The rapid expansion and inherent resource limitations of Internet of Things (IoT) devices necessitate robust, future-proof security solutions, particularly against sophisticated data integrity threats and the imminent risk of quantum computing attacks. This paper provides a systematic literature review (SLR) of the architectural integration of blockchain with quantum technologies (quantum key distribution (QKD) and post-quantum cryptography (PQC)) for a two-stage trust model in IoT communication. This review summarizes existing methods and answers three key research questions. The results show that permissioned blockchains are primarily used for trust management to ensure the non-repudiation and immutability of data. Notably, there is a clear dividing line in the application of quantum solutions: QKD is particularly suitable for securing high-capacity backbone communications (server gateways), whereas PQC (especially lattice-based algorithms such as Kyber and Dilithium) is the mainstream resource-efficient solution for IoT terminals. However, this integration also has significant drawbacks, such as high latency due to blockchain consensus mechanisms and increased memory and CPU requirements from PQC implementations. The main challenge is the lack of standardized protocols for integrating QKD key management with smart contract functionality. This review provides a comprehensive analysis of current architectures, assesses their performance trade-offs, and outlines a clear research agenda aimed at developing standardized hybrid protocols for future trusted IoT systems and optimizing resource-efficient, quantum-resistant consensus mechanisms.
The rapid expansion and inherent resource limitations of Internet of Things (IoT) devices necessitate robust, future-proof security solutions, particularly against sophisticated data integrity threats and the imminent risk of quantum computing attacks. This paper provides a systematic literature review (SLR) of the architectural integration of blockchain with quantum technologies (quantum key distribution (QKD) and post-quantum cryptography (PQC)) for a two-stage trust model in IoT communication. This review summarizes existing methods and answers three key research questions. The results show that permissioned blockchains are primarily used for trust management to ensure the non-repudiation and immutability of data. Notably, there is a clear dividing line in the application of quantum solutions: QKD is particularly suitable for securing high-capacity backbone communications (server gateways), whereas PQC (especially lattice-based algorithms such as Kyber and Dilithium) is the mainstream resource-efficient solution for IoT terminals. However, this integration also has significant drawbacks, such as high latency due to blockchain consensus mechanisms and increased memory and CPU requirements from PQC implementations. The main challenge is the lack of standardized protocols for integrating QKD key management with smart contract functionality. This review provides a comprehensive analysis of current architectures, assesses their performance trade-offs, and outlines a clear research agenda aimed at developing standardized hybrid protocols for future trusted IoT systems and optimizing resource-efficient, quantum-resistant consensus mechanisms.
Quantum computing poses a significant threat to classical asymmetric cryptography, which is essential for ensuring confidentiality, authentication, and key exchange in contemporary digital infrastructures. Although post-quantum cryptography (PQC) provides mechanisms that resist quantum attacks, its implementation in Internet of Things (IoT) systems is challenged by constrained resources, including limitations in computation, memory, energy, latency, and bandwidth, and the heterogeneity of devices. This paper offers a comprehensive narrative review of PQC approaches applicable to IoT, systematically organizing 30 peer-reviewed studies published between 2022 and 2026 across four layers: device, communication, distributed trust, and application. Additionally, the review examines two cross-cutting dimensions, privacy and side-channel resistance. The analysis indicates a significant prevalence of lattice-based schemes, hybrid strategies, and integrations with blockchain technology, zero-knowledge proofs, federated learning, homomorphic encryption, AI, and Zero Trust architectures. Notably, key gaps remain in side-channel evaluation, migration pathways, deployment costs, and real-world validation—issues that are particularly critical given the long lifecycles of IoT devices and the ongoing threat of “harvest now, decrypt later” attacks.
The rapid convergence of sixth-generation (6G) networks and the Internet of Things (IoT) offers enormous potential for ultra-reliable, low-latency, and massive device connectivity. However, this integration also raises security and privacy concerns, particularly in light of new threats from quantum computing that could undermine traditional cryptography. The architecture of quantum-safe IoT networks that can withstand post-quantum security threats is thoroughly discussed in this review. It addresses the challenges related to how to use blockchain technology to provide decentralized trust as well as secure transactions, how to use post-quantum cryptographic algorithms to protect data confidentiality, and the best way to use a trust management architecture to improve identity verification, authorization, and authentication in the diverse IoT environment. The paper then examines scalability considerations, resource constraints, and interoperability problems that impact safe IoT deployments in the 6G era. This work serves as a roadmap for researchers and practitioners who aim to create robust and future IoT infrastructure and then maintain their security in a post-quantum world by integrating recent research patterns, solution development, and considerations related to real-world implementation.
The Internet of Things (IoT) now underpins critical systems like healthcare monitors, smart home, smart grids, automotive V2V & V2X networks, and industrial controls but it still relies on classical cryptography, whose security assumptions are vulnerable to quantum computers. A large quantum computer could run Shor’s algorithm to break RSA/ECC and use Grover’s algorithm to accelerate brute-forcing of symmetric keys, undermining the confidentiality and authentication of data in these IoT applications. Researchers have proposed quantum cryptographic solutions. Quantum key distribution (QKD) and quantum random number generators (QRNGs) exploit quantum mechanics to detect eavesdropping and deliver provably secure key material. For example, chip-scale QRNGs can be embedded in IoT sensors to generate true random keys, boosting resistance to brute-force attacks. These quantum techniques provide information-theoretic secrecy, for instance, QKD-generated keys have been used to authenticate smart-grid SCADA. However, most IoT devices are resource-constrained, making direct deployment of conventional QKD hardware challenging. Post-quantum cryptography (PQC) complements quantum methods by providing algorithms such as lattice-based, hash-based that resist quantum attacks on existing hardware. Standardized PQC can be deployed via software updates on legacy IoT nodes, enabling scalable and quantum-safe security within current constraints. Researchers are exploring lightweight PQC for connected cars and e-health sensors. Hybrid approaches combining QKD/QRNG with PQC offer a layered defense. Since QKD protocols are regarded as ‘future-proof’ and PQC standards mature, their combined use will be essential for robust, quantum-safe IoT security. Miniaturizing quantum components such as integrated QKD/QRNG modules and optimizing lightweight PQC schemes for low-power IoT devices are future research directions to secure IoT networks.
The exponential growth of the Internet of Things (IoT) and its integration into critical infrastructures has elevated the need for robust and future-proof security mechanisms. Traditional cryptographic systems, while effective today, are increasingly vulnerable to advancements in quantum computing. This paper explores the integration of Quantum Key Distribution (QKD) as a novel security paradigm for next-generation IoT ecosystems. QKD leverages the principles of quantum mechanics to enable unconditionally secure key exchange, immune to computational attacks. We propose an architecture where QKD-enabled edge gateways and IoT nodes facilitate real-time secure communication through quantum-secured channels. The study analyzes the feasibility of implementing QKD in resource-constrained IoT environments and evaluates its performance in terms of key generation rate, latency, and energy consumption. Simulation results demonstrate that the proposed QKD-IoT framework significantly outperforms conventional encryption protocols in resisting both classical and quantum-based attacks, making it a viable foundation for building post-quantum resilient IoT infrastructures. The research also outlines the challenges related to scalability, hardware integration, and key management, and proposes solutions through hybrid QKD-classical cryptography models. This work paves the way for a quantum-secure IoT future, ensuring trust, privacy, and integrity in hyper-connected digital ecosystems.
The rapid deployment of Internet of Things (IoT) devices across critical infrastructure’s sectors such as healthcare, transportation, and smart cities brings unprecedented security challenges; particularly as quantum computing threatens the classical cryptography. This systematic review analyzes IoT security in relation to post-quantum cryptography (PQC), highlighting vulnerabilities, evolving threat, and cryptographic countermeasures. Using the PRISMA 2020 protocol, our work employed a rigorous and reproducible search strategy, where the initial Boolean query, ((“IoT” OR “Internet of Things”) AND (“Cryptography” OR “Encryption Scheme”) AND “Quantum”), was developed and effectively customized for nine reputable databases to maximize the coverage. From an initial pool of 5,151 publications dated between 2020 and February 12, 2025, a content-based screening was conducted at the title, abstract, and full-text levels. This meticulous filtering resulted in a final corpus of 161 studies deemed relevant for in-depth analysis and synthesis. Then, we categorize and analyze PQC algorithms by vulnerabilities, suitability for resource-constrained IoT environments, performance evaluation, scalability, and quantum resilience. We also identify key limitations in implementations of current cryptographic schemes, including issues in key management and authentication; and outline major challenges such as resource constraints of IoT devices, environmental noise, quantum reversible computing, security vulnerabilities, quantum hardware constraints, and complexities in integration. To counter these threats, we propose a framework of PQC countermeasures and illustrated by a hypothetical case study of PQC adoption in a real-world IoT system. Finally, we propose future research directions in lightweight PQC, hybrid frameworks, improved key management and distribution, addressing quantum distance matters, countering quantum threats, and standardization for IoT environments.
The fast development of Internet of Things (IoT) devices has introduced unknown security issues in the networked systems. Classical cryptography methods are restricted to sophisticated attacks and the emerging threat of quantum computing. This survey paper presents the overview of quantum key distribution (QKD) use in IoT settings, systematic review of the research trend, technological solutions, challenges, and future developments. We examine more than 150 published in-between 2018-2025 research papers, categorize the current QKD-IoT solutions, and uncover gaps in the research. We find that hybrid QKD-classical cryptography designs provide promise of realistic IoT implementation and edge-based quantum gateways emerge as an architecture of scalable implementation.