The increasing integration of smart grids within the Internet of Things (IoT) ecosystem requires the implementation of robust security measures due to vulnerabilities brought about by pervasive connectivity. Previous smart grid security protocols are based on classical cryptographic algorithms, which are susceptible to significant threats from emerging quantum computers. Consequently, the adoption of quantum-resistant solutions is imperative for the long-term security of smart grids. This article presents a novel protocol for authentication and secret key establishment in smart grids, utilizing post-quantum cryptography (PQC) algorithms. Our proposed protocol employs the FALCON digital signature algorithm for integrity verification and the CRYSTALS-Kyber key encapsulation mechanism (KEM) for secret key establishment, providing robust protection against quantum attacks. Our optimized implementation of the proposed protocol on a graphics processing unit (GPU) targets grid security module (GSM)/gateway-side deployments and demonstrates scalability under large numbers of concurrent authentication requests. Experimental validation demonstrates the proposed protocol’s ability to effectively manage numerous concurrent authentication requests, ensuring secure and efficient communication within smart grid networks.
The increasing integration of smart grids within the Internet of Things (IoT) ecosystem requires the implementation of robust security measures due to vulnerabilities brought about by pervasive connectivity. Previous smart grid security protocols are based on classical cryptographic algorithms, which are susceptible to significant threats from emerging quantum computers. Consequently, the adoption of quantum-resistant solutions is imperative for the long-term security of smart grids. This article presents a novel protocol for authentication and secret key establishment in smart grids, utilizing post-quantum cryptography (PQC) algorithms. Our proposed protocol employs the FALCON digital signature algorithm for integrity verification and the CRYSTALS-Kyber key encapsulation mechanism (KEM) for secret key establishment, providing robust protection against quantum attacks. Our optimized implementation of the proposed protocol on a graphics processing unit (GPU) targets grid security module (GSM)/gateway-side deployments and demonstrates scalability under large numbers of concurrent authentication requests. Experimental validation demonstrates the proposed protocol’s ability to effectively manage numerous concurrent authentication requests, ensuring secure and efficient communication within smart grid networks.
The incorporation of Electric Vehicles into smart grid networks poses great cybersecurity threats, especially with respect to the secure authentication of devices and communications between charging stations, electric vehicles, and grid operators. Conventional cryptography methods like RSA and ECC are susceptible to quantum computing attacks, which call for the implementation of post-quantum cryptography in order to make these systems quantum-resistant. This paper discusses need and imminence of post-quantum cryptography-based authentication mechanisms for improving the security of smart grid infrastructure that facilitates Electric Vehicles operation and charging stations. It introduces the existing authentication protocols, their shortcomings from a quantum threat perspective, and suggests a framework using quantum-resistant algorithms for authenticating devices, exchanging keys, and ensuring data integrity. Moreover, we tackle scalability, efficiency, and standardization issues regarding the deployment of PQC-based solutions in large-scale smart grid settings. This research identifies the compelling need for secure, quantum-resistant authentication systems to protect the increasing overlap of electric vehicles and smart grid networks, with a view to maintaining secure, reliable, and future-proof energy infrastructures.
The smart grid (SG) embodies the future of power systems, featuring self-healing mechanisms, adaptability, and sustainability. Nevertheless, its interconnected and widely distributed architecture presents substantial cybersecurity challenges, rendering it susceptible to cyber attacks that may cause outages, infrastructure failures, and data breaches, including the exposure of personal information. Public-key cryptography (PKC) has historically been utilized to ensure confidentiality, authenticate devices, and maintain data integrity. However, the rise of quantum computing poses a serious threat to the viability of these PKC algorithms, particularly with the potential implementation of algorithms such as Shor’s algorithm. To address these vulnerabilities, we propose an innovative security protocol for post-quantum communication within SG applications, engineered to resist both classical and quantum threats. Our comparative study reveals that this protocol delivers enhanced security and improved functionality while maintaining low communication and computational costs compared to existing methods. We further demonstrate its practicality through real-time testbed experiments and implementations on a Raspberry Pi, supported by an extensive security assessment using the Scyther automated validation tool. A detailed comparison with Kyber in terms of computational efficiency, storage requirements, and implementation overhead to support our lightweight claim. Finally, a network simulation conducted using Network Simulator 3 (NS3) further demonstrates the performance of the proposed scheme, highlighting its scalability and reliability.
In emerging environments such as cloud computing and the Internet of Things (IoT), secure authentication and key negotiation play a crucial role in protecting data transmitted over public networks. However, many existing authentication protocols are still designed based on classical public-key cryptography primitives, and quantum computing may threaten their security. To address this challenge, we propose a post-quantum authentication and key agreement protocol that uses the lattice-based Kyber key encapsulation mechanism (KEM). Our proposed protocol integrates cryptographic authentication, smart card protection, and post-quantum key encapsulation mechanisms, enabling mutual authentication between users and servers and securely establishing session keys. The security of the protocol is formally analyzed in the Real-or-Random (ROR) model under the random oracle assumption and the IND-CCA security of the underlying KEM scheme. Furthermore, through informal security analysis, we have further demonstrated that the protocol possesses important security properties, including anonymity, untraceability, perfect forward confidentiality, and resistance to known attacks. In addition, the computational cost and communication overhead of the proposed scheme are evaluated and compared with several representative authentication protocols. The results show that the proposed protocol can provide strong security while maintaining low computational cost and communication overhead.
The rapid expansion of Internet of Things (IoT) ecosystems has introduced significant security challenges due to resource-constrained devices, heterogeneous network architectures, and largescale connectivity. Traditional authentication and key exchange mechanisms, primarily based on classical cryptographic algorithms such as RSA and ECC, are vulnerable to future quantum computing attacks. The emergence of quantum algorithms, particularly Shor’s algorithm, threatens the long-term confidentiality and integrity of IoT communications. This paper proposes a Quantum-Resistant Authentication and Key Exchange Protocol specifically designed for secure IoT architectures. The proposed framework integrates post-quantum cryptographic primitives, including lattice-based key exchange mechanisms and hash-based authentication schemes, optimized for low computational overhead suitable for constrained IoT devices. The protocol ensures mutual authentication, forward secrecy, and resistance against quantum adversaries while maintaining minimal communication latency. Security analysis demonstrates robustness against replay, man-in-the-middle, and key-compromise attacks. Performance evaluation shows that the proposed solution achieves a balance between quantum security strength and resource efficiency, making it suitable for next-generation IoT deployments in smart cities, healthcare systems, and industrial automation.
The rapid progress of quantum computing poses significant challenges to traditional cryptographic mechanisms, necessitating the adoption of post-quantum cryptography (PQC) solutions. This paper proposes a Quantum-Enhanced Security for Smart Meters (QESM) system to protect power plant data in smart cities, integrating Kyber for secure key exchange, FALCON (Fast-Fourier Transform over Lattice-based Cryptography) for quantum-resistant digital signatures, and ZKP (Zero-Knowledge Proof) for effective verification without revealing sensitive data to secure power plant data against quantum attacks. To evaluate the security of the proposed system, we analyze its resistance to various quantum threats, including Shor’s algorithm, Grover’s algorithm, quantum key analysis, quantum reversal encryption, quantum amplification, quantum switching, and quantum collision attacks. In the current study, accurate measures were used and the average was approximately 7.065 (bits/byte) for randomness, the average execution time was 6.202 milliseconds, the average memory consumption was approximately 4.343 KB, 6.4 Completeness was equal to 1 and unforgeability was 100%. As for the average throughput, it was approximately 485,605 operations per second. That shows the QESM system provides strong security and efficiency, making it a viable solution for protecting the electricity infrastructure in smart cities in the quantum era.
Current improvements in quantum computing present a substantial challenge to classical cryptographic systems, which typically rely on problems that can be solved in polynomial time using quantum algorithms. Consequently, post-quantum cryptography (PQC) has emerged as a promising solution to emerging quantum-based cryptographic challenges. The greatest threat is public-key cryptosystems, which are primarily responsible for key exchanges. In PQC, key encapsulation mechanisms (KEMs) are crucial for securing key exchange protocols, particularly in Internet communication, virtual private networks (VPNs), and secure messaging applications. CRYSTALS-Kyber and NTRU are two well-known PQC KEMs offering robust security in the quantum world. However, even when quantum computers are functional, they are not easily accessible. IoT devices will not be able to utilize them directly, so there will still be a requirement to protect IoT devices from quantum attacks. Concerns such as limited computational power, energy efficiency, and memory constraints in devices such as those used in IoTs, embedded systems, and smart cards limit the use of these techniques in constrained environments. These concerns always arise there. To address this issue, this study conducts a broad comparative analysis of Kyber and NTRU, with special focus on their security, performance, and implementation efficiency in such environments (IOT/constrained environments). In addition, a case study was conducted by applying KEMs to a low-power embedded device to analyze their performance in real-world scenarios. These results offer an important comparison for cyber security engineers and cryptographers who are involved in integrating post-quantum cryptography into resource-constrained devices.