Quantum-resistant hardware-accelerated IoT traffic encryptor
The result's identifiers
Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F00216305%3A26220%2F25%3APU155925" target="_blank" >RIV/00216305:26220/25:PU155925 - isvavai.cz</a>
Result on the web
<a href="https://www.sciencedirect.com/science/article/abs/pii/S2542660525000678" target="_blank" >https://www.sciencedirect.com/science/article/abs/pii/S2542660525000678</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.1016/j.iot.2025.101554" target="_blank" >10.1016/j.iot.2025.101554</a>
Alternative languages
Result language
angličtina
Original language name
Quantum-resistant hardware-accelerated IoT traffic encryptor
Original language description
The rapid expansion of the Internet of Things (IoT) brings new security challenges, particularly with the potential risks posed by quantum computing. In this paper, we present a comprehensive approach to IoT security, offering two deployment options: a hardware-accelerated encryption solution using FPGAs for high-speed IoT aggregators, and a software-based version suited for lower-end IoT devices. Both versions share the same cryptographic architecture, ensuring consistency and compatibility across diverse use cases. Our proposed approach employs a hybrid key management mechanism that integrates classical, quantum, and post-quantum cryptographic schemes, including Elliptic Curve Diffie–Hellman (ECDH), CRYSTALS-Kyber, and Quantum Key Distribution (QKD). These key sources are combined using a custom-designed 3-key combiner to generate a secure hybrid key for AES-256 encryption in Galois-Counter Mode (GCM). Both solutions have been rigorously tested in real-world scenarios, including a pilot deployment between Czechia and Estonia and high-speed lab tests, validating their effectiveness and scalability. This dual approach caters to both resource-constrained edge devices and high-performance central systems, providing scalable and versatile post-quantum security for IoT environments.
Czech name
—
Czech description
—
Classification
Type
J<sub>imp</sub> - Article in a specialist periodical, which is included in the Web of Science database
CEP classification
—
OECD FORD branch
20202 - Communication engineering and systems
Result continuities
Project
—
Continuities
S - Specificky vyzkum na vysokych skolach
Others
Publication year
2025
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů
Data specific for result type
Name of the periodical
Internet of Things
ISSN
2542-6605
e-ISSN
—
Volume of the periodical
31
Issue of the periodical within the volume
6
Country of publishing house
NL - THE KINGDOM OF THE NETHERLANDS
Number of pages
18
Pages from-to
„“-„“
UT code for WoS article
001441747400001
EID of the result in the Scopus database
—