Constrained Device Performance Benchmarking with the Implementation of Post-Quantum Cryptography

The growth of quantum computing reveals a series of significant threats to cryptographic systems known today, such as RSA, ECC, and Diffie-Hellman, which are extremely important for Internet security, but are threatened by the increase in possible quantum attacks. The area of public and private key cryptography is vast. Therefore, this article addresses post-quantum cryptography (PQC) algorithms and the challenges of implementing them in Internet of Things (IoT) devices, given the difficulty of application due to restricted resources, such as RAM and clock speed . To this end, we will discuss the need for standardization of algorithms considering low-resource IoT devices, prioritizing RAM over ROM, meeting the needs of low-memory devices, which are lighter. The National Institute of Standards and Technology (NIST) has validated four cryptographic systems that are secure against quantum attacks. We analyze the implications of these systems on the infrastructure of current networks and will compare in detail these algorithms and their respective strengths, weaknesses, and trade-offs. We evaluate the feasibility of post-quantum encryption (PQC) algorithms in resource-constrained IoT devices using the ESP-WROOM-32 microcontroller. Three cryptographic schemes were implemented and compared.

Over the years, important breakthroughs have been made in protecting data at rest or in-transit. The emergence of the Internet of Things (IoT) and Cyber Physical Systems (CPS) has pose new challenges for protecting data in systems and devices tightly close to humans. Embedded systems with constrained computing capabilities are a central part in IoT and CPS, susceptible to different security attacks and vulnerabilities. Lightweight cryptography is the term used for grouping the different cryptographic algorithms and techniques tailored to observe the requirements for data security in such constrained applications. Nowadays, the potential emergence of quantum computing threatens these security solutions widely in use. Thus, novel cryptographic algorithms deemed to resist quantum attack models are being standardized by the National Institute of Standards and Technology (NIST) in the Post-Quantum Cryptography (PQC) Standardization process. In this paper, we present a study on how the advent of quantum computing might have a deep impact on the security of constrained applications in the IoT and CPS domains. We focused on the NIST PQC finalists, from the perspective of their use for securing embedded systems.

The emergence of large-scale quantum computing presents an imminent threat to contemporary public-key cryptosystems, with quantum algorithms such as Shor’s algorithm capable of efficiently breaking RSA and elliptic curve cryptography (ECC). This vulnerability has catalyzed accelerated standardization efforts for post-quantum cryptography (PQC) by the U.S. National Institute of Standards and Technology (NIST) and global security stakeholders. While theoretical security analysis of these quantum-resistant algorithms has advanced considerably, comprehensive real-world performance benchmarks spanning diverse computing environments—from high-performance cloud infrastructure to severely resource-constrained IoT devices—remain insufficient for informed deployment planning. This paper presents the most extensive cross-platform empirical evaluation to date of NIST-selected PQC algorithms, including CRYSTALS-Kyber and NTRU for key encapsulation mechanisms (KEMs), alongside BIKE as a code-based alternative, and CRYSTALS-Dilithium and Falcon for digital signatures. Our systematic benchmarking framework measures computational latency, memory utilization, key sizes, and protocol overhead across multiple security levels (NIST Levels 1, 3, and 5) in three distinct hardware environments and various network conditions. Results demonstrate that contemporary server architectures can implement these algorithms with negligible performance impact (<5% additional latency), making immediate adoption feasible for cloud services. In contrast, resource-constrained devices experience more significant overhead, with computational demands varying by up to 12× between algorithms at equivalent security levels, highlighting the importance of algorithm selection for edge deployments. Beyond standalone algorithm performance, we analyze integration challenges within existing security protocols, revealing that naive implementation of PQC in TLS 1.3 can increase handshake size by up to 7× compared to classical approaches. To address this, we propose and evaluate three optimization strategies that reduce bandwidth requirements by 40–60% without compromising security guarantees. Our investigation further encompasses memory-constrained implementation techniques, side-channel resistance measures, and hybrid classical-quantum approaches for transitional deployments. Based on these comprehensive findings, we present a risk-based migration framework and algorithm selection guidelines tailored to specific use cases, including financial transactions, secure firmware updates, vehicle-to-infrastructure communications, and IoT fleet management. This practical roadmap enables organizations to strategically prioritize systems for quantum-resistant upgrades based on data sensitivity, resource constraints, and technical feasibility. Our results conclusively demonstrate that PQC is deployment-ready for most applications, provided that implementations are carefully optimized for the specific performance characteristics and security requirements of target environments. We also identify several remaining research challenges for the community, including further optimization for ultra-constrained devices, standardization of hybrid schemes, and hardware acceleration opportunities.

Information security is a fundamental and urgent issue in the digital transformation era. Cryptographic techniques and digital signatures have been applied to protect and authenticate relevant information. However, with the advent of quantum computers and quantum algorithms, classical cryptographic techniques have been in danger of collapsing because quantum computers can solve complex problems in polynomial time. Stemming from that risk, researchers worldwide have stepped up research on post-quantum algorithms to resist attack by quantum computers. In this review paper, we survey studies in recent years on post-quantum cryptography (PQC) and provide statistics on the number and content of publications, including a literature overview, detailed explanations of the most common methods so far, current implementation status, implementation comparisons, and discussion on future work. These studies focused on essential public cryptography techniques and digital signature schemes, and the US National Institute of Standards and Technology (NIST) launched a competition to select the best candidate for the expected standard. Recent studies have practically implemented the public key encryption/key encapsulation mechanism (PKE/KEM) and digital signature schemes on different hardware platforms and applied various optimization measures based on other criteria. Along with the increasing number of scientific publications, the recent trend of PQC research is increasingly evident and is the general trend in the cryptography industry. The movement opens up a promising avenue for researchers in public key cryptography and digital signatures, especially on algorithms selected by NIST.

Cryptographic algorithms are crucial for secure communication in the Internet of Things (IoT). Quantum computers threaten public key cryptography algorithms like RSA (Rivest, Shamir, Adleman) and Diffie-Hellman (DH) key exchange schemes, which are widely in use today. As cryptographic algorithms are the foundation of secure internet communication, the development of Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC) is essential to protect transactions over the internet. However, solutions like Quantum Key Distribution require heavy infrastructure. So, it is not feasible for the Internet of Things with fewer resources in computing power and form factor. Post-Quantum Cryptography is helpful on these devices. But, it needs further developments and improvements. This paper analyzes cryptography algorithms and protocols of IoT with different categories. Integrated PQC of National Institute of Standards and Technology (NIST) third level finalists on Raspberry Pi 4 (RPI4) board with Linux operating system. The performance of Post-Quantum Cryptography schemes for IoT has been evaluated. Finally, a Post-Quantum Cryptography scheme has been suggested for the Internet of Things based on the performance analysis.

The Clean Air Mercury Rule (CAMR) which was published in the Federal Register on May 18, 2005, requires that calibration of mercury continuous emissions monitors (CEMs) be performed with NIST-traceable standards. Western Research Institute (WRI) is working closely with the Electric Power Research Institute (EPRI), the National Institute of Standards and Technology (NIST), and the Environmental Protection Agency (EPA) to facilitate the development of the experimental criteria for a NIST traceability protocol for dynamic elemental mercury vapor generators. The traceability protocol will be written by EPA. Traceability will be based on the actual analysis of the output of each calibration unit at several concentration levels ranging from about 2-40 ug/m{sup 3}, and this analysis will be directly traceable to analyses by NIST using isotope dilution inductively coupled plasma/mass spectrometry (ID ICP/MS) through a chain of analyses linking the calibration unit in the power plant to the NIST ID ICP/MS. Prior to this project, NIST did not provide a recommended mercury vapor pressure equation or list mercury vapor pressure in its vapor pressure database. The NIST Physical and Chemical Properties Division in Boulder, Colorado was subcontracted under this project to study the issue in detail and to recommend a mercury vapormore » pressure equation that the vendors of mercury vapor pressure calibration units can use to calculate the elemental mercury vapor concentration in an equilibrium chamber at a particular temperature. As part of this study, a preliminary evaluation of calibration units from five vendors was made. The work was performed by NIST in Gaithersburg, MD and Joe Rovani from WRI who traveled to NIST as a Visiting Scientist.« less

A Look at its Past Decade and a Gaze towards its Future. As the National Metrology Institute (NMI) for the United States, the National Institute of Standards and Technology (NIST), formerly the National Bureau of Standards, has provided measurement services, both calibrations and reference materials, for more than 100 years. Through these services, our customers have benefitted from our measurement capabilities and expertise in many areas, including amount of substance; dimensional metrology; electricity and magnetism; ionizing radiation; mass and related quantities; photometry and radiometry; thermodynamics; and time and frequency. NIST’s customers have also had access to some of the lowest measurement uncertainties available and a dependable way to establish traceability to the International System of Units (SI) [http://www.nist.gov/pml/wmd/metric/si-units.cfm].In response to the signing of the International Committee for Weights and Measures (CIPM) Mutual Recognition Arrangement (MRA), NIST first established an institution-wide quality system for the measurement services 10 years ago [http://www.bipm.org/en/cipm-mra/objectives.html]. NIST’s Quality System for Measurement Services has advanced the quality of service and measurements we provide our customers by fostering an environment in which NIST management and staff work towards continual improvement in the development and delivery of NIST measurement services. This paper describes NIST’s Quality System for the Measurement Services and its relevance to international standards of quality, such as the International Organization for Standardization and the International Electrotechnical Commission (ISO/IEC) 17025 standard and ISO Guide 34 [http://www.nist.gov/nistqs/]. It also provides a history of this quality system and a glimpse of future goals for improving its implementation.

In the fall of 2019, the National Institute of Standards and Technology (NIST) funded threes studies to better understand equity and inclusivity. This report documents phase two of a three phased sequential, exploratory mixed methods study designed to provide an in-depth look at the population of NIST federal employees to identify factors, attitudes, and processes that might result in gender- specific barriers at NIST. Phase 1 analyzed human resources demographic data, compensation data, and performance data of NIST federal employees from 2011 to 2019 to determine any relevant trends. Phase 1 informed the development of an in-depth interview protocol designed to identify the differences, if any, in the ways in which men and women experience work at NIST. A total of 40 (36 female and 4 male) participants were interviewed. Three interconnected themes emerged in the data: 1) a culture at NIST that creates a Chilly Climate for women; 2) gendered experiences that contribute to and are outcomes of that chilly climate; and 3) gendered outcomes that influence women s experiences in the organization. The culture has evolved from NIST s scientific roots, scientific excellence, a strong belief in meritocracy, and as a Federal agency. Each of these characteristics contribute to a gendered social structure and the perception that change is not needed. This backdrop sets the stage for the characterizations of NIST from the interviews as a Boys Club and an Elitist environment. The radically different perspectives of men and women based in the culture result in experiences and outcomes that provide advantages and opportunities for men while erecting barriers to survival for women, including isolation and possibly exclusion. These barriers result in consequences of discrimination as well as lack of trust and resignation. Participant quotes are used as exemplars to provide details related to each of these themes. Overall, the interviews demonstrate that women and men experience a very different NIST.

The National Institute of Standards and Technology (NIST), formerly the National Bureau of Standards, was established by the U.S. Congress in 1901 and charged with establishing a measurement foundation to facilitate U.S. and international commerce. NIST provides reference materials and reference instruments that are used to ensure the accuracy, metrological traceability, and comparability of measurement results in many diverse fields of science, industry, and technology. This document provides and explains the vocabulary used at NIST to describe the reference materials and reference instruments available to NIST s customers. This document also describes the methods used in developing NIST reference materials. The definitions and descriptions provided supersede those used in the original versions of this publication, NIST SP260-136 and SP260-136-2020.

This paper presents a summary of the strategies and activities underway at the National Institute of Standards and Technology (NIST) in electronics packaging, interconnection and assembly (P/I/A). In addition, a sampling of collaborations involving these works is included. The overall NIST effort in P/I/A is composed of targeted programs conducted by the NIST laboratories and by the NIST Advanced Technology Program (ATP). A dominant aspect of the laboratory-based P/I/A program focuses on the metrology and data needed to support the product technologies envisioned within industry roadmaps. A significant aspect of the work includes efforts in metrology, materials, complex material assemblies, and microelectronic components and circuits. In parallel, the NIST ATP is supporting on a cost-share basis a variety of industry-based development projects of high-risk enabling technologies for new or improved products, manufacturing, and processes in P/I/A.

As the era of quantum computing approaches, the fundamental cryptographic primitives securing global communications face a paradigm shift. With the National Institute of Standards and Technology (NIST) finalizing new standards, the industry must urgently address the vulnerabilities of legacy systems. The imminent advent of CRQCs (Cryptographically Relevant Quantum Computers) poses an existential threat to the Public Key Infrastructure (PKI) underpinning the global digital economy. Classical algorithms such as RSA and ECC (Elliptic Curve Cryptography) are vulnerable to polynomial-time cryptanalysis via Shor’s algorithm. This study investigates the HNDL (Harvest Now, Decrypt Later) threat model and evaluates the resilience of NIST-standardized PQC (Post-Quantum Cryptography) algorithms: ML-KEM and ML-DSA. Utilizing a high-performance Fortinet networking environment, we experimentally validate that "Hybrid Mode" IPsec VPNs can achieve quantum resistance with negligible performance degradation, offering a viable migration path for enterprise infrastructure. Specifically, we benchmark the trade-offs between PQC’s larger key sizes and network latency, demonstrating that the overhead remains within acceptable operational thresholds. Implementing hybrid protocols provides a critical transition mechanism, allowing organizations to secure long-term data confidentiality against retrospective decryption while preserving interoperability with legacy systems.

Lattice-based cryptography is a novel approach to public key cryptography (PKC), of which the mathematical investigation (so far) resists attacks from quantum computers. By choosing a module learning with errors (MLWE) algorithm as the next standard, the National Institute of Standards and Technology (NIST) follows this approach. The multiplication of polynomials is the central bottleneck in the computation of lattice-based cryptography. Because PKC is mostly used to establish common secret keys, the focus is on compact area, power, and energy budget and, to a lesser extent, on throughput or latency. While most other work focuses on optimizing number theoretic transform (NTT)-based multiplications, in this article, we highly optimize a Toom–Cook-based multiplier. We demonstrate that a memory-efficient striding Toom–Cook with lazy interpolation results in a highly compact, low-power implementation, which, on top, enables a very regular memory access scheme. To demonstrate the efficiency, we integrate this multiplier into a Saber post-quantum accelerator, one of the four NIST finalists. Algorithmic innovation to reduce active memory, timely clock gating, and shift-add multiplier has helped to achieve 38% less power than state-of-the-art post-quantum cryptography (PQC) core, 4 <inline-formula xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink"> <tex-math notation="LaTeX">$\times $ </tex-math></inline-formula> less memory, 36.8% reduction in multiplier energy, and 118 <inline-formula xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink"> <tex-math notation="LaTeX">$\times $ </tex-math></inline-formula> reduction in active power with respect to state-of-the-art Saber accelerator (not silicon verified). This accelerator consumes 0.158- <inline-formula xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink"> <tex-math notation="LaTeX">$\text {mm}^{2}$ </tex-math></inline-formula> active area, which is the lowest reported to date despite the process disadvantages of the state-of-the-art designs.

Standards provide critical benefits across a wide variety of contexts, including safety and health, environmental protection, and quality of products and services. However, while these benefits are generally acknowledged, estimating the social and economic value of standards and determining how specific entities and activities influence their development require careful analysis. In October of 2018, the National Institute of Standards and Technology (NIST) asked the RAND Corporation to estimate the benefit of NIST’s research contributing to particular fire safety standards. The original objectives of the project were to (1) document the role of the NIST in the standards development process, (2) estimate the value these standards provide to society, and (3) thereby inform the economic value of NIST’s contribution to these standards. This report presents results for the first two objectives. Given that NIST’s contribution is one of several inputs combining to create these standards, NIST’s share of the credit for their value could not be quantified. Our analysis focused on case studies in standards for home smoke alarms and for protecting structures at the wildland-urban interface (WUI). Our analysis draws on a wide variety of qualitative and quantitative methods to holistically describe the impacts of these standards and NIST’s role in their development. The intended audience of this report includes those who work on fire safety research, fire safety standards, building codes, and technology transfer. The conclusions presented here may also be of interest for broader resource allocation and federal budget justification purposes. Finally, this report was written to be accessible to any interested members of the general public.

A significant amount of study is being done to review the security promises made for the various ciphers now in use as a result of the development of quantum computing technology. A general attack against symmetric key cryptography primitives that can reduce search costs to the square root is Grover's search algorithm. To implement Grover's algorithm, it is necessary that the target cipher be implemented as a quantum circuit. Despite being relatively new, this area of study has received significant attention from the research community. The authors have estimated the cost of Grover's key search attack against the stream cipher Atom, for the first time, under circuit depth restrictions defined in National Institute of Standards and Technology (NIST) PQC standardisation process. The authors implement the quantum circuit of Atom in QISKIT, (open‐source software development kit for working with quantum computers running on IBM Quantum Experience). The results are also compared with other existing literature on LFSR‐based stream ciphers, such as Grain‐v1, Grain‐128‐AEAD, and Lizard. The authors also find that, to the best of their knowledge, in the existing literature on estimating the cost of Grover's attack on symmetric ciphers, Atom is the only 128‐bit key cipher that meets the threshold of ≈2 170 set by NIST for quantum security of 128‐bit key ciphers. The authors also analyse the security of Atom against quantum TMDTO attacks.

The National Institute of Standards and Technology (NIST) timescale produces a real-time realization of UTC(NIST) in the form of a pulse-per-second (PPS) time signal and a 5 MHz frequency reference. UTC(NIST) contributes to UTC (Coordinate Universal Time) using TWSTFT (Two-Way Satellite Time and Frequency Transfer) and common-view GPS (Global Positioning System) techniques. The NIST timing signal is also disseminated to the international and domestic communities using various other techniques: NIST Automated Computer Time Service (ACTS), Internet Time Service (ITS) and NIST Time Measurement and Analysis Service (TMAS). The accuracy of NIST contribution to UTC and of the dissemination of the NIST PPS time signal depends upon the quality of the calibration of the time delay between each user and the UTC(NIST) reference point. Hardware constraints, spatial constraints, and in some cases simple convenience, require that the physical input to the transfer and dissemination equipment be distributed throughout the NIST campus. A robust on-campus timing distribution and calibration system is required to ensure the accuracy and stability of these signals: for example, the current error budget for a typical time transfer calibration requires local delays to be known to an uncertainty of less than 200 ps. We utilize a clock trip calibration protocol to measure the delays introduced by the local time distribution system at NIST: a clock trip involves measuring the time difference between the UTC(NIST) reference point and a travelling clock, then transporting the travelling clock to a secondary reference point where another measurement of the time difference is performed. Clock trips are advantageous as they are a nonintrusive measurement of the full system delay. To achieve calibrations with an accuracy on the order 100 ps, we have developed a means to transport a cesium clock between remote locations on site with minimal vibration and an analysis protocol to maximize the information acquired by each clock trip. We will introduce the system used to distribute time signals at NIST, the hardware and protocol we have developed to calibrate secondary timing reference points, and data we have collected based on their implementation.