Post Quantum Cryptography in IoT

The advent of quantum computers threatens the cryptography that currently secures IoT solutions. This report, which is a vital collaboration between the GSMA Post Quantum Telco Network Task Force and the IoT Strategy Group, focuses on IoT systems connected using 3GPP-based connectivity, including both terrestrial and non-terrestrial networks. It builds on the topics covered in the Post Quantum Post Quantum Cryptography – Guidelines for Telecom Use Cases v2, focusing on the IoT context.

IoT and the Quantum Threat

The widescale adoption of IoT by consumers and across industries and a growing number of interconnected devices, often involving sensitive data and critical systems, means that security
requires careful consideration. Cryptography underpins the security of IoT solutions and
is embedded in each of the IoT solution components and protocols. In this document, it provides the information to support an analysis, which can be used to engage the broader IoT supply chain and plan a PQC implementation strategy, taking into consideration technical aspects, such as performance constraints and operational aspects, such as device/solution lifecycle, ease of upgrade/replacement.

The evolution of quantum computing capabilities poses a threat as they have the potential to render obsolete the most commonly used cryptographic algorithms, such as public key cryptography, which underpin the cyber security solutions we rely on today to keep information and communications safe.

IoT systems face unique challenges in implementing Post-Quantum Cryptography (PQC) and crypto-agility to ensure long-term security and resilience in the quantum era. This document provides an initial impact assessment, guiding key stakeholders in taking proactive steps to mitigate quantum threats in IoT and navigating the evolving standards and regulations.

Your feedback is invaluable in ensuring the ongoing relevance and effectiveness of this document. The GSMA PQTN Task Force and the 5G IoT Strategy Group enthusiastically invite your engagement and collaboration as we work together to fortify our IoT landscape against future quantum challenges. Let’s lead the charge in securing our digital future!