In this paper, a generic post-quantum authentication protocol is constructed for quantum-resistant satellite communication. This scheme was proposed to address emerging authentication needs in post-quantum satellite communication systems consistent with evolving standards such as Consultative Committee for Space Data Systems (CCSDS) and European Telecommunications Standards Institute (ETSI). In the proposed authentication, it is aimed to obtain additional security features and low communication complexity based on simple operations and post-quantum algorithms. The mutual authentication is achieved by using Physical Unclonable Functions (PUF), Hash Message Authentication Code (HMAC), and post-quantum cryptography (PQC) primitives. The security analysis shows that the proposed authentication provides additional security properties and resistance to replay and man-in-the-middle (MitM) attacks. The main difference between the proposed protocol and PQC-based authentication for satellites in the literature is that it does not require complex operations and provides anonymity, integrity, and legitimacy with the help of lightweight principles. The proposed scheme leverages National Institute of Standards and Technology (NIST)-approved post-quantum cryptographic primitives (e.g., CRYSTALS-Kyber, HQC, SHA3-256), while the overall authentication protocol design is novel and constitutes the main contribution of our work.
In this paper, a generic post-quantum authentication protocol is constructed for quantum-resistant satellite communication. This scheme was proposed to address emerging authentication needs in post-quantum satellite communication systems consistent with evolving standards such as Consultative Committee for Space Data Systems (CCSDS) and European Telecommunications Standards Institute (ETSI). In the proposed authentication, it is aimed to obtain additional security features and low communication complexity based on simple operations and post-quantum algorithms. The mutual authentication is achieved by using Physical Unclonable Functions (PUF), Hash Message Authentication Code (HMAC), and post-quantum cryptography (PQC) primitives. The security analysis shows that the proposed authentication provides additional security properties and resistance to replay and man-in-the-middle (MitM) attacks. The main difference between the proposed protocol and PQC-based authentication for satellites in the literature is that it does not require complex operations and provides anonymity, integrity, and legitimacy with the help of lightweight principles. The proposed scheme leverages National Institute of Standards and Technology (NIST)-approved post-quantum cryptographic primitives (e.g., CRYSTALS-Kyber, HQC, SHA3-256), while the overall authentication protocol design is novel and constitutes the main contribution of our work.
Satellite communication networks play a critical role in providing connectivity to remote regions and areas with limited infrastructure. However, their inherently open nature and physical exposure make them particularly susceptible to security threats, including replay, impersonation, and man-in- the-middle attacks. The emergence of quantum computing further undermines the robustness of conventional cryptographic schemes that rely on number-theoretic assumptions. To mitigate these challenges, this article proposesHBQS, a lightweight post-quantum authentication framework designed for satellite platforms with limited resources.HBQSintegrates Physically Unclonable Functions (PUFs) with hash-based cryptography, leveraging SPHINCS+ digital signatures and SHA-3 hashing to provide secure mutual authentication and session key establishment. The protocolHBQSwas implemented and evaluated on embedded hardware platforms, including Raspberry Pi 4.0, PYNQ-Z2 FPGA, and a Dell ground control station. The experimental results demonstrate thatHBQSachieves mutual authentication in 0.88 ms, offering an approximately 67% reduction in execution time compared to representative baselines from the prior literature. Entropy analysis confirms that the proposed protocol maintains a high entropy across critical components, withHBQSachieving a signature entropy of 164.63 bits and PUF response entropy of 172.58 bits, indicating strong resistance to statistical and modeling attacks. A formal security analysis conducted within the Random Oracle Model demonstrates semantic security against both classical and quantum adversaries. The protocolHBQSshows a significant improvement over existing methods, achieving approximately 67% reduction in computational execution time, approximately 11.5% faster user-side handshake time, approximately 0.6% improvement on the satellite side and full security coverage across all evaluated security features with only a 21.4% increase in static memory usage as the trade-off. These findings positionHBQSas an efficient, secure, and scalable authentication solution for next-generation satellite communication systems operating in the post-quantum era.
Low Earth Orbit (LEO) satellites have different security problems in addition to nice properties such as low latency and wide coverage. Unmanned Aerial Vehicles (UAVs) rely on these satellites for communication, which makes authentication with Network Control Centres (NCCs) critical. In this paper, a physically unclonable function (PUF)-based lightweight, post-quantum mutual authentication and key establishment protocol tailored for satellite-assisted UAV-NCC links is proposed to address these problems. The scheme uses the benefits of PUF and lightweight cryptographic operations to obtain an efficient scheme for resource-constrained environments while ensuring mutual authentication and quantum-resistant session key establishment.
ABSTRACT Quantum computing poses a looming threat to the cryptographic primitives that secure today's satellite communications. In response, post‐quantum cryptography (PQC) has emerged to protect data against future quantum‐enabled adversaries. This paper provides a comprehensive analysis of lattice‐based PQC methods for secure satellite communication in the post‐quantum era. We examine the performance and security of leading lattice‐based schemes—including encryption/key‐establishment algorithms like CRYSTALS‐Kyber and NTRU, and digital signature schemes like CRYSTALS‐Dilithium and FALCON—in the context of satellite systems. Real‐world benchmark data from peer‐reviewed sources are used to evaluate computational efficiency, bandwidth overhead, memory footprint, and energy consumption of these schemes on resource‐constrained satellite hardware. We compare lattice‐based approaches with classical RSA/ECC and alternative post‐quantum techniques (hash‐based signatures, code‐based encryption), highlighting the favorable trade‐offs that have led to lattice‐based algorithms becoming primary candidates for standardization. Security analysis is presented to explain the hardness assumptions (e.g., Learning With Errors and NTRU problems) that underpin lattice cryptography, and to assess known cryptanalytic results, resistance to quantum attacks, and remaining security margins. We also discuss practical considerations for deploying lattice‐based cryptography on satellites, including integration into existing communication protocols, potential need for hardware acceleration, and strategies for cryptographic agility in long‐lived space assets. The results show that lattice‐based PQC can be feasibly implemented in satellites with acceptable performance impact, providing strong security against quantum threats and a viable path to future‐proof the confidentiality and authenticity of satellite communications.
The emergence of quantum computing is expected to break many conventional cryptographic algorithms currently used for authentication and secure communication. Existing security mechanisms in Next Generation Networks (NGNs), including 5G, IoT, smart healthcare, and cloud-based systems, are increasingly vulnerable to future quantum attacks. This research presents a lightweight and efficient Post-Quantum Cryptography (PQC) based authentication framework specifically designed for next generation network environments. The proposed framework combines quantum-resistant cryptographic techniques with optimized authentication procedures to provide secure identity verification, confidential communication, and attack resistance with minimal computational complexity. The model emphasizes reduced overhead, faster authentication response, and scalability for resource-constrained devices. Security analysis shows that the framework can effectively defend against replay attacks, impersonation attacks, session hijacking, and quantum-based cryptanalytic threats. Experimental evaluation indicates that the proposed approach achieves improved security performance while maintaining low latency and reduced resource consumption, making it suitable for practical deployment in future intelligent communication networks.
Satellite systems rely on a robust yet light weight cryptographic solution for the security of ground systems, communications links, Telemetry, Tracking and Command (TT&C), payloads, onboard systems and associated subsystems. Cryptography ensures data integrity and overall security especially for satellites whose missions and data transmitted are in general and by global practices included in Critical National Infrastructures (CNIs). But emerging cybersecurity threats might render cryptographic solutions such as Rivest-Shamir-Adleman (RSA), Diffie–Hellman (DH) and Elliptic-Curve Cryptography (ECC) ineffective in securing space assets. Quantum cryptography offers a better solution to the emerging threats of relentless and sophisticated systems and adversaries. This paper evaluates the performance of Post-Quantum Cryptography (PQC) when deployed. The research explored the various standards mapped out by the National Institute of Standards and Technology (NIST) for PQC deployment. Current security architecture of satellite systems was compared to what the PQC solution will offer to these highly classified assets. The paper further explored algorithms in place and how effective they could be in the space industry. In the space sector, deploying PQC requires a beta analysis of its performance; which was explored in the third chapter of this work. Challenges and Deployment Considerations and Computational and Resource Constraints of PQC deployment was evaluated in the fifth and sixth sections of this work. The paper concluded by acknowledging the potential complexities in the eventual wholistic adoption and deployment of Quantum Cryptography.
The emergence and growth of the Internet of Medical Things (IoMT) have transformed the way healthcare services are delivered, but this growth comes with its own security challenges, especially with the emergence of quantum computing. This paper presents a lightweight, privacy-preserving authentication scheme for edge-based IoMT environments, integrating CRYSTALS-Kyber Key Encapsulation Mechanism (KEM) to securely establish session keys between participating entities and resilience against quantum attacks, while CRYSTALS-Dilithium is utilized as the digital signature scheme to ensure message integrity, authentication, and non-repudiation. These NIST-standardized post-quantum primitives collectively strengthen the system's resistance against quantum adversaries and enhance overall cryptographic robustness. The proposed system comprises two phases: Registration and Authentication. During registration, patients, wearable devices that utilize Physically Unclonable Functions (PUFs), and medical specialists register with a Trusted Authority via edge nodes. The authentication phase encompasses mutual authentication among patients, devices, medical specialists, edge nodes, and cloud servers, ensuring that only authorized entities access sensitive health information. In addition, the proposed scheme employs the formal security properties, such as authenticity and secrecy, are verified using the AVISPA tool under the Dolev-Yao model, with results confirming that all defined goals are achieved and no attacks are found. Performance evaluations indicate that the scheme is computationally efficient and suitable for resource-constrained IoMT devices. Furthermore, BAN logic is employed to formally verify the correctness of the authentication protocol, demonstrating that mutual authentication is securely established among the participating entities under well-defined trust assumptions. By integrating post-quantum cryptographic techniques, this authentication framework addresses emerging security challenges posed by quantum computing, aligning with the objectives of enhancing edge-based consumer electronics devices and Internet of Things (IoT) ecosystems with post-quantum cryptosystems.