Quantum Computers are designed to be sufficiently large to be able to efficiently solve specific problems that would take an impractical amount of time to solve using classical computers. The most widely discussed application of quantum computing technology is more powerful algorithms, which efficiently solves all instances of integer factorization—a number theoretic problem that is the foundation of the most of the existing public-key encryption schemes. This means that all public-key cryptographic systems commonly used on the Internet for security will become as insecure as an open communication channel, easy to eavesdrop on or to tamper with. Moreover, traffic passes through numerous fixed, mobile and personal sensors connected to the Internet. This extremely large amount of data becomes the “air” of IoT and only a small part of it will be automatically analysed for a specific purpose. Nevertheless, an important part of the immense amount of data exchanged across the network is sensitive. Presently, these data communication and storage are protected by encryption, but that means of protection will be lost to a future quantum adversary. Because of these urgent necessities, products implementing quantum-resistant security solutions can be built and put into operation in a “post-quantum world”. This must be done now because cryptography research is currently inventing and standardizing new cryptographic algorithms. Once the new algorithms are widely and publicly agreed upon, systems with old encryption will remain vulnerable. This topic is motivated by the above.
Quantum Computers are designed to be sufficiently large to be able to efficiently solve specific problems that would take an impractical amount of time to solve using classical computers. The most widely discussed application of quantum computing technology is more powerful algorithms, which efficiently solves all instances of integer factorization—a number theoretic problem that is the foundation of the most of the existing public-key encryption schemes. This means that all public-key cryptographic systems commonly used on the Internet for security will become as insecure as an open communication channel, easy to eavesdrop on or to tamper with. Moreover, traffic passes through numerous fixed, mobile and personal sensors connected to the Internet. This extremely large amount of data becomes the “air” of IoT and only a small part of it will be automatically analysed for a specific purpose. Nevertheless, an important part of the immense amount of data exchanged across the network is sensitive. Presently, these data communication and storage are protected by encryption, but that means of protection will be lost to a future quantum adversary. Because of these urgent necessities, products implementing quantum-resistant security solutions can be built and put into operation in a “post-quantum world”. This must be done now because cryptography research is currently inventing and standardizing new cryptographic algorithms. Once the new algorithms are widely and publicly agreed upon, systems with old encryption will remain vulnerable. This topic is motivated by the above.
Although quantum computing is still in its nascent age, its evolution threatens the most popular public-key encryption systems. Such systems are essential for today's Internet security due to their ability for solving the key distribution problem and for providing high security in insecure communications channels that allow for accessing websites or for exchanging e-mails, financial transactions, digitally signed documents, military communications or medical data. Cryptosystems like Rivest-Shamir-Adleman (RSA), elliptic curve cryptography (ECC) or Diffie-Hellman have spread worldwide and are part of diverse key Internet standards like Transport Layer Security (TLS), which are used both by traditional computers and Internet of Things (IoT) devices. It is especially difficult to provide high security to IoT devices, mainly because many of them rely on batteries and are resource constrained in terms of computational power and memory, which implies that specific energy-efficient and lightweight algorithms need to be designed and implemented for them. These restrictions become relevant challenges when implementing cryptosystems that involve intensive mathematical operations and demand substantial computational resources, which are often required in applications where data privacy has to be preserved for the long term, like IoT applications for defense, mission-critical scenarios or smart healthcare. Quantum computing threatens such a long-term IoT device security and researchers are currently developing solutions to mitigate such a threat. This article provides a survey on what can be called post-quantum IoT systems (IoT systems protected from the currently known quantum computing attacks): the main post-quantum cryptosystems and initiatives are reviewed, the most relevant IoT architectures and challenges are analyzed, and the expected future trends are indicated. Thus, this article is aimed at providing a wide view of post-quantum IoT security and give useful guidelines to the future post-quantum IoT developers.
The rapid proliferation of Internet of Things (IoT) devices has revolutionized digital communication, yet it simultaneously poses unprecedented security challenges due to constrained device capabilities and increasing cyber threats. Conventional cryptographic techniques, while currently effective, are vulnerable to emerging quantum computing technologies that threaten to render classical encryption obsolete. This paper explores the integration of quantum-safe cryptographic techniques within IoT networks to ensure long-term confidentiality, integrity, and authentication. It examines post-quantum cryptographic primitives, including lattice-based, hash-based, multivariate, and code-based schemes, and evaluates their suitability for resource-constrained IoT environments. The study focuses on lightweight implementation strategies, balancing computational efficiency with robust security requirements. Simulation analyses demonstrate that properly optimized quantum safe protocols can provide resilient encryption, key exchange, and digital signature functionalities without overwhelming device resources. Furthermore, the integration of these techniques with IoT communication standards and secure network protocols ensures end-to-end protection across heterogeneous networks. Challenges such as latency, energy consumption, and scalability are addressed, highlighting the necessity of tailored cryptographic solutions for diverse IoT applications. The findings confirm that quantum safe cryptography is essential for future-proofing IoT networks, offering sustainable security measures that remain resilient against both classical and quantum adversaries, thereby supporting the continued expansion of secure and intelligent interconnected systems.
The Internet of Things (IoT) plays a significant role in shaping different aspects of our lives. IoT devices have become increasingly important due to their ability to connect, collect, and analyze data, automate processes, improve safety and efficiency, and deliver personalized experiences. However, the advancement in quantum computer development poses a significant threat to resource-constrained IoT devices. This new generation of computers can break the classic public-key cryptographic schemes and digital signatures implemented in these IoT devices. While protecting IoT devices from quantum computer attacks poses many challenges, researchers are continuously making significant progress in developing lightweight post-quantum cryptographic algorithms for efficient key exchange mechanisms and digital signature algorithms tailored to IoT devices to overcome this issue. This paper proposes Q-SECURE, a post-Quantum resistant Security Enhancing Cryptography for Unified Resource-constrained device Encryption. A novel scheme that enables any IoT system to leverage the assistance of other devices in the network to gain the capability to generate any proposed post-quantum cryptographic key of a given size using distributed and parallel computing.
Abstract With the emergence of quantum computing, traditional cryptographic algorithms face the threat of being compromised, necessitating the development of quantum-resistant alternatives. The Internet of Things (IoT) paradigm presents unique security challenges due to its vast scale and resource-constrained devices. This research aims to address these challenges by proposing a novel quantum-resistant cryptographic algorithm QuantIoT specifically designed for securing IoT devices. The research begins by evaluating the vulnerabilities of existing cryptographic algorithms against quantum attacks and identifying the need for post-quantum solutions in the IoT context. Various families of post quantum cryptographic algorithms, including lattice based and hash based schemes, are examined to assess their suitability for securing IoT devices. Based on the analysis, a novel quantum-resistant cryptographic algorithm tailored for IoT devices is proposed. The algorithm takes into account the limited computational capabilities, power constraints, and communication requirements of IoT devices while offering strong defence against both conventional and quantum threats. The proposed algorithm is evaluated through simulations and practical experiments on a representative IoT platform. Performance metrics, including computation time, memory usage, and communication overhead, are measured and compared against traditional cryptographic algorithms. The results show that the suggested quantum-resistant technique for protecting IoT devices is workable and effective. This research contributes to the growing body of knowledge on post-quantum cryptography and provides valuable insights for the design and implementation of secure IoT systems in the face of quantum threats.
Quantum computing advancements create threat to encryption systems which protect modern digital communication networks. The integer factorization and discrete logarithm problems which RSA and ECC algorithms depend on become vulnerable to Shor's algorithm when large-scale quantum computers achieve operational status. Billions of small IoT devices operating in resource-constrained environments face a major security risk because their lightweight encryption methods lack protection against quantum-level attacks. The research investigates Post-Quantum Cryptography(PQC) as a new cryptographic framework which protects against both quantum and classical attacks. The proposed system integrates three advanced elements that work together to provide lattice-based encryption for mathematical security and hash-based signature schemes for authentication and an intelligent threat detection system. The hybrid framework provides complete security protection while maintaining high performance and low processing requirements which makes it suitable for protecting IoT networks.
The Internet of Things (IoT) now underpins critical systems like healthcare monitors, smart home, smart grids, automotive V2V & V2X networks, and industrial controls but it still relies on classical cryptography, whose security assumptions are vulnerable to quantum computers. A large quantum computer could run Shor’s algorithm to break RSA/ECC and use Grover’s algorithm to accelerate brute-forcing of symmetric keys, undermining the confidentiality and authentication of data in these IoT applications. Researchers have proposed quantum cryptographic solutions. Quantum key distribution (QKD) and quantum random number generators (QRNGs) exploit quantum mechanics to detect eavesdropping and deliver provably secure key material. For example, chip-scale QRNGs can be embedded in IoT sensors to generate true random keys, boosting resistance to brute-force attacks. These quantum techniques provide information-theoretic secrecy, for instance, QKD-generated keys have been used to authenticate smart-grid SCADA. However, most IoT devices are resource-constrained, making direct deployment of conventional QKD hardware challenging. Post-quantum cryptography (PQC) complements quantum methods by providing algorithms such as lattice-based, hash-based that resist quantum attacks on existing hardware. Standardized PQC can be deployed via software updates on legacy IoT nodes, enabling scalable and quantum-safe security within current constraints. Researchers are exploring lightweight PQC for connected cars and e-health sensors. Hybrid approaches combining QKD/QRNG with PQC offer a layered defense. Since QKD protocols are regarded as ‘future-proof’ and PQC standards mature, their combined use will be essential for robust, quantum-safe IoT security. Miniaturizing quantum components such as integrated QKD/QRNG modules and optimizing lightweight PQC schemes for low-power IoT devices are future research directions to secure IoT networks.