American Journal of Advanced Technology and Engineering Solutions
AI-Driven Quantum-Resistant Security Framework for Accelerating the Migration of U.S. Cloud and IOT Systems to NIST Post-Quantum Cryptography Standards
The accelerating development of quantum computing creates substantial cybersecurity challenges for cloud and Internet of Things (IoT) environments that continue to depend on quantum-vulnerable public-key cryptography. This study developed and quantitatively evaluated an AI-driven quantum-resistant security framework for accelerating the migration of U.S. cloud and IoT systems toward National Institute of Standards and Technology (NIST) post-quantum cryptography (PQC) standards. The final analytical environment included 52 organizations, 164 cloud environments, 18,764 IoT devices, and 139,684 retained cryptographic assets, with 98.7% data completeness and 97.9% inventory-validation accuracy. Among retained assets, 62.1% contained quantum-vulnerable dependencies, including 34.6% associated with RSA, 20.0% with elliptic-curve cryptography, and 7.5% with Diffie–Hellman, while 63.2% of certificates remained quantum vulnerable. AI-assisted cryptographic discovery achieved 97.4% asset coverage and 97.9% vulnerability-detection sensitivity while reducing assessment time by 87.8%. XGBoost achieved the strongest quantum-risk classification performance, with 97.6% accuracy, 97.5% F1-score, 0.994 ROC-AUC, and 0.992 PR-AUC. Experimental evaluation of ML-KEM, ML-DSA, and SLH-DSA showed that pure PQC increased cloud secure-session latency by 23.8% and reduced throughput by 10.0%, whereas hybrid configurations increased latency by 39.5% and reduced throughput by 15.6%. AI-assisted migration increased implementation success from 84.6% to 97.1%, reduced remediation time by 60.2%, increased migration throughput by 151.1%, and reduced unresolved quantum-vulnerable exposure from 15.4% to 2.9%. High-security-maturity organizations achieved 98.8% implementation success compared with 87.8% among low-maturity organizations. Validation confirmed strong generalizability, with XGBoost achieving 97.1% cross-validation accuracy, 96.9% independent holdout accuracy, and 95.9% temporal-validation accuracy. Overall, the findings demonstrated that integrating AI-assisted cryptographic discovery, quantum-risk classification, migration prioritization, PQC performance assessment, cryptographic agility, interoperability testing, and organizational readiness provided a robust quantitative framework for strengthening post-quantum security across heterogeneous U.S. cloud and IoT infrastructures.
The accelerating development of quantum computing creates substantial cybersecurity challenges for cloud and Internet of Things (IoT) environments that continue to depend on quantum-vulnerable public-key cryptography. This study developed and quantitatively evaluated an AI-driven quantum-resistant security framework for accelerating the migration of U.S. cloud and IoT systems toward National Institute of Standards and Technology (NIST) post-quantum cryptography (PQC) standards. The final analytical environment included 52 organizations, 164 cloud environments, 18,764 IoT devices, and 139,684 retained cryptographic assets, with 98.7% data completeness and 97.9% inventory-validation accuracy. Among retained assets, 62.1% contained quantum-vulnerable dependencies, including 34.6% associated with RSA, 20.0% with elliptic-curve cryptography, and 7.5% with Diffie–Hellman, while 63.2% of certificates remained quantum vulnerable. AI-assisted cryptographic discovery achieved 97.4% asset coverage and 97.9% vulnerability-detection sensitivity while reducing assessment time by 87.8%. XGBoost achieved the strongest quantum-risk classification performance, with 97.6% accuracy, 97.5% F1-score, 0.994 ROC-AUC, and 0.992 PR-AUC. Experimental evaluation of ML-KEM, ML-DSA, and SLH-DSA showed that pure PQC increased cloud secure-session latency by 23.8% and reduced throughput by 10.0%, whereas hybrid configurations increased latency by 39.5% and reduced throughput by 15.6%. AI-assisted migration increased implementation success from 84.6% to 97.1%, reduced remediation time by 60.2%, increased migration throughput by 151.1%, and reduced unresolved quantum-vulnerable exposure from 15.4% to 2.9%. High-security-maturity organizations achieved 98.8% implementation success compared with 87.8% among low-maturity organizations. Validation confirmed strong generalizability, with XGBoost achieving 97.1% cross-validation accuracy, 96.9% independent holdout accuracy, and 95.9% temporal-validation accuracy. Overall, the findings demonstrated that integrating AI-assisted cryptographic discovery, quantum-risk classification, migration prioritization, PQC performance assessment, cryptographic agility, interoperability testing, and organizational readiness provided a robust quantitative framework for strengthening post-quantum security across heterogeneous U.S. cloud and IoT infrastructures.
The emergence of large-scale quantum computing presents an imminent threat to contemporary public-key cryptosystems, with quantum algorithms such as Shor’s algorithm capable of efficiently breaking RSA and elliptic curve cryptography (ECC). This vulnerability has catalyzed accelerated standardization efforts for post-quantum cryptography (PQC) by the U.S. National Institute of Standards and Technology (NIST) and global security stakeholders. While theoretical security analysis of these quantum-resistant algorithms has advanced considerably, comprehensive real-world performance benchmarks spanning diverse computing environments—from high-performance cloud infrastructure to severely resource-constrained IoT devices—remain insufficient for informed deployment planning. This paper presents the most extensive cross-platform empirical evaluation to date of NIST-selected PQC algorithms, including CRYSTALS-Kyber and NTRU for key encapsulation mechanisms (KEMs), alongside BIKE as a code-based alternative, and CRYSTALS-Dilithium and Falcon for digital signatures. Our systematic benchmarking framework measures computational latency, memory utilization, key sizes, and protocol overhead across multiple security levels (NIST Levels 1, 3, and 5) in three distinct hardware environments and various network conditions. Results demonstrate that contemporary server architectures can implement these algorithms with negligible performance impact (<5% additional latency), making immediate adoption feasible for cloud services. In contrast, resource-constrained devices experience more significant overhead, with computational demands varying by up to 12× between algorithms at equivalent security levels, highlighting the importance of algorithm selection for edge deployments. Beyond standalone algorithm performance, we analyze integration challenges within existing security protocols, revealing that naive implementation of PQC in TLS 1.3 can increase handshake size by up to 7× compared to classical approaches. To address this, we propose and evaluate three optimization strategies that reduce bandwidth requirements by 40–60% without compromising security guarantees. Our investigation further encompasses memory-constrained implementation techniques, side-channel resistance measures, and hybrid classical-quantum approaches for transitional deployments. Based on these comprehensive findings, we present a risk-based migration framework and algorithm selection guidelines tailored to specific use cases, including financial transactions, secure firmware updates, vehicle-to-infrastructure communications, and IoT fleet management. This practical roadmap enables organizations to strategically prioritize systems for quantum-resistant upgrades based on data sensitivity, resource constraints, and technical feasibility. Our results conclusively demonstrate that PQC is deployment-ready for most applications, provided that implementations are carefully optimized for the specific performance characteristics and security requirements of target environments. We also identify several remaining research challenges for the community, including further optimization for ultra-constrained devices, standardization of hybrid schemes, and hardware acceleration opportunities.
Purpose: The purpose of this paper is to examine the emerging threat that large-scale quantum computing poses to classical public-key cryptographic systems, particularly RSA and Elliptic Curve Cryptography (ECC), which form the backbone of contemporary digital security infrastructures. In response to this threat, the study aims to analyze post-quantum cryptography (PQC) as a viable long-term solution capable of resisting both classical and quantum adversaries. The paper further seeks to assess the urgency of PQC adoption in light of the “harvest now, decrypt later” threat model and to evaluate the practical readiness of quantum-safe cryptographic algorithms currently under consideration by the National Institute of Standards and Technology (NIST). Materials and Methods: This study employs a qualitative and analytical research methodology grounded in an extensive review of authoritative sources, including NIST’s post-quantum cryptography standardization documents, recent academic literature, industry white papers, and policy reports from organizations such as RAND Corporation and Cloudflare. The analysis systematically surveys major families of post-quantum cryptographic algorithms namely lattice-based, code-based, and hash-based schemes and evaluates them based on security assumptions, computational efficiency, implementation complexity, and standardization maturity. Findings: The analysis indicates that Lattice-based cryptographic schemes demonstrate the highest maturity and practical readiness, evidenced by their selection in NIST’s PQC process. Code- and hash-based methods provide strong security but face key size and performance challenges. The lack of scalable quantum computers does not reduce urgency, as data harvesting persists. Artificial intelligence emerges as a key enabler for accelerating PQC adoption. Unique Contribution to Theory, Practice and Policy: The paper recommends a proactive, phased post-quantum migration using hybrid cryptographic architectures. Organizations should conduct inventories, benchmarking, and pilot deployments aligned with NIST standards. AI-driven tools are advised to improve key management and reduce complexity. Continued interdisciplinary research and policy support are encouraged to ensure a secure, scalable transition to quantum-resistant security systems.
This quantitative study investigated the performance, efficiency, and security resilience of quantum-resistant cryptographic protocols integrated with artificial intelligence (AI) across cloud and Internet of Things (IoT) environments. The research aimed to empirically assess whether AI-enhanced cryptographic systems could outperform conventional post-quantum algorithms in encryption throughput, latency, resource optimization, and security robustness. A factorial experimental design was implemented, encompassing multiple algorithmic classes—lattice-based, hash-based, code-based, and multivariate polynomial systems—under both AI-integrated and non-AI configurations. The analysis incorporated 7,200 experimental runs executed under varying workloads, environments, and simulated attack conditions. Linear mixed-effects models, correlation analysis, and reliability testing were used to validate the statistical integrity of the results. The descriptive analysis indicated that AI-augmented frameworks achieved consistently higher encryption speeds, lower decryption latency, and superior throughput-adjusted security efficiency compared to traditional post-quantum systems. Correlation analysis revealed strong positive relationships between AI detection accuracy, encryption performance, and system stability, confirming that AI optimization significantly improved operational consistency. Reliability and validity tests showed high internal consistency, with Cronbach’s alpha coefficients exceeding 0.90, and factor analysis confirmed that performance indicators loaded strongly on the intended theoretical constructs of cryptographic performance and AI adaptability. Collinearity diagnostics verified the independence of predictors, with all variance inflation factors below 2.0. Regression analysis demonstrated that AI integration was a statistically significant predictor of improved cryptographic outcomes (p < 0.001), increasing throughput efficiency by over 14% on average while reducing latency and energy consumption. The findings confirmed the primary hypothesis that AI-driven cryptographic optimization enhances both computational efficiency and system resilience against classical and quantum attack simulations. Lattice-based and code-based cryptosystems showed the most substantial performance gains when combined with AI learning models. Overall, the results validated that intelligent, adaptive encryption frameworks achieve measurable, statistically significant advantages in performance, scalability, and security across both cloud and IoT domains. These findings provide empirical evidence supporting the integration of AI-based decision systems into post-quantum cryptography for secure and sustainable digital infrastructures.
The emergence of quantum computing poses a significant threat to the cryptographic foundations that secure modern cloud infrastructures. Existing deployments of Zero Trust Architecture (ZTA) are largely built on classical cryptographic techniques such as the RSA algorithm and elliptic curve cryptography, which are vulnerable to future quantum attacks. Moreover, current studies offer limited guidance on how PQC can be integrated into cloud-native Zero Trust environments while guaranteeing operational efficiency and addressing adaptive security needs. The present study introduces an Adaptive Post Quantum Zero Trust (Adaptive PQC-ZT) Framework by combining the NIST recommended post quantum cryptographic algorithms with a policy based Crypto-Agility Engine for algorithm dynamic selection based upon Security Sensitivity, Algorithm Characteristics, and Latency. The framework was evaluated using a publicly available PQC benchmark dataset containing 37,004 key encapsulation mechanism (KEM) records and 71,456 digital signature records. The analysis examined latency, communication overhead, security levels, and workload suitability for ML-KEM and ML-DSA algorithm families across representative cloud deployment scenarios. The results demonstrate that ML-KEM algorithms provide quantum-resistant key establishment with sub-millisecond latency, while ML-DSA algorithms significantly outperform SPHINCS+ variants in execution efficiency and communication overhead. The proposed Crypto-Agility Engine helps match cryptographic configuration with the needs of different workloads. This allows web applications to run with low latency, while also giving stronger protection to high-security systems such as financial databases. The proposed framework contributes a unified cloud-native security model that blends Zero Trust principles, post-quantum cryptography, benchmark-driven evaluation, and adaptive crypto-agility. This shows practical migration to quantum-safe cloud infrastructures can be done with manageable performance hits. Organizations get a solid path to boost their long-term defense against future quantum threats.
This paper examines the technical, operational, and governance challenges of migrating modern enterprise and cloud architectures to post-quantum cryptography (PQC). Following the National Institute of Standards and Technology's (NIST) release of finalized standards—including FIPS 203 (ML-KEM), FIPS 204 (ML-DSA), and FIPS 205 (SLH-DSA)—organizations face significant friction regarding key and signature size inflation, protocol interoperability, and legacy infrastructure constraints. By analyzing these barriers, the study outlines practical transition strategies, emphasizing automated cryptographic discovery, hybrid deployment architectures, crypto-agility, and a phased, risk-based rollout program.
Quantum Computing (QC) threatens the cryptographic foundations of Cloud Computing (CC), exposing distributed infrastructures to novel attack vectors. This survey provides comprehensive analysis of quantum-safe cloud security, examining vulnerabilities, transition strategies, and layer-specific countermeasures across nine architectural layers (application, data, runtime, middleware, OS, virtualization, server, storage, networking). We employ STRIDE-based risk assessment aligned with NIST SP 800-30 to evaluate quantum threats through three transition phases: pre-transition (classical cryptography vulnerabilities), hybrid (migration risks), and post-transition (PQC implementation weaknesses including side-channel attacks). Our security framework integrates hybrid cryptographic strategies (algorithmic combiners, dual/composite certificates, protocol-level migration), cryptographic agility, and risk-prioritized mitigation tailored to cloud environments. We benchmark NIST-standardized PQC algorithms for performance and deployment suitability, assess side-channel and implementation vulnerabilities, and analyze quantum-safe strategies from leading CSPs (AWS, Azure, GCP). The survey delivers layer-specific threat taxonomies, likelihood-impact risk matrices, and CSP-informed deployment roadmaps for cloud architects, policymakers, and researchers. We identify six critical research directions: standardization and interoperability, hardware acceleration and performance optimization, AI-enhanced security and threat mitigation, integration with emerging cloud technologies, systemic preparedness and workforce development, and migration frameworks with crypto-agility.