The growing reliance on digital communication has increased the importance of protecting transmitted information from tampering, forgery, and other security threats. At the same time, advances in quantum computing have raised concerns regarding the long-term security of traditional cryptographic mechanisms used for authentication and integrity verification. To address these challenges, this paper proposes a quantum-resilient data integrity verification framework that combines AES-GCM, SHA-256, Elliptic Curve Verifiable Random Functions (ECVRF), and the post-quantum signature scheme ML-DSA. In the proposed framework, encrypted data are associated with a cryptographic digest, a publicly verifiable proof, and a post-quantum digital signature before transmission. A prototype implementation was developed and evaluated through security, computational, and communication-overhead analyses. Experimental results showed that the framework successfully detected ciphertext modification, signature forgery, and replay attacks while maintaining the integrity and authenticity of transmitted data. The evaluation also indicated that ECVRF contributes the largest share of computational cost, whereas ML-DSA is responsible for most of the communication overhead due to its signature size. The findings demonstrate that the proposed framework can provide a practical combination of integrity verification, authenticity assurance, and quantum-resistant security for data transmission over untrusted networks.
The growing reliance on digital communication has increased the importance of protecting transmitted information from tampering, forgery, and other security threats. At the same time, advances in quantum computing have raised concerns regarding the long-term security of traditional cryptographic mechanisms used for authentication and integrity verification. To address these challenges, this paper proposes a quantum-resilient data integrity verification framework that combines AES-GCM, SHA-256, Elliptic Curve Verifiable Random Functions (ECVRF), and the post-quantum signature scheme ML-DSA. In the proposed framework, encrypted data are associated with a cryptographic digest, a publicly verifiable proof, and a post-quantum digital signature before transmission. A prototype implementation was developed and evaluated through security, computational, and communication-overhead analyses. Experimental results showed that the framework successfully detected ciphertext modification, signature forgery, and replay attacks while maintaining the integrity and authenticity of transmitted data. The evaluation also indicated that ECVRF contributes the largest share of computational cost, whereas ML-DSA is responsible for most of the communication overhead due to its signature size. The findings demonstrate that the proposed framework can provide a practical combination of integrity verification, authenticity assurance, and quantum-resistant security for data transmission over untrusted networks.
As health information crosses from one healthcare domain or infrastructure to another, robust confidentiality, authentication, and integrity of the electronic medical records are crucial.This study aims to present a hybrid post-quantum encryption and authentication scheme for secure medical data exchange across the border using lattice-based encryption.The framework integrates a session-key establishment mechanism based on ML-KEM, AES-256-GCM for medical-data encryption, a digital signature scheme based on ML-DSA, integrity check based on hash function and identity-bound transaction metadata.It takes into account the mathematical security model involving key encapsulation, signature verification, adversarial advantage, communication overhead and processing cost.This shows that the proposed framework takes around 0.47ms for key encapsulation, 0.55ms for decapsulation and 0.94ms for digital signing, using simulation-based evaluation.The assumed end-to-end processing time is 83.91ms for a medical record of 50 MB, and the security related communication overhead falls off to about 0.011% when the size of the medical record increases.The results of the analysis show that quantum-resistant protection can be implemented with a moderate computational and communication overhead in crossborder healthcare settings.
The rapid expansion of Internet of Things (IoT) ecosystems has increased the need for communication mechanisms that can remain secure against emerging computational threats. Conventional asymmetric cryptographic schemes, including RSA and Elliptic Curve Cryptography (ECC), are vulnerable to advances in quantum computing due to the ability of Shor's algorithm to undermine their underlying mathematical assumptions. To address these challenges, this paper presents PQ-IoT SecureCom, a quantum-resistant communication framework built using NIST-standardized post-quantum cryptographic primitives. The proposed framework employs ML-KEM (derived from Kyber) for secure key encapsulation and ML-DSA (derived from Dilithium) for digital authentication, combined with AESGCM to ensure data confidentiality and integrity. Additional security mechanisms, including PQC-based device certification, periodic session key updates, and nonce-based timestamp validation, are incorporated to mitigate replay and impersonation attacks. The framework also supports a hybrid operational mode that enables performance comparison between classical and postquantum cryptographic schemes. System behavior is monitored using a real-time dashboard that records cryptographic overhead, communication metrics, and detected security events. Experimental evaluation shows that ML-KEM and ML-DSA significantly enhance security while introducing computational overhead that remains acceptable for contemporary IoT devices. Through automated attack simulations and detailed event logging, PQ-IoT SecureCom demonstrates the practical feasibility of deploying scalable post-quantum security in IoT communication systems.
The rapid development of quantum computing presents a substantial threat to traditional cryptographic algorithms, particularly those relying on mathematical problems such as integer factorization and elliptic curve operations. As a response, the cryptographic community has accelerated the design of post-quantum cryptographic schemes that can withstand attacks from both classical and quantum computers. However, many of these new schemes exhibit inherent trade-offs between performance, key sizes, and implementation complexity. To address this, we propose a novel hybrid cryptographic framework tailored for secure and efficient data transmission in future quantum-aware environments. The proposed system combines three algorithmic paradigms: a lattice-based encryption method for fast and lightweight data protection, a hash-based signature mechanism for authenticity, and a code-based key exchange method to ensure session confidentiality. This layered integration is designed to capitalize on each algorithm’s strengths while mitigating individual limitations. The system is implemented using modular components in a testbed simulating real-world deployments, and its performance is benchmarked across multiple metrics including encryption latency, signature generation time, key sizes, and throughput. Comparative results indicate that the hybrid approach outperforms monolithic schemes in critical areas such as execution time and cryptographic strength under quantum adversary models. The findings support the practicality of using multiple post-quantum primitives in tandem to build robust communication systems. This research contributes a realistic implementation and evaluation of post-quantum security models and highlights key directions for future research and standardization efforts as the global transition to quantum-safe infrastructure begins.
Quantum computing poses a significant threat to Wireless Sensor Networks (WSNs) by undermining traditional cryptographic algorithms such as RSA and Elliptic Curve Cryptography (ECC). This work proposes a quantum-safe architecture for WSNs that integrates post-quantum cryptography (PQC) with lightweight IoT protocols to ensure long-term confidentiality, authenticity, and resilience. The framework leverages ML-KEM for key encapsulation and ML-DSA/SLH-DSA for signatures, and seamlessly integrates with EDHOC, OSCORE, and COSE. A novel Efficient Adaptive Parameter Selection (EAPS) mechanism dynamically adjusts cryptographic strength to balance security, energy consumption, and latency under varying network conditions. Experimental evaluation demonstrates that ciphertext fragmentation (8–27 pieces) results in manageable completion times of 4–10 seconds, while join operations consume only 0.005–0.03 J per cryptographic handshake event, while system-level energy consumption including network overhead is higher (~1.0–1.4 J per join cycle depending on hop count and retransmissions). Battery lifetime projections under steady-state sensing workloads range from approximately 115–280 months for low-duty-cycle operation, whereas realistic deployment conditions with periodic communication yield effective lifetimes of 11.5–24 months. Security analysis confirms robust resistance against downgrade attacks and Harvest-Now-Decrypt-Later (HNDL) threats. Moreover, EAPS reduces risk scores by over 50% compared to fixed schemes with less than 10% additional energy overhead, and batch signature verification improves scalability by increasing throughput from ~1,600 to ~2,800 verifications per second. Overall, the proposed framework demonstrates that WSNs can achieve quantum-resistant security with minimal performance trade-offs, ensuring readiness for the post-quantum era.
As the digital landscape evolves, the reliance on cloud computing for critical infrastructure across various sectors highlights the need for robust security mechanisms to protect sensitive data from emerging cyber threats, particularly those posed by quantum computing. Traditional cryptographic systems, while currently effective, are vulnerable to quantum attacks, necessitating the development of quantum-resistant solutions. This research introduces the Quantum-Resilient Cryptographic Framework (QRCF), a hybrid, adaptive cryptographic framework designed to safeguard cloud environments against both classical and quantum threats. The QRCF integrates lattice-based Kyber and code-based McEliece algorithms, offering a comprehensive and scalable solution for secure data storage, management, and transmission. Key contributions include the development of a dynamic security management layer that adapts to real-time threat analysis, ensuring continuous protection against evolving threats, and the implementation of robust post-quantum cryptographic methods that maintain high performance and low computational overhead. Quantitative analysis shows that the QRCF maintains a high throughput of 420 MB/s for encryption and 400 MB/s for decryption under normal operations, with latency as low as 3.2 ms and 3.6 ms, respectively. The framework exhibited strong resistance to various attack models, with success rates of 1.0% for brute-force attacks, 1.875% for MITM attacks, 0.833% for side-channel attacks, and 1.6% for replay attacks. Against quantum threats, the QRCF showed no vulnerability to Shor’s Algorithm and a minimal success rate of 0.667% for Grover’s Algorithm. The framework’s design ensures seamless integration with existing cloud infrastructures, providing practical migration strategies to quantum-safe cryptography without disrupting operational workflows. By addressing key research gaps in quantum-safe cloud security, this study contributes significantly to the field, offering a robust, scalable, and efficient cryptographic solution that enhances the security and operational performance of cloud environments in the face of advancing quantum computational capabilities.
The emergence of fault-tolerant quantum computing poses an existential threat to classical public-key cryptographic systems, including RSA and Elliptic Curve Cryptography (ECC), through Shor's polynomial-time factorization algorithm. The Harvest Now, Decrypt Later (HNDL) attack paradigm further amplifies this threat by enabling adversaries to archive ciphertext today for future quantum-enabled decryption, rendering long-term data confidentiality immediately at risk. While the National Institute of Standards and Technology (NIST) finalized post-quantum cryptographic standards ML-KEM (FIPS 203) and ML-DSA (FIPS 204) in August 2024, their practical integration into complete application-level communication systems remains a largely unaddressed research gap. This paper presents QuantumShield, a hybrid post-quantum secure peer-to-peer communication platform that integrates ML-KEM-768 for quantum-safe key encapsulation, ML-DSA-65 for authenticated digital signatures, and AES-256-GCM for high-throughput symmetric encryption. Our primary research contribution is a rigorous empirical analysis of PQC integration overhead in a real-world communication pipeline, quantifying latency, key size, and security trade-offs against classical RSA-2048 and ECC-256 baselines under controlled experimental conditions. Experimental evaluation across 1,000 iterations demonstrates that ML-KEM-768 encapsulation completes in 2.8 ± 0.2 ms compared to 4.1 ± 0.3 ms for ECDH key agreement — a 32% latency reduction while providing NIST Level 3 post-quantum security. The complete secure transfer pipeline processes 1 MB files in under 22 ms on commodity hardware. The system further provides interactive cryptographic visualization, adversary threat modeling, tamper detection simulation, and a hybrid migration framework demonstrating practical transition from classical to post-quantum infrastructure. QuantumShield establishes that quantum-safe communication is not merely theoretical but deployable today with negligible performance compromise.