Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

International Journal of Internet Technology and Secured Transactions

Enhancing IoT security in the post-quantum era: a hybrid approach to protection from impersonation attacks

Adel Hassan, Isam Ishaq, Jorge Munilla

Published Jan 1, 2026• 0 citations
Publisher
DOI
10.1504/ijitst.2026.10081120

Related papers

Enhancing IoT security in the post-quantum era: a hybrid approach to protection from impersonation attacks

Adel Hassan, Isam Ishaq, Jorge Munilla

The imminent advent of quantum computing threatens the long-term security of classical public-key cryptography, creating critical challenges for resource-constrained internet of things (IoT) environments.Hybrid cryptographic frameworks combining elliptic curve cryptography (ECC) with post-quantum cryptography (PQC) primitives have emerged as a transitional solution; however, their security properties remain insufficiently validated under semi-trusted infrastructure assumptions.This paper presents a comprehensive security evaluation of a hybrid ECC-KEM authentication and key agreement framework targeting IoT deployments.Using a dual-verification methodology that integrates formal symbolic analysis with the Tamarin-Prover and practical AI-assisted testing via the APSVer tool, we identify a critical impersonation vulnerability that enables a semi-trusted third party (TTP) to reconstruct PUF-based authentication material.To mitigate this flaw, we introduce a protocol enhancement incorporating ML-DSA post-quantum digital signatures and device-isolated key derivation.Formal verification confirms that the enhanced protocol achieves mutual authentication, session key secrecy, replay resistance, and effective isolation of the TTP.Experimental performance analysis demonstrates that the proposed security improvements introduce only a 12%-15% computational overhead, preserving feasibility for constrained IoT devices.The proposed framework provides a practical, quantum-resilient authentication architecture suitable for next-generation secure IoT deployments.

International Journal of Internet Technology and Secured Transactions•Jan 1, 2026•0 citations

Securing IoT systems in a post-quantum environment: Vulnerabilities, attacks, and possible solutions

Ahmad Alomari, Sathish Kumar

Internet of Things•Feb 20, 2024•46 citations

Securing the future: exploring post-quantum cryptography for authentication and user privacy in IoT devices

Khwaja Mansoor, Mehreen Afzal, Waseem Iqbal +1 more

Cluster Computing•Nov 26, 2024•76 citations

A Quantum-Safe Security Framework for IoT

R. N. Ravikumar, Shilpa Aarthi, Azamat Abduraxmanov +3 more

The rapid advancement of quantum computing threatens the foundations of classical cryptography, creating severe risks for resource-constrained IoT systems widely used in healthcare, autonomous vehicles, and industrial automation. Conventional algorithms like RSA and ECC are vulnerable to Shor's and Grover's algorithms, exposing IoT to passive and active quantum-based attacks. This manuscript proposes a quantum-safe framework integrating Post-Quantum Cryptography (PQC), Quantum Key Distribution (QKD), and Artificial Intelligence (AI) to ensure confidentiality, integrity, and resilience. The framework leverages lattice, hash, and code-based PQC, lightweight cryptographic protocols, hybrid security models, and efficient key management to protect IoT communications. By combining PQC, QKD, and AI-driven adaptive security, the framework offers scalable, sustainable, and future-proof protection in the post-quantum era.

Advances in computational intelligence and robotics book series•Jul 16, 2026•0 citations

Security Challenges to IOT and Cloud-Based Systems in the Era of Quantum Attacks

V. R. S. Mani

Internet of things•Jan 1, 2024•3 citations

HM-AKA+: Protecting against a semi-trusted third party with Hybrid Crypto

Jorge Munilla, An Braeken

Hybrid protocols that combine Post-Quantum (PQ) and traditional primitives, allowing flexible switching based on the threat level, provide optimal trade-offs between efficiency and security. The recently published HM-AKA scheme introduced a basic framework for this setup, but it fails to provide security against impersonation attacks by a semi-trusted TTP in some of its proposed modes. This vulnerability arises due to the asymmetric behavior of PQ primitives compared to traditional public-key primitives. We identify this threat and propose an enhanced version, HM-AKA+, that maintains the framework’s flexibility while ensuring security.

Cryptography and Communications•Apr 10, 2026•0 citations
The imminent advent of quantum computing threatens the long-term security of classical public-key cryptography, creating critical challenges for resource-constrained internet of things (IoT) environments.Hybrid cryptographic frameworks combining elliptic curve cryptography (ECC) with post-quantum cryptography (PQC) primitives have emerged as a transitional solution; however, their security properties remain insufficiently validated under semi-trusted infrastructure assumptions.This paper presents a comprehensive security evaluation of a hybrid ECC-KEM authentication and key agreement framework targeting IoT deployments.Using a dual-verification methodology that integrates formal symbolic analysis with the Tamarin-Prover and practical AI-assisted testing via the APSVer tool, we identify a critical impersonation vulnerability that enables a semi-trusted third party (TTP) to reconstruct PUF-based authentication material.To mitigate this flaw, we introduce a protocol enhancement incorporating ML-DSA post-quantum digital signatures and device-isolated key derivation.Formal verification confirms that the enhanced protocol achieves mutual authentication, session key secrecy, replay resistance, and effective isolation of the TTP.Experimental performance analysis demonstrates that the proposed security improvements introduce only a 12%-15% computational overhead, preserving feasibility for constrained IoT devices.The proposed framework provides a practical, quantum-resilient authentication architecture suitable for next-generation secure IoT deployments.
The rapid advancement of quantum computing threatens the foundations of classical cryptography, creating severe risks for resource-constrained IoT systems widely used in healthcare, autonomous vehicles, and industrial automation. Conventional algorithms like RSA and ECC are vulnerable to Shor's and Grover's algorithms, exposing IoT to passive and active quantum-based attacks. This manuscript proposes a quantum-safe framework integrating Post-Quantum Cryptography (PQC), Quantum Key Distribution (QKD), and Artificial Intelligence (AI) to ensure confidentiality, integrity, and resilience. The framework leverages lattice, hash, and code-based PQC, lightweight cryptographic protocols, hybrid security models, and efficient key management to protect IoT communications. By combining PQC, QKD, and AI-driven adaptive security, the framework offers scalable, sustainable, and future-proof protection in the post-quantum era.
Hybrid protocols that combine Post-Quantum (PQ) and traditional primitives, allowing flexible switching based on the threat level, provide optimal trade-offs between efficiency and security. The recently published HM-AKA scheme introduced a basic framework for this setup, but it fails to provide security against impersonation attacks by a semi-trusted TTP in some of its proposed modes. This vulnerability arises due to the asymmetric behavior of PQ primitives compared to traditional public-key primitives. We identify this threat and propose an enhanced version, HM-AKA+, that maintains the framework’s flexibility while ensuring security.