Unmanned Aerial Vehicle (UAV) swarms require secure and efficient protocols for communication in dynamic and adversarial environments. This paper presents a post-quantum authenticated key exchange protocol for UAV communications, inspired by recent post-quantum extensions of EDHOC. The protocol is modeled in SAPIC+ and verified in the Tamarin Prover under a Dolev–Yao adversary, establishing executability, mutual authentication, key secrecy, and forward secrecy properties. Communication overhead and handshake latency are estimated using standardized parameter sizes and benchmark data for ARM Cortex-M4 and x86 platforms, showing how the choice of post-quantum primitives affects the feasibility of authenticated key exchange in constrained UAV deployments.
Unmanned Aerial Vehicle (UAV) swarms require secure and efficient protocols for communication in dynamic and adversarial environments. This paper presents a post-quantum authenticated key exchange protocol for UAV communications, inspired by recent post-quantum extensions of EDHOC. The protocol is modeled in SAPIC+ and verified in the Tamarin Prover under a Dolev–Yao adversary, establishing executability, mutual authentication, key secrecy, and forward secrecy properties. Communication overhead and handshake latency are estimated using standardized parameter sizes and benchmark data for ARM Cortex-M4 and x86 platforms, showing how the choice of post-quantum primitives affects the feasibility of authenticated key exchange in constrained UAV deployments.
The integration of unmanned aerial vehicles (UAVs) into vehicular ad hoc networks (VANETs) has emerged as a promising solution to overcome the limited coverage of conventional roadside unit (RSU)-based infrastructures. However, UAVs operate in open environments and cannot be fully trusted, while the rapid advancement of quantum computing threatens the long-term security of classical public-key cryptographic systems. As a result, many existing UAV-based VANET authentication schemes face fundamental limitations in future deployments. Most existing schemes either lack post-quantum security or incur excessive computational and communication overhead, making them unsuitable for real-time and high-mobility vehicular environments. In addition, the common assumptions of trusted UAVs do not align with realistic threat models. To address these issues, this paper proposes a lightweight post-quantum authentication and key exchange protocol based on the module learning with errors (MLWE) problem and physically unclonable functions (PUFs). The proposed scheme treats UAVs as untrusted relay nodes and excludes them from session key generation. Its security is evaluated using informal analysis, the real-or-random (RoR) model, BAN logic, and AVISPA, while performance evaluation indicates improved efficiency compared to existing schemes.
Secure communication in unmanned aerial vehicle (UAV) networks is critical for a wide range of civil and military applications, from precision agriculture and disaster response to critical infrastructure monitoring. These missions require lightweight, tamper-resistant, and quantum-secure authentication mechanisms. We examine the recently proposed Quantum-Resistant Identity Authentication and Key Agreement Scheme for UAV Networks Based on the Kyber Algorithm (LIGKYX) and demonstrate its critical weaknesses, including a lack of Perfect Forward/Backward Secrecy (PFS/PBS), and desynchronization vulnerabilities. To address these limitations, we propose a novel authentication and key agreement protocol that integrates SRAM-based Physical Unclonable Functions (PUFs) with the Kyber post-quantum key encapsulation mechanism, eliminating the reliance on Elliptic Curve Cryptography (ECC) and stateful counters used in LIGKYX. The security of the proposed protocol is validated through both formal and informal analyses, demonstrating strong resistance to replay, impersonation, man-in-the-middle, desynchronization, and UAV capture attacks. Performance evaluation confirms its efficiency: the total communication overhead is reduced by 7.1% (from 1836 bytes in LIGKYX to 1705 bytes in the proposed scheme), and the total authentication time is reduced by more than 54%, from 87.84 ms in LIGKYX to 40.23 ms in the proposed scheme. These improvements demonstrate that the protocol not only strengthens security but also significantly reduces computation and communication costs. Overall, the proposed solution offers a lightweight, scalable, and quantum-resistant authentication framework tailored for resource-constrained UAV environments, representing a substantial advancement over existing schemes such as LIGKYX.
Resource-constrained unmanned aerial vehicle–ground control station (UAV–GCS) communications face substantial post-quantum authentication costs, expensive cryptographic operations triggered by invalid requests, and key-state desynchronization during rekeying. To address these problems, this paper proposes QUAD, a lightweight hybrid post-quantum authentication and key agreement protocol. QUAD combines request pre-authentication, hybrid key establishment, and mutual key confirmation to reject invalid requests before costly cryptographic operations. It also allows a bounded transition period for receiving records under the old and new keys to mitigate key-state inconsistencies caused by link disruptions. Confidentiality and authentication are analyzed using ProVerif, while cryptographic and communication overhead, denial-of-service scenarios, and key-update behavior are evaluated on a Raspberry Pi platform. Under the specified security model, QUAD satisfies the tested authentication and confidentiality properties, reduces the computational burden of invalid requests, and improves bidirectional communication continuity under selected packet-loss conditions. These findings support its feasibility for post-quantum security in resource-constrained UAV–GCS links.
The seamless integration of Unmanned Aerial Systems (UAS) into public airspace necessitates a robust UAV Traffic Management (UTM) system. Information security in communications plays a pivotal role in ensuring the operational safety of the UTM. Maintaining the integrity and authentication of unicast communications, such as command and video information, is imperative to thwart tampering and impersonation. Encryption emerges as an optimal solution for safeguarding such data. Efficient utilization of symmetrical encryption mandates the imple-mentation of secure key exchange mechanisms. However, intro-ducingAuthenticated Key Exchange (AKE) standards on diminutive Unmanned Aerial Vehicles (UAVs) encounters problems due to hardware limitations. To surmount this challenge, lightweight cryptographic algorithms tailored for resource-constrained hard-ware have been developed. Nonetheless, both lightweight and conventional cryptographic algorithms are susceptible to quantum computing threats. In response, post-quantum cryptographic primitives are undergoing standardization. This study assesses post-quantumKey Encapsulation Mechanism (KEM) candidates, namely CRYSTALS-Kyber, Hamming Quasi-Cyclic (HQC), and BIKE, on hardware resembling small UAVs. The evaluation of these algorithms focuses on computation time, considering real-time tasks during flights. The findings affirm the viability of employing unmodified standards on resource-constrained hardware concurrently with other priority tasks. Furthermore, quantum-vulnerable standards are also investigated to compare their performance against their more secure counterparts. All three post-quantum KEM candidates demonstrate usability in this environment, with CRYSTALS-Kyber being recommended for its superior performance, even surpassing certain prevailing standards.
With the widespread deployment of unmanned aerial vehicles (UAVs) in both military and civilian domains, the demand for secure and encrypted communications in UAV networks integrated with ground stations has become increasingly prominent. Authentication and key agreement protocols are widely regarded as essential technical mechanisms for ensuring the security of data transmission in wireless communication environments. However, the rapid advancement of quantum computing technologies poses potential security threats to conventional protocols based on elliptic curve cryptography. To address these challenges, this paper proposes a quantum-secure authentication and key agreement protocol tailored for UAV–ground station communication scenarios. By incorporating Crystal-Kyber, the proposed protocol ensures quantum resistance while striving to minimize system computational overhead. The results of the informal security analysis indicate that the proposed protocol can effectively withstand a variety of known attacks. In addition, comprehensive comparative evaluations with existing related protocols demonstrate that, while maintaining low computational overhead, the proposed scheme exhibits stronger robustness in terms of security and functional properties.
Unmanned Aerial Vehicles (UAVs) have gone from single platforms that were remotely piloted to fully networked, autonomous cyber-physical systems that operate in the civilian, industrial and defense arenas. Their increasing reliance on wireless communication for command and control, cooperative sensing, distributed decision-making and swarm coordination has raised the level of communication security to the point where it has become a mission-critical requirement. Contemporary UAV security architectures are much based on classical public-key–based cryptography (RSA and elliptic are the most well-known) whose security assumptions become fundamentally vulnerable against the presence of large-scale quantum computing. This chapter gives a comprehensive and future-oriented discussion about post-quantum cryptography (PQC)-based security models for UAVs communication and information exchange networks. Quantum resistance should be applied not only at the algorithmic level but across the whole UAV communications trust stack, which is the main argument. Part I set the conceptual and technical ground by affecting a short range of the improvement of UAV communication systems, in articulating a system quantum-era threat model and giving a motivation for mission-adaptive, cross-layer security architectures. The discussion makes the long-term confidentiality, survivability of the system and continuing operation more robust, and the security of UAV with PQC enabled is no longer speculative, but is considered a strategic requirement.