Quantum-Resilient Cryptographic Frameworks: Design and Analysis of Post-Quantum Algorithms for Secure and Efficient Edge-Assisted IoT Ecosystems in Consumer Electronics Devices
Ahmad Nawaz Zaheer, Muhammad Farhan, Muhammad Rehan Naeem, Mrim M. Alnfiai
The rise of quantum computing threatens traditional cryptographic systems, driving the urgent adoption of PQC algorithms for securing IoT and edge computing environments. However, selecting an optimal PQC scheme remains challenging due to trade-offs between security strength, computational efficiency, and scalability in real-world deployments. While algorithms like CRYSTALS-Kyber, CRYSTALS-Dilithium, and SPHINCS+ offer quantum resilience. These suffer from processing overhead, high energy consumption, and limited adaptability, hindering their seamless integration into latency-sensitive and resource-constrained IoT networks. In this study, we conduct a comprehensive and systematic performance evaluation of these PQC algorithms within the context of IoT-based cryptographic scheduling workflows, assessing critical efficiency parameters such as encryption/decryption time, execution speed, system latency, energy efficiency, and scalability under varying processing loads and batch sizes. Our analysis reveals that CRYSTALS-Kyber consistently outperforms its counterparts, demonstrating superior computational efficiency, minimal processing delays, and lower power consumption while maintaining high-security resilience against quantum adversaries. Additionally, we propose a dynamic cryptographic scheduling approach, optimizing the balance between security levels and computational resource allocation, ensuring efficient cryptographic task management in large-scale IoT networks. This research provides a foundation for the practical deployment and standardization of PQC in next-generation cryptographic architectures, enabling the seamless transition from classical to quantum-secure cryptographic frameworks. The insights gained from this study are pivotal for advancing cryptographic scheduling models, enhancing security efficiency in real-time IoT operations, and driving the global adoption of PQC algorithms for future-proof digital security infrastructures.
The rise of quantum computing threatens traditional cryptographic systems, driving the urgent adoption of PQC algorithms for securing IoT and edge computing environments. However, selecting an optimal PQC scheme remains challenging due to trade-offs between security strength, computational efficiency, and scalability in real-world deployments. While algorithms like CRYSTALS-Kyber, CRYSTALS-Dilithium, and SPHINCS+ offer quantum resilience. These suffer from processing overhead, high energy consumption, and limited adaptability, hindering their seamless integration into latency-sensitive and resource-constrained IoT networks. In this study, we conduct a comprehensive and systematic performance evaluation of these PQC algorithms within the context of IoT-based cryptographic scheduling workflows, assessing critical efficiency parameters such as encryption/decryption time, execution speed, system latency, energy efficiency, and scalability under varying processing loads and batch sizes. Our analysis reveals that CRYSTALS-Kyber consistently outperforms its counterparts, demonstrating superior computational efficiency, minimal processing delays, and lower power consumption while maintaining high-security resilience against quantum adversaries. Additionally, we propose a dynamic cryptographic scheduling approach, optimizing the balance between security levels and computational resource allocation, ensuring efficient cryptographic task management in large-scale IoT networks. This research provides a foundation for the practical deployment and standardization of PQC in next-generation cryptographic architectures, enabling the seamless transition from classical to quantum-secure cryptographic frameworks. The insights gained from this study are pivotal for advancing cryptographic scheduling models, enhancing security efficiency in real-time IoT operations, and driving the global adoption of PQC algorithms for future-proof digital security infrastructures.
The impending threat posed by quantum computing to classical cryptographic systems has accelerated the need for post-quantum cryptographic (PQC) solutions, particularly within the rapidly expanding domain of the Internet of Things (IoT). As IoT devices operate under severe constraints in terms of memory, processing power, and energy, integrating quantum-resilient algorithms presents both a critical necessity and a formidable challenge. This chapter provides a comprehensive study of PQC implementations on constrained IoT platforms, exploring algorithmic performance, memory consumption, execution time, and energy efficiency across various benchmarking environments. It offers a comparative analysis of bare-metal and RTOSbased deployments, evaluates the trade-offs between security and real-time responsiveness, and investigates power-aware scheduling and duty cycling strategies for secure task execution. Case studies involving smart sensors, medical wearables, and industrial nodes highlight the practical implications and optimizations required for effective PQC integration. Emphasis was placed on hardware-software co-design, library selection, and communication stack alignment to ensure future-ready, quantum-secure IoT deployments. This chapter bridges theoretical cryptographic resilience and applied system-level engineering, laying a foundational framework for scalable and secure post-quantum IoT ecosystems.
As quantum computing advances, modern cryptographic standards face an existential threat, necessitating a transition to post-quantum cryptography (PQC). The National Institute of Standards and Technology (NIST) has selected CRYSTALS-Kyber and CRYSTALS-Dilithium as standardized PQC algorithms for secure key exchange and digital signatures, respectively. This study conducts a comprehensive performance analysis of these algorithms by benchmarking execution times across cryptographic operations such as key generation, encapsulation, decapsulation, signing, and verification. Additionally, the impact of AVX2 optimizations is evaluated to assess hardware acceleration benefits. Our findings demonstrate that Kyber and Dilithium achieve efficient execution times, outperforming classical cryptographic schemes such as RSA and ECDSA at equivalent security levels. Beyond technical performance, the real-world deployment of PQC introduces challenges in telecommunications networks, where large-scale infrastructure upgrades, interoperability with legacy systems, and regulatory constraints must be addressed. This paper examines the feasibility of PQC adoption in telecom environments, highlighting key transition challenges, security risks, and implementation strategies. Through industry case studies, we illustrate how telecom operators are integrating PQC into 5G authentication, subscriber identity protection, and secure communications. Our analysis provides insights into the computational trade-offs, deployment considerations, and standardization efforts shaping the future of quantum-safe cryptographic infrastructure.
Post-quantum cryptography (PQC) is a critical area of research aimed at addressing the threat quantum computing poses to traditional cryptographic systems. It focuses on evaluating the efficiency, security, and practical performance of PQC algorithms through experimental analysis. This research supports the development of optimized cryptographic solutions, contributes to standardization efforts, and ensures secure and efficient implementations for a wide range of applications. Despite progress in PQC, gaps still exist in practical performance evaluations, particularly in resource-constrained environments. There is a lack of standardized comparisons, hindering the selection of suitable algorithms for specific use cases like IoT and cloud systems. Furthermore, research on scalability, integration challenges, and the trade-offs between security and efficiency remains insufficient. The methodology involves creating a comprehensive framework to evaluate various PQC algorithms, including lattice-based (e.g., Kyber, Dilithium), code-based (e.g., McEliece), and hash-based (e.g., SPHINCS+). These algorithms will be tested in diverse environments, from resource-constrained devices to high-performance infrastructures such as cloud platforms. Key metrics such as encryption/decryption speed, key sizes, memory usage, and computational efficiency will be measured, focusing on the trade-offs between security, efficiency, and scalability. The results will be benchmarked against standardized metrics to provide a clear understanding of each algorithm's suitability for real-world deployment. The findings indicate that lattice-based algorithms like Kyber offer a strong balance between security and efficiency but require considerable computational resources. Code-based algorithms like McEliece are highly secure but come with large key sizes and slower speeds. Hash-based schemes like SPHINCS+ provide strong security but are computationally expensive, making them less suitable for resource-limited systems. The highlights the importance of optimizing PQC algorithms according to specific application requirements, where the choice of algorithm must balance security, efficiency, and resource constraints, with continuous optimization needed to address evolving real-world demands.
The development of quantum computing technology is progressing very quickly, which poses a great threat to classical cryptographic algorithms like RSA and ECC, as they are based on mathematical problems that can be easily solved using quantum computing technology. To overcome the threat of quantum computing technology, the need for PQC algorithms like CRYSTALS Kyber, CRYSTALS Dilithium, Falcon, and SPHINCS+, which are standardized or recommended by NIST, has become essential in the era of cybersecurity. The feasibility of these algorithms in real time applications is the main focus of this thesis. A mixed approach is adopted for this purpose. Benchmark experiments were performed using the Open Quantum Safe library and PQC enabled OpenSSL for key generation, encryption, decryption, signature generation, signature verification, and TLS handshakes. Simulated environment and cloud environment were used for this purpose. Moreover, case studies were also conducted for cloud computing, financial sector, and IoT applications. Additionally, threat modeling is also performed for assessing the migration risks, i.e., “harvest now decrypt later.” The results indicate that the lattice-based methods, like Kyber and Dilithium, offer a robust trade off in terms of performance and security, albeit with increased key and signature sizes compared to classical methods. Hash based methods, like SPHINCS+, offer robust security, albeit with significant performance and size overheads, indicating that they are best used in specific circumstances. Hybrid approaches, using classical as well as quantum methods, were indicated as viable in the transition from classical to quantum methods, especially in circumstances that require backward compatibility. The paper concludes that NIST standardized PQC algorithms are technically viable for contemporary applications, especially in cloud computing and high-performance computing. However, for large-scale implementation, proper engineering and monitoring of developments in crypt analysis need to be performed. Future research should be directed towards implementation optimization, migration frameworks, and further studies in real-world implementations, especially for resource-constrained IoT and legacy system applications.
The emergence of large-scale quantum computing presents an imminent threat to contemporary public-key cryptosystems, with quantum algorithms such as Shor’s algorithm capable of efficiently breaking RSA and elliptic curve cryptography (ECC). This vulnerability has catalyzed accelerated standardization efforts for post-quantum cryptography (PQC) by the U.S. National Institute of Standards and Technology (NIST) and global security stakeholders. While theoretical security analysis of these quantum-resistant algorithms has advanced considerably, comprehensive real-world performance benchmarks spanning diverse computing environments—from high-performance cloud infrastructure to severely resource-constrained IoT devices—remain insufficient for informed deployment planning. This paper presents the most extensive cross-platform empirical evaluation to date of NIST-selected PQC algorithms, including CRYSTALS-Kyber and NTRU for key encapsulation mechanisms (KEMs), alongside BIKE as a code-based alternative, and CRYSTALS-Dilithium and Falcon for digital signatures. Our systematic benchmarking framework measures computational latency, memory utilization, key sizes, and protocol overhead across multiple security levels (NIST Levels 1, 3, and 5) in three distinct hardware environments and various network conditions. Results demonstrate that contemporary server architectures can implement these algorithms with negligible performance impact (<5% additional latency), making immediate adoption feasible for cloud services. In contrast, resource-constrained devices experience more significant overhead, with computational demands varying by up to 12× between algorithms at equivalent security levels, highlighting the importance of algorithm selection for edge deployments. Beyond standalone algorithm performance, we analyze integration challenges within existing security protocols, revealing that naive implementation of PQC in TLS 1.3 can increase handshake size by up to 7× compared to classical approaches. To address this, we propose and evaluate three optimization strategies that reduce bandwidth requirements by 40–60% without compromising security guarantees. Our investigation further encompasses memory-constrained implementation techniques, side-channel resistance measures, and hybrid classical-quantum approaches for transitional deployments. Based on these comprehensive findings, we present a risk-based migration framework and algorithm selection guidelines tailored to specific use cases, including financial transactions, secure firmware updates, vehicle-to-infrastructure communications, and IoT fleet management. This practical roadmap enables organizations to strategically prioritize systems for quantum-resistant upgrades based on data sensitivity, resource constraints, and technical feasibility. Our results conclusively demonstrate that PQC is deployment-ready for most applications, provided that implementations are carefully optimized for the specific performance characteristics and security requirements of target environments. We also identify several remaining research challenges for the community, including further optimization for ultra-constrained devices, standardization of hybrid schemes, and hardware acceleration opportunities.
The rapid advancement of quantum computing poses significant threats to classical cryptographic methods, such as Rivest–Shamir–Adleman (RSA) and Elliptic Curve Cryptography (ECC), which currently secure Internet of Things (IoT) and cloud communications. Post-Quantum Cryptography (PQC), particularly lattice-based schemes, has emerged as a promising alternative. CRYSTALS-Kyber, standardized by the National Institute of Standards and Technology (NIST) as ML-KEM, has shown efficiency and practicality for constrained IoT devices. Most existing research has focused on PQC within the Transport Layer Security (TLS) protocol. Consequently, a critical gap exists in understanding PQC’s performance in lightweight IoT protocols. These are Message Queuing Telemetry Transport (MQTT) and Constrained Application Protocol (CoAP), particularly under adverse network conditions. To address this gap, this paper provides a systematic review of the literature on the network resilience and performance of CRYSTALS-Kyber when integrated into these protocols operating over lossy and high-latency networks. Additional challenges include non-standardized integration, resource limitations, and side-channel vulnerabilities. This review provides a structured synthesis of current knowledge, highlights unresolved trade-offs between security and efficiency, and outlines future research directions, including protocol-level optimization, lightweight signature schemes, and resilience testing of PQC-secured IoT protocols under realistic conditions.