Quantum Encryption Resilience Score (QERS) : A System-Level Evaluation Framework for Post-Quantum Cryptography across Computer Systems, IoT-IIoT, Network and Internet Architecture

Sammanfattning

Public-key cryptographic algorithms such as RSA and Elliptic Curve Cryptography (ECC) may become vulnerable once large-scale quantum computersand quantum chips become practical for real-world infrastructure and commercial deployment. To address this risk, Post-Quantum Cryptography (PQC)introduces cryptographic methods designed to resist quantum-based attacks.However, these mechanisms often require more processing power, bandwidth,and energy, which creates challenges for constrained IoT and Industrial IoT(IIoT) devices.This thesis introduces the Quantum Encryption Resilience Score (QERS), asystem-level evaluation framework designed to quantify the operational impactof post-quantum cryptographic deployment across embedded systems and networked environments. Instead of concentrating only on cryptographic accuracy,QERS integrates multiple performance dimensions, including latency, CPUutilization, energy consumption, signal strength (RSSI), and cryptographicoverhead into a unified and normalized score. A Design Science Research methodology is employed to design, implement, and evaluate the QERS frameworkusing four heterogeneous ESP-based microcontroller platforms. Experimentalevaluation is conducted using HTTP and HTTPS communication over Wi-Fi,incorporating post-quantum cryptographic configurations based on Kyber andML-DSA.The results demonstrate that post-quantum cryptographic mechanisms introduce measurable latency amplification and variability across devices, with cleardifferences in performance and stability depending on hardware capability.QERS enables systematic, cross device comparison of these effects, revealingcritical trade-offs between cryptographic strength and operational performance.The findings confirm that latency is the dominant factor influencing systemresilience, while CPU and energy contribute secondary effects. By integratingcryptographic, system, and network-level metrics into a single evaluative construct, this work provides a structured and reproducible approach for assessingresilience in post-quantum secure embedded and IoT infrastructures.