Darzin International Company Multidisciplinary Engineering Science Open 2 Serial Number 2 2025 03 01 Secure IoT Stacks for Critical Infrastructure: Protocols, TEEs, and Post-Quantum Readiness Secure IoT Stacks for Critical Infrastructure: Protocols, TEEs, and Post-Quantum Readiness 1 15 EN Journal Article 2025 01 11 <p>This study aims to synthesize and analyze current advancements in secure Internet of Things (IoT) architectures for critical infrastructure, emphasizing protocol assurance, trusted execution environments (TEEs), and post-quantum cryptographic readiness. A qualitative review design was employed to systematically examine the literature on IoT security frameworks within critical infrastructure domains. Nineteen peer-reviewed articles published between 2015 and 2025 were selected through comprehensive searches across IEEE Xplore, ACM Digital Library, ScienceDirect, SpringerLink, and Scopus. Inclusion criteria targeted studies addressing secure communication protocols, hardware-based trust mechanisms, and quantum-resistant encryption strategies. Data collection was limited to document analysis, and data interpretation followed a qualitative content analysis using NVivo 14. Open coding, axial categorization, and selective thematic integration were applied until theoretical saturation was achieved, producing four emergent themes that encapsulate the security, interoperability, and resilience dimensions of secure IoT stacks. The analysis revealed four major thematic dimensions: (1) protocol assurance and interoperability, focusing on secure communication frameworks and cross-layer encryption; (2) trusted execution environments and hardware roots of trust, emphasizing TEEs, secure boot mechanisms, and runtime attestation; (3) post-quantum cryptography and algorithm transition, addressing migration to quantum-safe encryption and hybrid cryptographic architectures; and (4) resilience and assurance in critical infrastructure IoT, highlighting risk management, compliance, and forensic readiness. Collectively, these dimensions illustrate a systemic evolution from isolated security mechanisms toward integrated assurance ecosystems combining hardware, software, and governance layers. Secure IoT stack design for critical infrastructures demands convergence between protocol standardization, hardware-based trust, and post-quantum preparedness. Future IoT security models should prioritize interoperability, algorithmic agility, and continuous certification to ensure operational resilience against both current and emerging cyber-physical threats.</p> https://jmesopen.com/index.php/jmesopen/article/download/14/12