The deployment of 5G and emerging 6G networks introduces significant security challenges for Internet of Things (IoT) ecosystems comprising billions of heterogeneous devices, including resource-constrained endpoints, more capable embedded controllers, gateways, edge nodes, and network infrastructure. At the same time, the long-term security of widely deployed public-key cryptography is challenged by advances in quantum computing, motivating migration toward standardized post-quantum key-establishment and digital-signature mechanisms. This comprehensive, evidence-based review classifies cryptographic mechanisms for wireless IoT in 5G and beyond across lightweight symmetric cryptography, post-quantum cryptography, privacy-preserving encryption, and adaptive security. The literature-reported implementation results are compared with explicit attention to heterogeneous hardware, memory, energy, communication, and latency constraints. Lightweight symmetric mechanisms remain relevant for constrained data protection, while standardized post-quantum mechanisms such as ML-KEM and ML-DSA address quantum-vulnerable public-key functions and generally introduce larger keys, ciphertexts, signatures, certificates, or protocol messages. This review therefore emphasizes interoperability, firmware upgradability, crypto-agility, and lifecycle management rather than physical device-size growth. A conceptual three-phase roadmap for 2025–2035 is presented in which quantum-vulnerable public-key mechanisms are progressively supplemented and, where appropriate, replaced by hybrid classical–post-quantum and then post-quantum-capable architectures, while standardized symmetric/lightweight protection remains in use where it satisfies application requirements. The roadmap dates are planning intervals rather than universal adoption forecasts.
The deployment of 5G and emerging 6G networks introduces significant security challenges for Internet of Things (IoT) ecosystems comprising billions of heterogeneous devices, including resource-constrained endpoints, more capable embedded controllers, gateways, edge nodes, and network infrastructure. At the same time, the long-term security of widely deployed public-key cryptography is challenged by advances in quantum computing, motivating migration toward standardized post-quantum key-establishment and digital-signature mechanisms. This comprehensive, evidence-based review classifies cryptographic mechanisms for wireless IoT in 5G and beyond across lightweight symmetric cryptography, post-quantum cryptography, privacy-preserving encryption, and adaptive security. The literature-reported implementation results are compared with explicit attention to heterogeneous hardware, memory, energy, communication, and latency constraints. Lightweight symmetric mechanisms remain relevant for constrained data protection, while standardized post-quantum mechanisms such as ML-KEM and ML-DSA address quantum-vulnerable public-key functions and generally introduce larger keys, ciphertexts, signatures, certificates, or protocol messages. This review therefore emphasizes interoperability, firmware upgradability, crypto-agility, and lifecycle management rather than physical device-size growth. A conceptual three-phase roadmap for 2025–2035 is presented in which quantum-vulnerable public-key mechanisms are progressively supplemented and, where appropriate, replaced by hybrid classical–post-quantum and then post-quantum-capable architectures, while standardized symmetric/lightweight protection remains in use where it satisfies application requirements. The roadmap dates are planning intervals rather than universal adoption forecasts.
The rapid proliferation of Internet of Things (IoT) devices has revolutionized digital communication, yet it simultaneously poses unprecedented security challenges due to constrained device capabilities and increasing cyber threats. Conventional cryptographic techniques, while currently effective, are vulnerable to emerging quantum computing technologies that threaten to render classical encryption obsolete. This paper explores the integration of quantum-safe cryptographic techniques within IoT networks to ensure long-term confidentiality, integrity, and authentication. It examines post-quantum cryptographic primitives, including lattice-based, hash-based, multivariate, and code-based schemes, and evaluates their suitability for resource-constrained IoT environments. The study focuses on lightweight implementation strategies, balancing computational efficiency with robust security requirements. Simulation analyses demonstrate that properly optimized quantum safe protocols can provide resilient encryption, key exchange, and digital signature functionalities without overwhelming device resources. Furthermore, the integration of these techniques with IoT communication standards and secure network protocols ensures end-to-end protection across heterogeneous networks. Challenges such as latency, energy consumption, and scalability are addressed, highlighting the necessity of tailored cryptographic solutions for diverse IoT applications. The findings confirm that quantum safe cryptography is essential for future-proofing IoT networks, offering sustainable security measures that remain resilient against both classical and quantum adversaries, thereby supporting the continued expansion of secure and intelligent interconnected systems.
Quantum computing poses a significant threat to classical asymmetric cryptography, which is essential for ensuring confidentiality, authentication, and key exchange in contemporary digital infrastructures. Although post-quantum cryptography (PQC) provides mechanisms that resist quantum attacks, its implementation in Internet of Things (IoT) systems is challenged by constrained resources, including limitations in computation, memory, energy, latency, and bandwidth, and the heterogeneity of devices. This paper offers a comprehensive narrative review of PQC approaches applicable to IoT, systematically organizing 30 peer-reviewed studies published between 2022 and 2026 across four layers: device, communication, distributed trust, and application. Additionally, the review examines two cross-cutting dimensions, privacy and side-channel resistance. The analysis indicates a significant prevalence of lattice-based schemes, hybrid strategies, and integrations with blockchain technology, zero-knowledge proofs, federated learning, homomorphic encryption, AI, and Zero Trust architectures. Notably, key gaps remain in side-channel evaluation, migration pathways, deployment costs, and real-world validation—issues that are particularly critical given the long lifecycles of IoT devices and the ongoing threat of “harvest now, decrypt later” attacks.
The imminent arrival of quantum computing presents unprecedented challenges to Internet of Things (IoT) security, threatening to compromise the cryptographic protocols that safeguard billions of connected devices worldwide. This article examines the critical intersection of quantum computing capabilities and IoT vulnerabilities, with particular emphasis on resource-constrained devices, heterogeneous networks, and legacy system integration. This article presents a comprehensive framework for implementing quantum-resistant security measures in IoT environments, introducing a hybrid approach that combines lightweight quantum-resistant algorithms with modular architecture design. This article demonstrates traditional encryption methods like RSA and ECC remain vulnerable to quantum attacks; strategic implementation of lattice-based and hash-based cryptography can provide robust protection without overwhelming device resources. This article also addresses practical considerations for industry adoption, including development lifecycle integration, governance frameworks, and compliance requirements. Through examination of real-world implementation scenarios, this article establishes a successful quantum-resistant IoT security required for a balanced approach between immediate protective measures and long-term strategic planning, providing organizations with actionable guidelines for securing their IoT infrastructure against quantum threats.
The rapid convergence of sixth-generation (6G) networks and the Internet of Things (IoT) offers enormous potential for ultra-reliable, low-latency, and massive device connectivity. However, this integration also raises security and privacy concerns, particularly in light of new threats from quantum computing that could undermine traditional cryptography. The architecture of quantum-safe IoT networks that can withstand post-quantum security threats is thoroughly discussed in this review. It addresses the challenges related to how to use blockchain technology to provide decentralized trust as well as secure transactions, how to use post-quantum cryptographic algorithms to protect data confidentiality, and the best way to use a trust management architecture to improve identity verification, authorization, and authentication in the diverse IoT environment. The paper then examines scalability considerations, resource constraints, and interoperability problems that impact safe IoT deployments in the 6G era. This work serves as a roadmap for researchers and practitioners who aim to create robust and future IoT infrastructure and then maintain their security in a post-quantum world by integrating recent research patterns, solution development, and considerations related to real-world implementation.
6G networks will require quantum-secure cryptography deployed across core infrastructure, edge nodes, resource-constrained IoT devices. Although post-quantum cryptographic (PQC) algorithms have been standardized by NIST, their practical deployability in bandwidth and latency limited wireless systems remains unclear. This paper presents a practical evaluation of NIST selected PQC schemes, including ML-KEM (Kyber), ML-DSA (Dilithium), and Falcon. Benchmarks conducted with OpenSSL and the OQS provider on heterogeneous platforms show that while computational performance is acceptable, ciphertext and signature size expansion significantly impact handshake reliability and bandwidth efficiency, particularly at the network edge. The results highlight key system-level trade-offs and motivate the need for PQC optimization and deployment-aware design for future quantum-secure 6G networks.
Abstract: This study advances a unifying systems perspective on quantum-safe network security by synthesizing recent progress in quantum cryptography with practical integration patterns across carrier-grade infrastructures. Concept analysis distinguishes the roles of quantum key distribution (QKD), device-independent variants, quantum authentication, and post-quantum cryptography (PQC) within zero-trust architectures. Building on this, a layered framework—spanning physical/entanglement resources, key management, crypto-agility, control plane orchestration, and policy/compliance—is articulated to support end-to-end, composable guarantees. The problem addressed is the realization of verifiable, quantum-resilient security under operational constraints involving latency, key-rate variability, and heterogeneous trust assumptions. Methodology combines a structured literature synthesis with formal composability mapping to universal composability principles, adversarial threat modeling for quantum-enabled attackers, and testbed/simulation evaluation of hybrid QKD–PQC pipelines across L2–L3 segments and 5G/6G backhaul scenarios. Key results indicate that (i) selective QKD deployment on high-value links coupled with PQC at endpoints enhances resilience while preserving crypto-agility; (ii) automated key-lifecycle orchestration reduces exposure windows; and (iii) device-independent assurances strengthen guarantees where trust relaxation is necessary. The impact is a deployment-ready reference architecture, measurable integration metrics, and guidance aligned with emerging standards for critical infrastructure and national networks. The implications extend to procurement, compliance, and roadmap planning for quantum-era network security. Keywords: quantum-safe cryptography, quantum key distribution (QKD), post-quantum cryptography (PQC), hybrid QKD–PQC, composable security, device-independent QKD, zero-trust networks, key management and orchestration, 5G/6G backhaul, network security architecture, standards and interoperability