Sürdürülebilir Kalkınma Amaçları
Yayınlar
- Kitap BölümüYalnız künye2026Rethinking IoT Security in the Era of Quantum Computing: Literature Reviews
Hanna, Yacoub; Tonyali, Samet; Harrilal-Parchment, Ricardo; Akkaya, Kemal
As cryptographically relevant quantum computers get scaled up and stabilized, traditional cryptographic systems are one step closer to being obsolete, necessitating the development of robust and future-proof alternatives. This chapter investigates the landscape of quantum-based algorithms and protocols, with a focus on their applicability to the Internet of Things (IoT) ecosystem, ranging from low-power edge sensors to more capable embedded systems. The theoretical basis and practical applications of Quantum Resistant Cryptography (QRC) and Quantum Key Distribution (QKD) are analyzed, examining their computational requirements, energy consumption, scalability, and integration possibilities in IoT architectures with limited resources. In particular, how various Post-Quantum Cryptography (PQC) schemes, such as lattice-based, code-based, and hash-based cryptography, perform across different classes of IoT hardware is discussed. The chapter further investigates ongoing standardization efforts, implementation obstacles, and innovative solutions specifically designed for heterogeneous IoT environments. Moreover, the feasibility of QKD in resource-constrained scenarios is examined, including low-power QKD implementations for embedded and edge devices in IoT networks. Also, the trade-offs between security and efficiency are discussed, considering real-world deployment scenarios and resource constraints. Furthermore, a comprehensive threat model is presented, and the security of current literature is analyzed based on this model. By combining insights from recent literature, a comprehensive understanding of how quantum-based security methodologies can be integrated across the IoT spectrum is provided to guarantee long-term security resilience in the era of quantum computing. This chapter aims to serve as a foundational reference for researchers and practitioners seeking to build quantum-resistant or quantum-enabled IoT infrastructures.
- MakaleAçık Erişim2025A comprehensive and realistic performance evaluation of post-quantum security for consumer IoT devices
Hanna, Yacoub; Bozhko, Jessica; Tonyali, Samet; Harrilal-Parchment, Ricardo; Cebe, Mumin; Akkaya, Kemal
The computational capacity envisaged for quantum computers poses a significant threat to today's traditional cryptographic algorithms. Although they are not yet large enough to compromise current cryptographic protocols, one can practice retrospective decryption since data packets traveling through the Internet can be easily sniffed. This threat extends to wireless communication security within consumer IoT devices that use lightweight cryptography due to limited computational power. Thus, countermeasures against potential quantum attacks should be preemptively adopted. NIST is leading efforts to standardize several algorithms as quantum-resistant Key Exchange Mechanisms (KEMs) and Digital Signatures. In this paper, we investigate the viability of these Post-Quantum algorithms in the Transport Layer Security (TLS) of power-constrained IoT devices. Specifically, it focuses on two widely used IoT network protocol stacks, i.e., Bluetooth Low Energy (BLE) and Wi-Fi. To this end, we build a realistic IoT testbed running IP over BLE. Our evaluation considers the impact of several realistic factors for the first time, such as using a chain of certificates on the server side and incorporating certificate validation methods such as Online Certificate Status Protocol (OCSP) and Certificate Revocation Lists (CRL). We also evaluate the impact of mutual authentication between the server and the client. Utilizing the outcomes of this evaluation, we then propose a novel approach for IoT devices to dynamically choose the most efficient KEM algorithm for TLS based on the device's physical network interface. The performance results provide valuable insights with respect to the TLS latency and energy consumption of consumer IoT devices.
- BildiriYalnız künye2023Performance Evaluation of Quantum-Resistant TLS for Consumer IoT Devices
Bozhko, Jessica; Hanna, Yacoub; Harrilal-Parchment, Ricardo; Tonyali, Samet; Akkaya, Kemal
Post-quantum (PQ) cryptographic algorithms are currently being developed to be able to resist attacks by quantum computers. The practical use of these algorithms for securing networks will depend on their computational and communication efficiency. In particular, this is critical for the security of wireless communications within the context of consumer IoT devices that may have limited computational power and depend on a constrained wireless bandwidth. To this end, there is a need to evaluate the performance of widely used application layer security standards such as transport layer security (TLS) to understand the use of the existing PQ algorithms that are being evaluated by NIST as a replacement to the current cryptographic algorithms. This paper focuses on two widely used IoT standards Bluetooth Low Energy (BLE) and WiFi to find out the optimal performing PQ algorithm for their security when used in end-to-end connections over the Internet. By implementing the capability for IP over BLE and all options of TLS connection establishment, we developed a client-server IoT testbed to measure the efficiency of PQ key encapsulation mechanisms (KEMs) and PQ digital signature algorithms. The test results showed that Kyber512 is the ideal KEM while Falcon-512 and Dilithium2 are the best signatures for BLE and WiFi devices. Based on this outcome, we developed a mechanism for IoT devices with multiple communication interfaces, that dynamically chooses a PQ KEM algorithm based on the MAC layer protocol being used at the time.
- BildiriAçık Erişim2022Performance Evaluation of TLS 1.3 Handshake on Resource-Constrained Devices Using NIST's Third Round Post-Quantum Key Encapsulation Mechanisms and Digital Signatures
Saribas, Sultan; Tonyali, Samet
Towards the end of the 20. century, quantum computing came into sight by the main effect of Shor's Algorithm. While this algorithm offers a solution for the factorization problem, which makes it exponentially faster, it alongside becomes a critical threat for the encryption schemes since mostly their security mechanisms rely on the difficulty of integer factorization or discrete log problems. Despite it is not known when advanced quantum computers will show up, yet, once it is developed, most existing cryptography will be rendered useless, which means all existing information security will be vulnerable. Owing to this risky situation, The National Institute of Standards and Technology (NIST) launched post-quantum cryptography (PQC) standardization process for the development of PQC schemes. In this paper, we have chosen three key encapsulation mechanisms and two digital signature algorithms with different parameter sets from the round three submissions. We measured their TLS 1.3 handshake performance using two resource-constrained devices and compared it to that of classical encryption and digital signature schemes. Experiment results showed that post-quantum algorithms come with an extra message overhead while their handshake delay values are promising.