This item contains a research article proposing a post-quantum cryptography (PQC) security architecture for IoT-enabled chemical process plants, where sensor connectivity and cloud analytics introduce safety-critical cyber-physical risks. The paper first surveys PQC and quantum-threat literature for SCADA/OT and industrial IoT systems, then applies Mosca’s Theorem to argue that long-lived chemical infrastructures are already in the “harvest now, decrypt later” risk window.A structured threat model is built using STRIDE and MITRE ATT&CK for ICS, distinguishing safety-critical consequences (e.g., false sensor readings and malicious actuator commands) from conventional confidentiality breaches. Based on this model, the paper proposes an ESP32-based three-tier architecture (field sensors, edge microcontrollers, and cloud analytics) that integrates NIST-standardized lattice-based algorithms: CRYSTALS-Kyber (ML-KEM) for session key establishment, CRYSTALS-Dilithium (ML-DSA) for data/command authentication, and SPHINCS+ or Dilithium for firmware-signing on resource-constrained devices.The design is explicitly mapped to IEC 62443 Foundational Requirements (FR1 Identification & Authentication, FR3 System Integrity, FR4 Data Confidentiality) and accompanied by a feasibility analysis that uses microcontroller-level benchmarks of Kyber and Dilithium on ESP32-class hardware, highlighting computation, memory, and communication trade-offs versus classical RSA/ECC. The paper also outlines a hardware-free validation methodology using liboqs (Open Quantum Safe) with TLS 1.3, device emulation, and Linux network emulation to measure protocol overhead under realistic industrial network conditions.Finally, it discusses migration challenges for brownfield plants, the evolving standards and regulatory landscape (NIST IR 8547, IEC 62443, CISA/NSA guidance), and future work on empirical benchmarking and multi-plant threat-model generalization, aiming to provide a roadmap for designing quantum-safe IoT architectures in safety-critical chemical production.
This item contains a research article proposing a post-quantum cryptography (PQC) security architecture for IoT-enabled chemical process plants, where sensor connectivity and cloud analytics introduce safety-critical cyber-physical risks. The paper first surveys PQC and quantum-threat literature for SCADA/OT and industrial IoT systems, then applies Mosca’s Theorem to argue that long-lived chemical infrastructures are already in the “harvest now, decrypt later” risk window.A structured threat model is built using STRIDE and MITRE ATT&CK for ICS, distinguishing safety-critical consequences (e.g., false sensor readings and malicious actuator commands) from conventional confidentiality breaches. Based on this model, the paper proposes an ESP32-based three-tier architecture (field sensors, edge microcontrollers, and cloud analytics) that integrates NIST-standardized lattice-based algorithms: CRYSTALS-Kyber (ML-KEM) for session key establishment, CRYSTALS-Dilithium (ML-DSA) for data/command authentication, and SPHINCS+ or Dilithium for firmware-signing on resource-constrained devices.The design is explicitly mapped to IEC 62443 Foundational Requirements (FR1 Identification & Authentication, FR3 System Integrity, FR4 Data Confidentiality) and accompanied by a feasibility analysis that uses microcontroller-level benchmarks of Kyber and Dilithium on ESP32-class hardware, highlighting computation, memory, and communication trade-offs versus classical RSA/ECC. The paper also outlines a hardware-free validation methodology using liboqs (Open Quantum Safe) with TLS 1.3, device emulation, and Linux network emulation to measure protocol overhead under realistic industrial network conditions.Finally, it discusses migration challenges for brownfield plants, the evolving standards and regulatory landscape (NIST IR 8547, IEC 62443, CISA/NSA guidance), and future work on empirical benchmarking and multi-plant threat-model generalization, aiming to provide a roadmap for designing quantum-safe IoT architectures in safety-critical chemical production.
The growing interconnection of critical engineering infrastructure through IoT introduces unprecedented exposure to cyber threats. Emerging quantum computing capabilities pose a transformative risk to classical cryptographic primitives such as Rivest–Shamir–Adleman and Elliptic-Curve Cryptography, which underpin secure communication and device authentication in industrial control systems, power grids, transportation networks, and healthcare infrastructure. This paper investigates quantum-resistant encryption, often termed post-quantum cryptography (PQC), as a sustainable security paradigm for IoT communication within critical systems. By analyzing lattice-based, code-based, multivariate, and hash-based schemes, the study evaluates trade-offs between computational cost, memory footprint, and latency constraints intrinsic to resource-limited IoT nodes. A hybrid architectural framework integrating the National Institute of Standards and Technology-standardized algorithms (e.g., Cryptographic Suite for Algebraic Lattices—Kyber, Dilithium) with lightweight symmetric primitives (e.g., Ascon, GIFT block cipher in Combined Feedback mode) is proposed for secure data transmission across heterogeneous IoT layers. Experimental simulations benchmark key-exchange throughput, ciphertext expansion, and resilience against quantum-adversarial models, demonstrating up to 65% reduction in handshake latency compared to baseline lattice implementations under constrained conditions. The paper concludes with policy and engineering recommendations for the adoption of quantum-resistant IoT protocols in energy, transportation, and industrial automation sectors, highlighting alignment with global PQC migration roadmaps and IEC 62443 cybersecurity standards.
Quantum computing poses an existential threat to classical public-key cryptography, particularly RSA and elliptic-curve systems, which form the backbone of secure communication, authentication, and digital trust. Once scalable quantum computers emerge, algorithms such as Shor’s will be capable of breaking these schemes, jeopardizing confidentiality and integrity across the internet and enterprise systems. Post-quantum cryptography (PQC) offers a viable defense, providing quantum-resistant algorithms that can be implemented on today’s hardware and protocols. Recent standardization milestones—including NIST’s approval of ML-KEM (Kyber) for key establishment, ML-DSA (Dilithium) and SLH-DSA (SPHINCS+) for signatures, and the selection of HQC as a complementary KEM—mark a turning point for practical adoption. This paper surveys the quantum threat model, algorithm families, performance trade-offs, and integration patterns such as hybrid modes and crypto-agile architectures. It further outlines a phased migration roadmap for enterprises, emphasizing harvest-now-decrypt-later risks and compliance imperatives. By bridging technical, operational, and policy perspectives, the study provides actionable guidance to prepare organizations for a secure and quantum-resilient future.
The rapid advancement of quantum computing poses significant threats to classical cryptographic methods, such as Rivest–Shamir–Adleman (RSA) and Elliptic Curve Cryptography (ECC), which currently secure Internet of Things (IoT) and cloud communications. Post-Quantum Cryptography (PQC), particularly lattice-based schemes, has emerged as a promising alternative. CRYSTALS-Kyber, standardized by the National Institute of Standards and Technology (NIST) as ML-KEM, has shown efficiency and practicality for constrained IoT devices. Most existing research has focused on PQC within the Transport Layer Security (TLS) protocol. Consequently, a critical gap exists in understanding PQC’s performance in lightweight IoT protocols. These are Message Queuing Telemetry Transport (MQTT) and Constrained Application Protocol (CoAP), particularly under adverse network conditions. To address this gap, this paper provides a systematic review of the literature on the network resilience and performance of CRYSTALS-Kyber when integrated into these protocols operating over lossy and high-latency networks. Additional challenges include non-standardized integration, resource limitations, and side-channel vulnerabilities. This review provides a structured synthesis of current knowledge, highlights unresolved trade-offs between security and efficiency, and outlines future research directions, including protocol-level optimization, lightweight signature schemes, and resilience testing of PQC-secured IoT protocols under realistic conditions.
The development of quantum computing technology is progressing very quickly, which poses a great threat to classical cryptographic algorithms like RSA and ECC, as they are based on mathematical problems that can be easily solved using quantum computing technology. To overcome the threat of quantum computing technology, the need for PQC algorithms like CRYSTALS Kyber, CRYSTALS Dilithium, Falcon, and SPHINCS+, which are standardized or recommended by NIST, has become essential in the era of cybersecurity. The feasibility of these algorithms in real time applications is the main focus of this thesis. A mixed approach is adopted for this purpose. Benchmark experiments were performed using the Open Quantum Safe library and PQC enabled OpenSSL for key generation, encryption, decryption, signature generation, signature verification, and TLS handshakes. Simulated environment and cloud environment were used for this purpose. Moreover, case studies were also conducted for cloud computing, financial sector, and IoT applications. Additionally, threat modeling is also performed for assessing the migration risks, i.e., “harvest now decrypt later.” The results indicate that the lattice-based methods, like Kyber and Dilithium, offer a robust trade off in terms of performance and security, albeit with increased key and signature sizes compared to classical methods. Hash based methods, like SPHINCS+, offer robust security, albeit with significant performance and size overheads, indicating that they are best used in specific circumstances. Hybrid approaches, using classical as well as quantum methods, were indicated as viable in the transition from classical to quantum methods, especially in circumstances that require backward compatibility. The paper concludes that NIST standardized PQC algorithms are technically viable for contemporary applications, especially in cloud computing and high-performance computing. However, for large-scale implementation, proper engineering and monitoring of developments in crypt analysis need to be performed. Future research should be directed towards implementation optimization, migration frameworks, and further studies in real-world implementations, especially for resource-constrained IoT and legacy system applications.
The impressively fast development of quantum computing is a serious threat to classical public-key cryptography, and algorithms such as Shor's and Grover's will render RSA and elliptic curve systems essentially useless as soon as a cryptanalytically relevant quantum computer becomes available. Although it is still some way off before such machines are available, the harvest-now-encrypt-later threat highlights the need for proactive defense. In response, the National Institute of Standards and Technology (NIST) published the first post-quantum cryptography standards in 2024, including ML-KEM (Kyber) for key establishment, ML-DSA (Dilithium) for digital signatures and SLH-DSA (SPHINCS+) as a stateless hash-based alternative. This paper is a summary of the evolving post-quantum landscape, starting with the standards and their underlying security and then moving on to migration policies such as CNSA 2.0 and CISA, NSA and NIST guidance. It also looks at integration patterns for important protocols such as TLS, IPsec, SSH, and code signing. A performance, interoperability and overhead evaluation methodology is presented with results showing that hybrid deployment and crypto-agile architectures make PQC adoption a viable option. The paper concludes by providing a governance-oriented roadmap, where inventory, prioritization and pilot deployments are identified as near-term actions, with open questions remaining on performance optimization, implementation security and algorithm resilience over time.
Quantum computing is rapidly approaching a stage where classical cryptographic systems, particularly RSA, ECC, and Diffie–Hellman, will no longer provide adequate security for critical infrastructure. The emergence of Shor’s and Grover’s algorithms introduces unprecedented vulnerability to national cyber-defense ecosystems, underpinning power grids, transportation, military communications, and banking systems. This paper presents a unified post-quantum cryptographic (PQC) security framework integrating lattice-based primitives, hybrid key-exchange mechanisms, and secure orchestration for resource-constrained operational-technology environments. The proposed architecture leverages NIST-recommended schemes, including CRYSTALS-Kyber, CRYSTALS-Dilithium, and SPHINCS+, to ensure long-term confidentiality, integrity, and interoperability across legacy and modern control environments. A defense-in-depth trust-fabric is introduced to protect critical data flows across edge controllers, automation PLCs, substations, cloud-SCADA gateways, and defense communication systems. Performance evaluation demonstrates a 39.4% reduction in key-exchange latency, 46% faster authentication cycles, and zero-downtime cryptographic transition capability. Our findings position this framework as a practical migration blueprint supporting national PQC readiness and cyber-resilience mandates.