in Module-LWE/LWR assumptions. The design pairs an IND-CCA-secure KEM for control plane bootstrapping with lightweight AEAD for user-plane data, delivered through a hybrid handshake combining classical ECDH with a post-quantum KEM to ensure continuity during transition. Parameter tiers align with eMBB, URLLC, and mMTC device classes. Implementation emphasizes constant-time polynomial arithmetic, NTT-accelerated convolution, centered-binomial noise sampling, public-key compression, and stateless hash-based signatures for attestation. A gNB-assisted enrollment workflow and session-key rotation via 5G NAS/RRC are specified. Analytical modeling and prototype measurements indicate sub-millisecond encapsulation on ARM Cortex-M33 microcontrollers and ~1.5 ms on RAN baseband paths, while handshake message growth remains within existing NAS and RRC budgets. In ns-3 simulations of dense mMTC topologies, the hybrid handshake achieves >99.99% success under 1% packet loss, and energy profiling shows <5% battery impact for weekly rekeying. Security analysis demonstrates resistance to known lattice attacks at NIST Levels 3–5, forward secrecy via ephemeral KEMs, downgrade resistance through authenticated algorithm negotiation, and post compromise security with frequent rekeying.
Quantum computing is also posing a serious challenge to the classical cryptographic algorithms like RSA and ECC as they have vulnerability to quantum algorithms such as Shor and Grover. This is a serious problem to Internet of Things (IoT) and edge computing systems, where billions of devices work with strict resource constraints in processing power, memory and energy. To resolve this, we are introducing a minimal postquantum cryptography model to be used in edge platforms with constraints on their resources. This framework combines fierce encapsulation of key (Kyber512) on a lattice with traditional ECDH in a hybrid system of key establishment, along with the Ascon AEAD encryption algorithm to provide effective data hiding and integrity provision. Furthermore, rekeying and forward secrecy on a lightweight basis is possible to reconfigure a layer with negligible overhead on a secure transmission with forward secrecy. The experimental data with ARM Cortex-M and RISC-V architectures and 128-bit post-quantum security has shown that the proposed system can reduce the latency by up to 30 percent and the energy usage by up to 35 percent and considerably better throughput than PQC-only implementations. These findings validate the fact that hybrid PQC solutions have the potential to provide high-resistance quantum with minimal overhead and thus are best suited to IoT and edge applications. The paper offers a viable and extensible security design in conformance with the NIST PQC and IETF migration policies, which can support secure communication in the post-quantum era.
The accelerating maturation of quantum computing technology-exemplified by IBM's Eagle, Osprey, and Condor processors surpassing 1,000+ physical qubits-represents a strategic and existential threat to the public-key cryptographic foundations of modern digital infrastructure.The mathematical intractability assumptions underlying RSA (integer factorization), Diffie-Hellman (discrete logarithm), and Elliptic Curve Cryptography (elliptic curve discrete logarithm problem) are rendered computationally negligible by Shor's polynomial-time quantum algorithm.Simultaneously, Grover's unstructured quantum search algorithm halves the effective security of all symmetric encryption schemes, requiring doubling of key lengths.The consequent "Harvest Now, Decrypt Later" (HNDL) attack paradigm-wherein encrypted communications are archived today for future quantum decryption-transforms post-quantum cryptographic migration from a future concern into an immediate operational imperative for all communications with confidentiality lifetimes exceeding five years.This paper presents a comprehensive Hybrid Post-Quantum Cryptographic (HPQC) framework that systematically integrates NIST-finalized post-quantum algorithms-CRYSTALS-Kyber (FIPS 203) for Key Encapsulation Mechanisms, CRYSTALS-Dilithium (FIPS 204) and SPHINCS+ (FIPS 205) for digital signatureswith classical cryptographic primitives (ECDH P-256/X25519, ECDSA, AES-256-GCM) in a layered, crypto-agile, formally proven, and operationally deployable security architecture.Twenty mathematical formulae are derived and presented, covering Shor/Grover complexity bounds, Module-LWE and Module-SIS hardness parameters, hybrid HKDF-SHA-512 key derivation, IND-CCA2 and EUF-CMA security reductions, forward secrecy entropy bounds, and crypto-agility rotation period calculations.Formal Theorems 1 and 2 establish the security of the hybrid KEM and hybrid signature constructions respectively.Simulated performance benchmarks across three hardware tiers (Intel Xeon server, ARM Cortex-A72 edge gateway, ARM Cortex-M4 IoT device) demonstrate 23-31% TLS 1.3 handshake latency overhead over classical baselines with full quantum resistance.Seven comparative tables and five architectural figures support the engineering-ready deployment guidance provided across 5G/6G, massive IoT, SDN, and cloud-native environments.A four-phase crypto-agile migration roadmap aligned with NIST FIPS 203/204/205, NIST SP 800-208, NSA CNSA 2.0, BSI TR-02102, and ENISA PQC guidance is presented for enterprise network operators and security architects.
The growing interconnection of critical engineering infrastructure through IoT introduces unprecedented exposure to cyber threats. Emerging quantum computing capabilities pose a transformative risk to classical cryptographic primitives such as Rivest–Shamir–Adleman and Elliptic-Curve Cryptography, which underpin secure communication and device authentication in industrial control systems, power grids, transportation networks, and healthcare infrastructure. This paper investigates quantum-resistant encryption, often termed post-quantum cryptography (PQC), as a sustainable security paradigm for IoT communication within critical systems. By analyzing lattice-based, code-based, multivariate, and hash-based schemes, the study evaluates trade-offs between computational cost, memory footprint, and latency constraints intrinsic to resource-limited IoT nodes. A hybrid architectural framework integrating the National Institute of Standards and Technology-standardized algorithms (e.g., Cryptographic Suite for Algebraic Lattices—Kyber, Dilithium) with lightweight symmetric primitives (e.g., Ascon, GIFT block cipher in Combined Feedback mode) is proposed for secure data transmission across heterogeneous IoT layers. Experimental simulations benchmark key-exchange throughput, ciphertext expansion, and resilience against quantum-adversarial models, demonstrating up to 65% reduction in handshake latency compared to baseline lattice implementations under constrained conditions. The paper concludes with policy and engineering recommendations for the adoption of quantum-resistant IoT protocols in energy, transportation, and industrial automation sectors, highlighting alignment with global PQC migration roadmaps and IEC 62443 cybersecurity standards.
The deployment of 5G and emerging 6G networks introduces significant security challenges for Internet of Things (IoT) ecosystems comprising billions of heterogeneous devices, including resource-constrained endpoints, more capable embedded controllers, gateways, edge nodes, and network infrastructure. At the same time, the long-term security of widely deployed public-key cryptography is challenged by advances in quantum computing, motivating migration toward standardized post-quantum key-establishment and digital-signature mechanisms. This comprehensive, evidence-based review classifies cryptographic mechanisms for wireless IoT in 5G and beyond across lightweight symmetric cryptography, post-quantum cryptography, privacy-preserving encryption, and adaptive security. The literature-reported implementation results are compared with explicit attention to heterogeneous hardware, memory, energy, communication, and latency constraints. Lightweight symmetric mechanisms remain relevant for constrained data protection, while standardized post-quantum mechanisms such as ML-KEM and ML-DSA address quantum-vulnerable public-key functions and generally introduce larger keys, ciphertexts, signatures, certificates, or protocol messages. This review therefore emphasizes interoperability, firmware upgradability, crypto-agility, and lifecycle management rather than physical device-size growth. A conceptual three-phase roadmap for 2025–2035 is presented in which quantum-vulnerable public-key mechanisms are progressively supplemented and, where appropriate, replaced by hybrid classical–post-quantum and then post-quantum-capable architectures, while standardized symmetric/lightweight protection remains in use where it satisfies application requirements. The roadmap dates are planning intervals rather than universal adoption forecasts.
In emerging environments such as cloud computing and the Internet of Things (IoT), secure authentication and key negotiation play a crucial role in protecting data transmitted over public networks. However, many existing authentication protocols are still designed based on classical public-key cryptography primitives, and quantum computing may threaten their security. To address this challenge, we propose a post-quantum authentication and key agreement protocol that uses the lattice-based Kyber key encapsulation mechanism (KEM). Our proposed protocol integrates cryptographic authentication, smart card protection, and post-quantum key encapsulation mechanisms, enabling mutual authentication between users and servers and securely establishing session keys. The security of the protocol is formally analyzed in the Real-or-Random (ROR) model under the random oracle assumption and the IND-CCA security of the underlying KEM scheme. Furthermore, through informal security analysis, we have further demonstrated that the protocol possesses important security properties, including anonymity, untraceability, perfect forward confidentiality, and resistance to known attacks. In addition, the computational cost and communication overhead of the proposed scheme are evaluated and compared with several representative authentication protocols. The results show that the proposed protocol can provide strong security while maintaining low computational cost and communication overhead.
Recent progress in quantum computers severely endangers the security of widely used public-key cryptosystems and of all communication that relies on it. Thus, the US NIST is currently exploring new post-quantum cryptographic algorithms that are robust against quantum computers. Security is seen as one of the most critical issues of low-power IoT devices-even with pre-quantum public-key cryptography-since IoT devices have tight energy constraints, limited computational power and strict memory limitations. In this paper, we present, to the best of our knowledge, the first in-depth investigation of the application of potential post-quantum key encapsulation mechanisms (KEMs) and digital signature algorithms (DSAs) proposed in the related US NIST process to a state-of-the-art, TLS-based, low-power IoT infrastructure. We implemented these new KEMs and DSAs in such a representative infrastructure and measured their impact on energy consumption, latency and memory requirements during TLS handshakes on an IoT edge device. Based on our investigations, we gained the following new insights. First, we show that the main contributor to high TLS handshake latency is the higher bandwidth requirement of post-quantum primitives rather than the cryptographic computation itself. Second, we demonstrate that a smart combination of multiple DSAs yields the most energy-, latency- and memory-efficient public key infrastructures, in contrast to NIST's goal to standardize only one algorithm. Third, we show that code-based, isogeny-based and lattice-based algorithms can be implemented on a low-power IoT edge device based on an off-the-shelf Cortex M4 microcontroller while maintaining viable battery runtimes. This is contrary to much research that claims dedicated hardware accelerators are mandatory.