Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

International Conference on Electronics, Computers and Artificial Intelligence (ECAI)

Provably Ultra-Lightweight and Post-Quantum Biometric Mutual Authentication Protocol for Secure IOHT Environments

Enas Wahab Abood, Ali Adil Yassin, Zaid Ameen Abduljabbar, Vincent Omollo Nyangaresi, Ali Hasan Ali, Abdulla J. Y. Aldarwish

Published Jul 1, 2026• 1 citation
Publisher
DOI
10.1109/ecai69016.2026.11613778

Related papers

Permutation-based lightweight mutual authentication and key agreement protocol: A post-quantum secure design with IoD applicability

Farid Binbeshr, Mostefa Kara, Sultan Almuhammadi +3 more

Computer Networks•Aug 4, 2026•0 citations

Lightweight RFID-enabled authentication protocol in post-quantum environment

Haradhan Ghosh, Pramod Kumar Maurya, Satya Bagchi +1 more

Computers & Electrical Engineering•Apr 30, 2025•4 citations

Provably secure two-party authenticated key agreement protocol for post-quantum environments

SK Hafizul Islam

Journal of Information Security and Applications•Feb 23, 2020•47 citations

Quantum cryptanalysis of ultralightweight mutual authentication protocols: A Grover’s search model

Maham Shahzadi, Madiha Khalid, Sana Qadir +3 more

Quantum computing developments hold the promise of transforming the IT security landscape. Advances in quantum processors have introduced new theoretical threats to traditional cryptographic primitives through algorithms such as Grover's search and Shor's factorization, which can be used to cryptanalyze symmetric and asymmetric ciphers, respectively; however, the practical realization of these attacks depends critically on the availability of Cryptographically Relevant Quantum Computers (CRQCs). While current quantum hardware is still a considerable distance from achieving this threshold, the steady progress in technology suggests that the realization of CRQCs depends fundamentally on ongoing advances in scaling and engineering. In response to this emerging long-term threat, NIST has revised traditional encryption standards by introducing post-quantum cipher suites. While post-quantum cryptography research has primarily focused on conventional asymmetric cryptosystems, symmetric ultralightweight ciphers-commonly employed in resource-constrained environments such as RFID systems-remain an underexplored target of quantum cryptanalysis. This work takes an initial step toward addressing this gap by demonstrating full disclosure attacks on three ultralightweight mutual authentication protocols: the Ultra-Lightweight RFID Authentication and Renewal Protocol (ULRARP+), the Lightweight RFID Authentication Protocol (LRAP), and the Ultra-Lightweight RFID Authentication Protocol (URAP). Based on these findings, the paper proposes a set of design principles to guide the development of quantum-resilient minimalist ciphers for the post-quantum era.

PLoS ONE•Apr 30, 2026•0 citations

Provably Secure Practical Lightweight Post-Quantum Key Establishment for IoMT

John Prasad, Pardeep Kumar, Martin Duffy +1 more

This paper introduces PQ-LiteKEM, a formally verified, lightweight post-quantum security protocol for energy- and resource-constrained Internet of Medical Things (IoMT) devices. Addressing near-term quantum threats and emerging regulatory mandates such as the EU Cyber Resilience Act, the protocol mitigates the ‘harvest-now-decrypt-later’ (HNDL) quantum threat by securing sensitive physiological data over low-powered wireless channels. PQ-LiteKEM's architecture pairs lightweight symmetric-key mutual authentication, tied to dynamic hardware fingerprints, with ML-KEM-512 encapsulation and AES-256-GCM authenticated encryption. Formal verification through ProVerif and Scyther confirms security against key compromise, replay, and man-in-the-middle attacks, with provable session forward secrecy, mutual authentication, and session integrity. PQ-LiteKEM is validated on an ESP32-S3-powered wearable sensor communicating with a Raspberry Pi edge gateway over a BLE testbed. Performance profiling measured a total cryptographic latency of 5.9 ms and a peak memory footprint of 9 kB, approximately 0.1% of available RAM. These results show that post-quantum cryptographic guarantees are achievable on constrained medical sensors without sacrificing runtime efficiency, and that the approach generalises beyond BLE to other wireless channels.

ACM Workshop on CPS&IoT Security and Privacy (CPSIoTSec)•Oct 6, 2026•0 citations

Quantum Secure Biometric Authentication in Decentralised Systems

Tooba Qasim, Vasilios A. Siris, Izak Oosthuizen +2 more

Biometric authentication has become integral to digital identity systems, particularly in smart cities where it enables secure access to services across governance, transportation, and public infrastructure. Centralised architectures, though widely used, pose privacy and scalability challenges due to the aggregation of sensitive biometric data. Decentralised identity frameworks offer better data sovereignty and eliminate single points of failure but introduce new security concerns, particularly around mutual trust among distributed devices. In such environments, biometric sensors and verification agents must authenticate one another before sharing sensitive biometric data. Existing authentication schemes rely on classical public key infrastructure, which is increasingly susceptible to quantum attacks. This work addresses this gap by proposing a quantum-secure communication protocol for decentralised biometric systems, built upon an enhanced Quantum Key Distribution (QKD) system. The protocol incorporates quantum-resilient authentication at both the classical and quantum layers of QKD: post-quantum cryptography (PQC) is used to secure the classical channel, while authentication qubits verify the integrity of the quantum channel. Once trust is established, QKD generates symmetric keys for encrypting biometric data in transit. Qiskit-based simulations show a key generation rate of 15 bits/sec and 89% efficiency. This layered, quantum-resilient approach offers scalable, robust authentication for next-generation smart city infrastructures.

IEEE International Joint Conference on Biometrics (IJCB)•Sep 8, 2025•2 citations
Quantum computing developments hold the promise of transforming the IT security landscape. Advances in quantum processors have introduced new theoretical threats to traditional cryptographic primitives through algorithms such as Grover's search and Shor's factorization, which can be used to cryptanalyze symmetric and asymmetric ciphers, respectively; however, the practical realization of these attacks depends critically on the availability of Cryptographically Relevant Quantum Computers (CRQCs). While current quantum hardware is still a considerable distance from achieving this threshold, the steady progress in technology suggests that the realization of CRQCs depends fundamentally on ongoing advances in scaling and engineering. In response to this emerging long-term threat, NIST has revised traditional encryption standards by introducing post-quantum cipher suites. While post-quantum cryptography research has primarily focused on conventional asymmetric cryptosystems, symmetric ultralightweight ciphers-commonly employed in resource-constrained environments such as RFID systems-remain an underexplored target of quantum cryptanalysis. This work takes an initial step toward addressing this gap by demonstrating full disclosure attacks on three ultralightweight mutual authentication protocols: the Ultra-Lightweight RFID Authentication and Renewal Protocol (ULRARP+), the Lightweight RFID Authentication Protocol (LRAP), and the Ultra-Lightweight RFID Authentication Protocol (URAP). Based on these findings, the paper proposes a set of design principles to guide the development of quantum-resilient minimalist ciphers for the post-quantum era.
This paper introduces PQ-LiteKEM, a formally verified, lightweight post-quantum security protocol for energy- and resource-constrained Internet of Medical Things (IoMT) devices. Addressing near-term quantum threats and emerging regulatory mandates such as the EU Cyber Resilience Act, the protocol mitigates the ‘harvest-now-decrypt-later’ (HNDL) quantum threat by securing sensitive physiological data over low-powered wireless channels. PQ-LiteKEM's architecture pairs lightweight symmetric-key mutual authentication, tied to dynamic hardware fingerprints, with ML-KEM-512 encapsulation and AES-256-GCM authenticated encryption. Formal verification through ProVerif and Scyther confirms security against key compromise, replay, and man-in-the-middle attacks, with provable session forward secrecy, mutual authentication, and session integrity. PQ-LiteKEM is validated on an ESP32-S3-powered wearable sensor communicating with a Raspberry Pi edge gateway over a BLE testbed. Performance profiling measured a total cryptographic latency of 5.9 ms and a peak memory footprint of 9 kB, approximately 0.1% of available RAM. These results show that post-quantum cryptographic guarantees are achievable on constrained medical sensors without sacrificing runtime efficiency, and that the approach generalises beyond BLE to other wireless channels.
Biometric authentication has become integral to digital identity systems, particularly in smart cities where it enables secure access to services across governance, transportation, and public infrastructure. Centralised architectures, though widely used, pose privacy and scalability challenges due to the aggregation of sensitive biometric data. Decentralised identity frameworks offer better data sovereignty and eliminate single points of failure but introduce new security concerns, particularly around mutual trust among distributed devices. In such environments, biometric sensors and verification agents must authenticate one another before sharing sensitive biometric data. Existing authentication schemes rely on classical public key infrastructure, which is increasingly susceptible to quantum attacks. This work addresses this gap by proposing a quantum-secure communication protocol for decentralised biometric systems, built upon an enhanced Quantum Key Distribution (QKD) system. The protocol incorporates quantum-resilient authentication at both the classical and quantum layers of QKD: post-quantum cryptography (PQC) is used to secure the classical channel, while authentication qubits verify the integrity of the quantum channel. Once trust is established, QKD generates symmetric keys for encrypting biometric data in transit. Qiskit-based simulations show a key generation rate of 15 bits/sec and 89% efficiency. This layered, quantum-resilient approach offers scalable, robust authentication for next-generation smart city infrastructures.