The imminent advent of quantum computing threatens the long-term security of classical public-key cryptography, creating critical challenges for resource-constrained internet of things (IoT) environments.Hybrid cryptographic frameworks combining elliptic curve cryptography (ECC) with post-quantum cryptography (PQC) primitives have emerged as a transitional solution; however, their security properties remain insufficiently validated under semi-trusted infrastructure assumptions.This paper presents a comprehensive security evaluation of a hybrid ECC-KEM authentication and key agreement framework targeting IoT deployments.Using a dual-verification methodology that integrates formal symbolic analysis with the Tamarin-Prover and practical AI-assisted testing via the APSVer tool, we identify a critical impersonation vulnerability that enables a semi-trusted third party (TTP) to reconstruct PUF-based authentication material.To mitigate this flaw, we introduce a protocol enhancement incorporating ML-DSA post-quantum digital signatures and device-isolated key derivation.Formal verification confirms that the enhanced protocol achieves mutual authentication, session key secrecy, replay resistance, and effective isolation of the TTP.Experimental performance analysis demonstrates that the proposed security improvements introduce only a 12%-15% computational overhead, preserving feasibility for constrained IoT devices.The proposed framework provides a practical, quantum-resilient authentication architecture suitable for next-generation secure IoT deployments.
The imminent advent of quantum computing threatens the long-term security of classical public-key cryptography, creating critical challenges for resource-constrained internet of things (IoT) environments.Hybrid cryptographic frameworks combining elliptic curve cryptography (ECC) with post-quantum cryptography (PQC) primitives have emerged as a transitional solution; however, their security properties remain insufficiently validated under semi-trusted infrastructure assumptions.This paper presents a comprehensive security evaluation of a hybrid ECC-KEM authentication and key agreement framework targeting IoT deployments.Using a dual-verification methodology that integrates formal symbolic analysis with the Tamarin-Prover and practical AI-assisted testing via the APSVer tool, we identify a critical impersonation vulnerability that enables a semi-trusted third party (TTP) to reconstruct PUF-based authentication material.To mitigate this flaw, we introduce a protocol enhancement incorporating ML-DSA post-quantum digital signatures and device-isolated key derivation.Formal verification confirms that the enhanced protocol achieves mutual authentication, session key secrecy, replay resistance, and effective isolation of the TTP.Experimental performance analysis demonstrates that the proposed security improvements introduce only a 12%-15% computational overhead, preserving feasibility for constrained IoT devices.The proposed framework provides a practical, quantum-resilient authentication architecture suitable for next-generation secure IoT deployments.
The rapid expansion of Internet of Things (IoT) ecosystems has increased the need for communication mechanisms that can remain secure against emerging computational threats. Conventional asymmetric cryptographic schemes, including RSA and Elliptic Curve Cryptography (ECC), are vulnerable to advances in quantum computing due to the ability of Shor's algorithm to undermine their underlying mathematical assumptions. To address these challenges, this paper presents PQ-IoT SecureCom, a quantum-resistant communication framework built using NIST-standardized post-quantum cryptographic primitives. The proposed framework employs ML-KEM (derived from Kyber) for secure key encapsulation and ML-DSA (derived from Dilithium) for digital authentication, combined with AESGCM to ensure data confidentiality and integrity. Additional security mechanisms, including PQC-based device certification, periodic session key updates, and nonce-based timestamp validation, are incorporated to mitigate replay and impersonation attacks. The framework also supports a hybrid operational mode that enables performance comparison between classical and postquantum cryptographic schemes. System behavior is monitored using a real-time dashboard that records cryptographic overhead, communication metrics, and detected security events. Experimental evaluation shows that ML-KEM and ML-DSA significantly enhance security while introducing computational overhead that remains acceptable for contemporary IoT devices. Through automated attack simulations and detailed event logging, PQ-IoT SecureCom demonstrates the practical feasibility of deploying scalable post-quantum security in IoT communication systems.
Quantum computing poses a significant threat to classical asymmetric cryptography, which is essential for ensuring confidentiality, authentication, and key exchange in contemporary digital infrastructures. Although post-quantum cryptography (PQC) provides mechanisms that resist quantum attacks, its implementation in Internet of Things (IoT) systems is challenged by constrained resources, including limitations in computation, memory, energy, latency, and bandwidth, and the heterogeneity of devices. This paper offers a comprehensive narrative review of PQC approaches applicable to IoT, systematically organizing 30 peer-reviewed studies published between 2022 and 2026 across four layers: device, communication, distributed trust, and application. Additionally, the review examines two cross-cutting dimensions, privacy and side-channel resistance. The analysis indicates a significant prevalence of lattice-based schemes, hybrid strategies, and integrations with blockchain technology, zero-knowledge proofs, federated learning, homomorphic encryption, AI, and Zero Trust architectures. Notably, key gaps remain in side-channel evaluation, migration pathways, deployment costs, and real-world validation—issues that are particularly critical given the long lifecycles of IoT devices and the ongoing threat of “harvest now, decrypt later” attacks.
The rapid expansion of Internet of Things (IoT) ecosystems has introduced significant security challenges due to resource-constrained devices, heterogeneous network architectures, and largescale connectivity. Traditional authentication and key exchange mechanisms, primarily based on classical cryptographic algorithms such as RSA and ECC, are vulnerable to future quantum computing attacks. The emergence of quantum algorithms, particularly Shor’s algorithm, threatens the long-term confidentiality and integrity of IoT communications. This paper proposes a Quantum-Resistant Authentication and Key Exchange Protocol specifically designed for secure IoT architectures. The proposed framework integrates post-quantum cryptographic primitives, including lattice-based key exchange mechanisms and hash-based authentication schemes, optimized for low computational overhead suitable for constrained IoT devices. The protocol ensures mutual authentication, forward secrecy, and resistance against quantum adversaries while maintaining minimal communication latency. Security analysis demonstrates robustness against replay, man-in-the-middle, and key-compromise attacks. Performance evaluation shows that the proposed solution achieves a balance between quantum security strength and resource efficiency, making it suitable for next-generation IoT deployments in smart cities, healthcare systems, and industrial automation.
The emergence of quantum computing threatens classical cryptographic systems, including RSA and ECC, potentially compromising the security of pervasive Internet of Things (IoT) deployments. Resourceconstrained IoT devices—such as sensors, embedded controllers, and microcontrollers—face significant challenges in adopting post-quantum cryptographic (PQC) protocols due to computational, memory, and energy limitations. This paper proposes AQ-PQC, an adaptive lightweight hybrid key exchange protocol combining Kyber lattice-based KEM and lightweight elliptic curve cryptography (ECC), specifically designed for constrained devices. AQ-PQC introduces a dynamic parameter tuning algorithm that adjusts key sizes, handshake rounds, and compression ratios based on real-time device state and network conditions. Formal security analysis under the IND-CCA model demonstrates quantum-resistance and forward secrecy. Extensive hardware implementation on Raspberry Pi 4 and ESP32 devices reveals a significant reduction in handshake latency, energy consumption, and memory footprint compared to conventional PQC protocols. The proposed framework provides a practical, reproducible, and secure methodology for post-quantum IoT communications, supporting heterogeneous and resource-limited networks.
The rapid growth of the Internet of Things (IoT) has connected billions of smart devices across healthcare, transportation, industrial automation, and smart home environments. While IoT has enhanced automation and data-driven decision-making, its widespread deployment has also increased the risk of cyberattacks. Conventional public-key cryptographic algorithms such as RSA and Elliptic Curve Cryptography (ECC) are vulnerable to future quantum computing attacks, particularly those based on Shor's algorithm. This paper proposes a Quantum-Resistant Cryptographic Framework (QRCF) for secure IoT communication using lattice-based cryptography integrated with lightweight authentication and efficient key management. The framework is designed to meet the computational limitations of IoT devices while ensuring long-term confidentiality and integrity. Performance evaluation demonstrates improvements in security resilience, authentication efficiency, and communication reliability compared with traditional cryptographic approaches. The proposed framework offers a scalable and future-ready solution for protecting IoT ecosystems in the post-quantum era.
The emergence of quantum computing is expected to break many conventional cryptographic algorithms currently used for authentication and secure communication. Existing security mechanisms in Next Generation Networks (NGNs), including 5G, IoT, smart healthcare, and cloud-based systems, are increasingly vulnerable to future quantum attacks. This research presents a lightweight and efficient Post-Quantum Cryptography (PQC) based authentication framework specifically designed for next generation network environments. The proposed framework combines quantum-resistant cryptographic techniques with optimized authentication procedures to provide secure identity verification, confidential communication, and attack resistance with minimal computational complexity. The model emphasizes reduced overhead, faster authentication response, and scalability for resource-constrained devices. Security analysis shows that the framework can effectively defend against replay attacks, impersonation attacks, session hijacking, and quantum-based cryptanalytic threats. Experimental evaluation indicates that the proposed approach achieves improved security performance while maintaining low latency and reduced resource consumption, making it suitable for practical deployment in future intelligent communication networks.