Industrial control systems rely on long-lived cryptographic trust anchors to protect safety-critical operations, remote maintenance, and software supply chains. Quantum-capable adversaries create a time-shifted risk: encrypted traffic captured today may be decrypted later, while classical public-key signatures that authenticate devices, software updates, and forensic records may eventually become forgeable. This paper presents a secure-by-design post-quantum architecture for industrial control systems that couples cryptographic agility with the timing, availability, and safety constraints of operational technology. The architecture combines a post-quantum-ready trust fabric, hybrid and post-quantum transport profiles, gateway-anchored protection for legacy field protocols, and lifecycle governance aligned with industrial cybersecurity practice. A reproducible sizing study uses standardized artifact sizes from current post-quantum standards and representative industrial link rates to estimate bandwidth, latency, credential-storage, packetization, and maintenance-window effects. The evaluation also separates communication occupancy from control-loop timing, clarifies the certificate-chain sizing assumptions, discusses retransmission and packet-loss implications, and relates the analytical model to published embedded post-quantum benchmarking. The results show that post-quantum and hybrid handshakes are practical on Ethernet-based plant networks but become operationally expensive on low-rate telemetry links, which motivates gateway termination, session resumption, and deterministic rekeying. The resulting blueprint offers a practical migration path that reduces harvest-now-decrypt-later exposure while preserving deterministic control behavior and operational resilience.
Industrial control systems rely on long-lived cryptographic trust anchors to protect safety-critical operations, remote maintenance, and software supply chains. Quantum-capable adversaries create a time-shifted risk: encrypted traffic captured today may be decrypted later, while classical public-key signatures that authenticate devices, software updates, and forensic records may eventually become forgeable. This paper presents a secure-by-design post-quantum architecture for industrial control systems that couples cryptographic agility with the timing, availability, and safety constraints of operational technology. The architecture combines a post-quantum-ready trust fabric, hybrid and post-quantum transport profiles, gateway-anchored protection for legacy field protocols, and lifecycle governance aligned with industrial cybersecurity practice. A reproducible sizing study uses standardized artifact sizes from current post-quantum standards and representative industrial link rates to estimate bandwidth, latency, credential-storage, packetization, and maintenance-window effects. The evaluation also separates communication occupancy from control-loop timing, clarifies the certificate-chain sizing assumptions, discusses retransmission and packet-loss implications, and relates the analytical model to published embedded post-quantum benchmarking. The results show that post-quantum and hybrid handshakes are practical on Ethernet-based plant networks but become operationally expensive on low-rate telemetry links, which motivates gateway termination, session resumption, and deterministic rekeying. The resulting blueprint offers a practical migration path that reduces harvest-now-decrypt-later exposure while preserving deterministic control behavior and operational resilience.
Consumer Industrial Control Systems (ICS) - spanning smart homes, building automation, and consumer manufacturing equipment - continue to rely on RSA and ECC-based protocols despite decade-long deployment lifecycles that extend well into the post-quantum era. The harvest-now-decrypt-later (HNDL) threat, wherein adversaries archive ciphertext today for decryption once cryptographically relevant quantum computers (CRQC) emerge, demands near-term migration for devices with 10–20-year operational horizons. We present an adaptive hybrid protocol that combines ML-KEM (NIST FIPS 203) with classical ECDH, selecting parameter sets dynamically from per-device capability profiles. Over 5,000 TLS handshakes conducted on representative consumer IoT hardware - Raspberry Pi gateways and ESP-class microcontrollers - our adaptive negotiation reduces handshake overhead by 23–31% compared with static hybrid baselines while preserving full backward compatibility with classical-only peers. We further provide a practical migration roadmap comprising a device capability taxonomy, risk-prioritised deployment guidance, and vendor-actionable cost–benefit analysis. All experimental artefacts are released as open-source to facilitate community replication
Quantum computing is rapidly approaching a stage where classical cryptographic systems, particularly RSA, ECC, and Diffie–Hellman, will no longer provide adequate security for critical infrastructure. The emergence of Shor’s and Grover’s algorithms introduces unprecedented vulnerability to national cyber-defense ecosystems, underpinning power grids, transportation, military communications, and banking systems. This paper presents a unified post-quantum cryptographic (PQC) security framework integrating lattice-based primitives, hybrid key-exchange mechanisms, and secure orchestration for resource-constrained operational-technology environments. The proposed architecture leverages NIST-recommended schemes, including CRYSTALS-Kyber, CRYSTALS-Dilithium, and SPHINCS+, to ensure long-term confidentiality, integrity, and interoperability across legacy and modern control environments. A defense-in-depth trust-fabric is introduced to protect critical data flows across edge controllers, automation PLCs, substations, cloud-SCADA gateways, and defense communication systems. Performance evaluation demonstrates a 39.4% reduction in key-exchange latency, 46% faster authentication cycles, and zero-downtime cryptographic transition capability. Our findings position this framework as a practical migration blueprint supporting national PQC readiness and cyber-resilience mandates.
Brownfield supervisory control and data acquisition environments face a migration problem that is materially different from enterprise information technology. Post-quantum cryptography must be introduced into systems that privilege safety, deterministic communications, long asset lifetimes, staged outages, vendor-certified configurations, and protocol heterogeneity. At the same time, the public standards landscape changed rapidly between 2023 and March 2026, including finalization of the NIST ML-KEM, ML-DSA, and SLH-DSA standards, publication of NIST guidance for key-encapsulation mechanisms, growth of national migration roadmaps, and active standardization of hybrid and pure post-quantum handshakes for Transport Layer Security and Internet Key Exchange. This paper develops a framework for hybrid classical-post-quantum migration in brownfield SCADA settings that is evidence-based, implementation-oriented, and explicitly staged. We distinguish coexistence from true cryptographic hybridization, quantify control-plane overhead using official algorithm sizes and current protocol drafts, and propose a conduit-first migration sequence that prioritizes gateways, remote access, management planes, trust anchors, and software-signing services before intrusive field-device replacement. To support the applied-research claim, the framework is evaluated through standards-derived protocol-overhead analysis, a representative brownfield case demonstration, explicit scoring-model parameter rationale, sensitivity analysis, phase-gate validation criteria, and a pilot evidence package. The result is a practical path for operators who must begin quantum-safe preparation now, even where endpoint-native post-quantum support remains uneven.
This item contains a research article proposing a post-quantum cryptography (PQC) security architecture for IoT-enabled chemical process plants, where sensor connectivity and cloud analytics introduce safety-critical cyber-physical risks. The paper first surveys PQC and quantum-threat literature for SCADA/OT and industrial IoT systems, then applies Mosca’s Theorem to argue that long-lived chemical infrastructures are already in the “harvest now, decrypt later” risk window.A structured threat model is built using STRIDE and MITRE ATT&CK for ICS, distinguishing safety-critical consequences (e.g., false sensor readings and malicious actuator commands) from conventional confidentiality breaches. Based on this model, the paper proposes an ESP32-based three-tier architecture (field sensors, edge microcontrollers, and cloud analytics) that integrates NIST-standardized lattice-based algorithms: CRYSTALS-Kyber (ML-KEM) for session key establishment, CRYSTALS-Dilithium (ML-DSA) for data/command authentication, and SPHINCS+ or Dilithium for firmware-signing on resource-constrained devices.The design is explicitly mapped to IEC 62443 Foundational Requirements (FR1 Identification & Authentication, FR3 System Integrity, FR4 Data Confidentiality) and accompanied by a feasibility analysis that uses microcontroller-level benchmarks of Kyber and Dilithium on ESP32-class hardware, highlighting computation, memory, and communication trade-offs versus classical RSA/ECC. The paper also outlines a hardware-free validation methodology using liboqs (Open Quantum Safe) with TLS 1.3, device emulation, and Linux network emulation to measure protocol overhead under realistic industrial network conditions.Finally, it discusses migration challenges for brownfield plants, the evolving standards and regulatory landscape (NIST IR 8547, IEC 62443, CISA/NSA guidance), and future work on empirical benchmarking and multi-plant threat-model generalization, aiming to provide a roadmap for designing quantum-safe IoT architectures in safety-critical chemical production.
Abstract: This study develops a scope of analytical framework for integrating quantum cryptography, quantum communications, post-quantum cryptography and nano-enabled hardware security into global cybersecurity architectures for DefenceTech, FinTech and SpaceTech. The research problem is framed by the convergence of three pressures: the long-lived confidentiality exposure created by harvest-now-decrypt-later attacks, the rapid standardization of post-quantum algorithms, and the need for hardware-rooted trust in physically exposed devices, satellites, edge nodes and payment infrastructures. The paper synthesizes quantum key distribution, quantum-network standardization, crypto-agile migration, physical unclonable functions and sectoral governance into a single evaluation model. It uses a public-source calibrated realistic dataset of 18 high-value scenarios across defence, finance and space systems. The dataset is not represented as confidential operational telemetry; rather, it is explicitly constructed from publicly available threat, standards and engineering indicators to support transparent modelling. The methodology combines literature review, structured scenario analysis, weighted risk scoring, residual-risk modelling, expected annual loss estimation and feasibility-sensitive control selection. Mathematical equations are used to express QKD channel attenuation, secret-key-rate intuition, cryptographic migration risk, expected loss and multi-criteria optimization. Results indicate that hybrid PQC adoption produces the broadest near-term risk reduction, QKD offers the strongest value where long-lived secrets and controlled optical paths exist, and nano-enabled roots of trust are especially relevant to contested devices and supply chains. The study proposes a staged global framework in which crypto-agility, hybrid PQC, QKD network governance and nano-PUF attestation are treated as complementary layers rather than competing security paradigms. The conclusion identifies future work in real operational benchmarking, satellite-QKD testbeds, standards-aligned implementation assurance and machine-verifiable security reasoning. Keywords: Quantum cryptography; quantum key distribution; post-quantum cryptography; quantum communications; nano-enabled cybersecurity; physical unclonable functions; DefenceTech; FinTech; SpaceTech; crypto-agility; QKD networks; ML-KEM; ML-DSA; hardware root of trust; cyber resilience
Abstract: This study investigates quantum-safe modernization strategies for critical infrastructure by proposing a rigorous post-quantum (PQ) migration and verification framework that treats cryptographic transition as a safety-critical, multi-system engineering program rather than a routine software upgrade. The core argument is that infrastructure operators face two coupled risks: (i) cryptanalytic obsolescence of classical public-key systems under cryptographically relevant quantum computing and (ii) operational fragility introduced by large-scale cryptographic refactoring across heterogeneous assets such as industrial control systems, substation automation, telecommunications backhaul, and safety instrumentation. To address both, the framework integrates inventory-driven migration planning, hybrid-mode interoperability controls, and verification evidence that is continuously auditable across the asset lifecycle. The manuscript operationalizes verification as a chain of assurance spanning algorithm selection, protocol composition, implementation conformance, and deployment governance. Standardized PQ primitives (e.g., ML‑KEM for key establishment and ML‑DSA/SLH‑DSA for signa-tures) are used as reference baselines, with explicit attention to size and performance implications that alter network and device constraints. Real-data collection is defined as standards-backed parameter extraction, vendor/firmware artifact inspection, and protocol telemetry capture in representative environments. Results are reported as decision-facing tables and figures that quantify payload expansion, transition milestones, and published performance overheads, alongside interpretation of their operational significance for safety and resilience. Keywords: post-quantum cryptography; ML-KEM; ML-DSA; SLH-DSA; CNSA 2.0; critical infrastructure; migration governance; protocol verification; conformance testing; cryptographic agility