“Integrate PQC into IoT and Embedded Systems”, addresses the formidable challenges of bringing post-quantum cryptography (PQC) to long-lifecycle, constrained devices that underpin critical infrastructure. The chapter explores how operational technology (OT), industrial control systems (ICS), and embedded Internet of Things (IoT) hardware introduce unique constraints for cryptographic modernization due to hardware limitations, vendor dependencies, and legacy system constraints. The chapter offers a practical roadmap for PQC integration across industrial and embedded environments, highlighting mitigation techniques like cryptographic gateways, segmented network design, secure firmware updates, and compensating controls for irreplaceable systems. Real-world examples from sectors like energy, healthcare, and manufacturing demonstrate the urgency and complexity of securing devices such as programmable logic controllers, smart meters, and medical IoT. With references to key tools, standards (e.g., NIST, IETF), and vendors such as WolfSSL, Thales, and Fortanix, the chapter links high-level policy with tactical implementation. It also adapts the Q-Ready Framework to product development use cases, extending its lifecycle methodology, which includes discovery, planning, implementation, validation, and maintenance, into the realm of commercial hardware and software. This chapter is a critical resource for organizations facing the dual challenge of securing constrained devices against quantum threats while maintaining operational continuity. It blends governance guidance, secure development lifecycle integration, and practical migration strategies, offering a detailed, forward-looking blueprint for building quantum-resilient systems at the edge. By taking actions like modular crypto design, proactive vendor engagement, and mitigation planning, organizations can avoid crisis-driven overhauls tomorrow, positioning themselves at the forefront of PQC adoption in embedded technology.
“Integrate PQC into IoT and Embedded Systems”, addresses the formidable challenges of bringing post-quantum cryptography (PQC) to long-lifecycle, constrained devices that underpin critical infrastructure. The chapter explores how operational technology (OT), industrial control systems (ICS), and embedded Internet of Things (IoT) hardware introduce unique constraints for cryptographic modernization due to hardware limitations, vendor dependencies, and legacy system constraints. The chapter offers a practical roadmap for PQC integration across industrial and embedded environments, highlighting mitigation techniques like cryptographic gateways, segmented network design, secure firmware updates, and compensating controls for irreplaceable systems. Real-world examples from sectors like energy, healthcare, and manufacturing demonstrate the urgency and complexity of securing devices such as programmable logic controllers, smart meters, and medical IoT. With references to key tools, standards (e.g., NIST, IETF), and vendors such as WolfSSL, Thales, and Fortanix, the chapter links high-level policy with tactical implementation. It also adapts the Q-Ready Framework to product development use cases, extending its lifecycle methodology, which includes discovery, planning, implementation, validation, and maintenance, into the realm of commercial hardware and software. This chapter is a critical resource for organizations facing the dual challenge of securing constrained devices against quantum threats while maintaining operational continuity. It blends governance guidance, secure development lifecycle integration, and practical migration strategies, offering a detailed, forward-looking blueprint for building quantum-resilient systems at the edge. By taking actions like modular crypto design, proactive vendor engagement, and mitigation planning, organizations can avoid crisis-driven overhauls tomorrow, positioning themselves at the forefront of PQC adoption in embedded technology.
The impending threat posed by quantum computing to classical cryptographic systems has accelerated the need for post-quantum cryptographic (PQC) solutions, particularly within the rapidly expanding domain of the Internet of Things (IoT). As IoT devices operate under severe constraints in terms of memory, processing power, and energy, integrating quantum-resilient algorithms presents both a critical necessity and a formidable challenge. This chapter provides a comprehensive study of PQC implementations on constrained IoT platforms, exploring algorithmic performance, memory consumption, execution time, and energy efficiency across various benchmarking environments. It offers a comparative analysis of bare-metal and RTOSbased deployments, evaluates the trade-offs between security and real-time responsiveness, and investigates power-aware scheduling and duty cycling strategies for secure task execution. Case studies involving smart sensors, medical wearables, and industrial nodes highlight the practical implications and optimizations required for effective PQC integration. Emphasis was placed on hardware-software co-design, library selection, and communication stack alignment to ensure future-ready, quantum-secure IoT deployments. This chapter bridges theoretical cryptographic resilience and applied system-level engineering, laying a foundational framework for scalable and secure post-quantum IoT ecosystems.
The imminent arrival of quantum computing presents unprecedented challenges to Internet of Things (IoT) security, threatening to compromise the cryptographic protocols that safeguard billions of connected devices worldwide. This article examines the critical intersection of quantum computing capabilities and IoT vulnerabilities, with particular emphasis on resource-constrained devices, heterogeneous networks, and legacy system integration. This article presents a comprehensive framework for implementing quantum-resistant security measures in IoT environments, introducing a hybrid approach that combines lightweight quantum-resistant algorithms with modular architecture design. This article demonstrates traditional encryption methods like RSA and ECC remain vulnerable to quantum attacks; strategic implementation of lattice-based and hash-based cryptography can provide robust protection without overwhelming device resources. This article also addresses practical considerations for industry adoption, including development lifecycle integration, governance frameworks, and compliance requirements. Through examination of real-world implementation scenarios, this article establishes a successful quantum-resistant IoT security required for a balanced approach between immediate protective measures and long-term strategic planning, providing organizations with actionable guidelines for securing their IoT infrastructure against quantum threats.
The rapid deployment of Internet of Things (IoT) devices across critical infrastructure’s sectors such as healthcare, transportation, and smart cities brings unprecedented security challenges; particularly as quantum computing threatens the classical cryptography. This systematic review analyzes IoT security in relation to post-quantum cryptography (PQC), highlighting vulnerabilities, evolving threat, and cryptographic countermeasures. Using the PRISMA 2020 protocol, our work employed a rigorous and reproducible search strategy, where the initial Boolean query, ((“IoT” OR “Internet of Things”) AND (“Cryptography” OR “Encryption Scheme”) AND “Quantum”), was developed and effectively customized for nine reputable databases to maximize the coverage. From an initial pool of 5,151 publications dated between 2020 and February 12, 2025, a content-based screening was conducted at the title, abstract, and full-text levels. This meticulous filtering resulted in a final corpus of 161 studies deemed relevant for in-depth analysis and synthesis. Then, we categorize and analyze PQC algorithms by vulnerabilities, suitability for resource-constrained IoT environments, performance evaluation, scalability, and quantum resilience. We also identify key limitations in implementations of current cryptographic schemes, including issues in key management and authentication; and outline major challenges such as resource constraints of IoT devices, environmental noise, quantum reversible computing, security vulnerabilities, quantum hardware constraints, and complexities in integration. To counter these threats, we propose a framework of PQC countermeasures and illustrated by a hypothetical case study of PQC adoption in a real-world IoT system. Finally, we propose future research directions in lightweight PQC, hybrid frameworks, improved key management and distribution, addressing quantum distance matters, countering quantum threats, and standardization for IoT environments.
The emergence of quantum computing seriously threatens the security of legacy cryptographic protocols in consumer electronics devices based on the Internet of Things (IoT). These are essential components of mission-critical infrastructures, such as industrial control systems, smart grids, and healthcare. In particular, this work examines how to strengthen the resistance of the IoT to classical and quantum-based cyberattacks by combining deep learning methods with post-quantum cryptography (PQC). To protect key exchange, encryption, and authentication processes in IoT-consumer devices, we will continue to use quantum-resistant cryptographic algorithms, including lattice-based, hash-based, and code-based cryptography. To provide real-time anomaly detection and response capabilities, we suggest a hybrid security framework combining PQC with deep learning-based intrusion detection systems. Our methodology ensures secure communications and data exchanges linked to quantum attacks in the future within IoT systems while leveraging continuous learning over time to allow Intrusion Detection System (IDS) models to adapt to new attack vectors. We suggest optimized algorithms for PQC solutions that are lightweight and suitable for deployment in edge computing nodes and Internet of Things devices, considering the resource-constrained IoT situations where PQC implementation would be difficult. Through comparative studies and simulations, we demonstrate how our integrated PQC-deep learning framework offers an improved IoT security solution that could safeguard vital systems in a world powered by quantum technology. The results shows the key generation time which is 12.5ms, encryption/decryption time 25.3ms, latency 18.7ms, throughput 5000 operations/sec and energy consumption 2.4mJ.
As quantum computing advances, classical public-key cryptosystems face escalating risks, driving global standardization efforts by NIST, ETSI, and ISO. This paper provides a comprehensive review of recent developments in post-quantum cryptography (PQC), focusing on lattice-based, hash-based, and multivariate approaches. We examine their security foundations, implementation challenges, and applicability across domains such as finance, blockchain, and the Internet of Things (IoT). A core contribution is the proposed Hybrid Cryptographic Framework (HCF), which combines classical and quantum-resistant primitives to enable a secure and interoperable migration path. The framework integrates hybrid key exchange, dual-signature schemes, and PQC-compatible Merkle trees, and is supported by a discrete multi-objective optimization model for selecting algorithms under real-world constraints. The paper also discusses deployment challenges, including hardware acceleration, side-channel resistance, and legacy compatibility. Real-world case studies illustrate how leading institutions are piloting PQC integration in practice. Finally, we propose a strategic roadmap for PQC adoption, incorporating adaptive triggers based on quantum capabilities and evolving threat models. By aligning cryptographic design with international standards and practical system requirements, this work offers guidance for building resilient, quantum-safe infrastructures.
The emergence of quantum computing poses significant threats to classical cryptographic systems, particularly in smart urban environments powered by the internet of things (IoT). This chapter explores the sustainability aspects and future prospects of integrating post-quantum cryptography (PQC) into IoT-based infrastructures. It examines various PQC algorithms, their deployment challenges in resource-constrained devices, and the trade-offs between energy efficiency, performance, and security. The chapter also highlights quantum-specific threats, including communication vulnerabilities and supply chain risks, and emphasizes sustainable strategies such as lightweight cryptography, hybrid models, green computing paradigms, and AI-based optimization. Future research directions call for energy-efficient algorithm design, cryptographic hardware co-development, and multidisciplinary collaboration. The study underscores the importance of aligning cryptographic resilience with long-term sustainability goals in smart city systems.