Quantum-Resistant Security Technologies for Resource-Constrained Edge Devices: Challenges and Lightweight Countermeasures

With the rapid advancement of quantum computing technology, IoT edge devices widely deployed in industrial settings are facing severe threats to their quantum-resistant security. this work focuses on the challenges of adapting Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC) for resource-constrained environments. this work systematically identifies four critical obstacles: difficulties in physical integration due to device heterogeneity; constraints imposed by the limited computing power and storage resources of edge nodes on PQC algorithm execution; compatibility gaps between QKD/PQC and existing industrial protocols (such as Modbus and Profinet); and the engineering cost pressures associated with large-scale deployment. To address these issues, the paper proposes three lightweight countermeasures:(1) A tiered deployment architecture for quantum-safe security that accommodates device heterogeneity, enabling dynamic trade-offs between security strength and resource overhead; (2) middleware facilitating the synergy of quantum-classical hybrid network protocols, ensuring seamless integration between QKD/PQC and industrial control protocols; and (3) a distributed key management mechanism featuring three-level collaboration—edge node, network proxy, and central system—which offloads computation- and storage-intensive tasks to high-resource nodes, thereby alleviating bottlenecks at the edge. Experimental validation within a smart manufacturing factory's sensor network demonstrates that this scheme maintains quantum-safe capabilities while reducing per-node deployment costs by approximately 81.7% compared to pure QKD solutions and by about 32% compared to pure PQC solutions, all while facilitating seamless, non-disruptive upgrades. This study indicates that lightweight algorithm design, hardware-software co-optimization, and tiered architectural deployment constitute a viable pathway for advancing IoT edge security into the quantum-safe era.