Cryptographie coprocessor design for IoT sensor nodes

Mobile ad hoc network (MANET) is a group of mobile nodes that communicates with each other without any supporting infrastructure. These networks have some unique features such as dynamic mobility, open nature, lack of infrastructure, limited physical security and they are vulnerable to several security threats. Malicious node can drop all or partial received packets instead of forwarding them to the next hop through the path. In order to find the malicious nodes, an initial transmission is made between the source and destination nodes. Using fuzzy rules, the trust value of each node is computed and it varies from 0 to 1. A common threshold value is set for each node and by using this threshold value, every node in the network can be identified as either a malicious node or a regular node. After identifying the malicious nodes, these nodes are eliminated by muting the power to off state. As the malicious nodes are eliminated between source and destination nodes, source node can select another trusted path to its destination
 node. For security and authentication of routing information, hybrid cryptography is employed, using advanced encryption standard (AES) and elliptic curve cryptography (ECC) algorithms. AES algorithm is used as symmetric algorithm to encrypt the routing information and ECC algorithm is used as asymmetric algorithm to encrypt the public key. During encryption, the original plain text is converted into cipher text with encrypted public key and similarly during decryption cipher text is converted into original plain text with decrypted private keys. So the proposed method involves both AES and ECC algorithms which provides security mechanism as efficient and sufficient one. The experimental simulations are carried for the proposed model using network simulator 2 (NS-2) for Throughput, Delay, Packet delivery ratio, Packet overhead and Packet drop.

Background: Today’s developing era data and information security plays an important role in unsecured communication between Internet of Things (IoT) elements. As the technologies are developing huge amount of information are exchanged with each other which increases the demand of a secure encryption standards. Objectives: To protect the information transmission between nodes in the perceptual layer of IoT, security is to be enhanced such that the Men in Middle (MIM) attack of information by intruders in the communication link is not possible. Methods/Statistical analysis: The security method is implemented using the concept of symmetric, asymmetric and hash algorithms between the sender and receiver. Elliptic Curve Cryptography (ECC) is performed for encrypting and sharing the Advanced Encryption Standard (AES) secret key between the sender and receiver. Elliptic Curve digital signature are added with the encrypted data for validation in transmission. Secured Hash Algorithm (SHA) is considered for generating Elliptical Curve Digital Signature Algorithm (ECDSA). All the algorithms are combined to enhance the security. Findings: Elliptic Curve Cryptography is generally applied for encrypting and sharing the secret key between the sender and receiver when Advanced Encryption Standard is used for encryption/decryption of data. A highly efficient architectures for asymmetric key encryption is applied with symmetric key encryption for encrypting the data transmitted between the devices present in the perceptual layers in the IoT. Due to security issues NIST selected SHA-3 Keccak-f[1600] algorithm. An authentication process based on ECC is applied to perceptual layer involving initialization and authentication phase apart from encryption and signature generation. Sender combines the encrypted data and key with signature together before transmitting to the receiver. The receiver verifies the signature and decrypts the key and obtains original information. Hence it is very difficult for the man in middle to access the information exchanged between the Perceptual Layer devices. Application/Improvements: This generally doesn’t require an innovative technique but an approach to develop the method implemented successfully in the perceptual layer of Internet of Things. The key is encrypted and decrypted using a novel ECC algorithm with improved ECDSA.

The majority of imaging techniques use symmetric and asymmetric cryptography algorithms to encrypt digital media. Most of the research works contributed in the literature focus primarily on the Advanced Encryption Standard (AES) algorithm for encryption and decryption. This paper propose an analysis for performing image encryption and decryption by hybridization of Elliptic Curve Cryptography (ECC) with Hill Cipher (HC), ECC with Advanced Encryption Standard (AES) and ElGamal with Double Playfair Cipher (DPC). This analysis is based on the following parameters: (i) Encryption and decryption time, (ii) entropy of encrypted image, (iii) loss in intensity of the decrypted image, (iv) Peak Signal to Noise Ratio (PSNR), (v) Number of Pixels Change Rate (NPCR), and (vi) Unified Average Changing Intensity (UACI). The hybrid process involves the speed and ease of implementation from symmetric algorithms, as well as improved security from asymmetric algorithms. ECC and ElGamal cryptosystems provide asymmetric key cryptography, while HC, AES, and DPC are symmetric key algorithms. ECC with AES are perfect for remote or private communications with smaller image sizes based on the amount of time needed for encryption and decryption. The metric measurement with test cases finds that ECC and HC have a good overall solution for image encryption.

The Internet of Things makes it possible to exchange information between people, things and things, people and things, and makes information security more and more important. However, there are few standards in the field of information security of the Internet of Things. Therefore, based on the characteristics and application requirements of the Internet of Things environment, this paper optimizes the Advanced Encryption Standard (AES) and builds the data encryption standard DESI(Data Encryption Standard in IoT) in the Internet of Things environment.. The analysis shows that DESI has better security and is therefore suitable for encrypting data in the IoT environment. Keywords: Internet of Things, encryption standard, AES, DESI, information security.

The rapid growth of fog-supported Internet of Things (IoT) networks presents significant challenges in securing efficient and scalable communication between heterogeneous devices. The age-old authentication and key management schemes like RSA and hash are prone to emergent attacks and are characterized by high computational cost. To address these challenges, the paper will present a lightweight Elliptic Curve Cryptography (ECC)-based mutual authentication and key management system, combined with the Advanced Encryption Standard (AES), to ensure the safety of data transmission. The suggested model uses a Gateway Node (GWN) as a semi-trusted intermediary to enhance the process of registration of devices, verifying their identities, and determining a session key between the IoT devices and fog nodes. Formal security analysis and mathematical formulations prove that the scheme has mutual authentication, freshness of keys, forward secrecy, and resistance to replay and impersonation attacks. Performance analysis based on NS-3 (v3.40) reveals that the proposed framework has 48% reduced latency and 35% lower cost of computation than the traditional RSA-based models, while also having good security properties. The findings affirm that the proposed ECC-AES model provides an efficient trade-off between security and computation efficiency, and can be used in real-time and resource-constrained fog-IoT systems.

The Internet of Things (IoT)services and application were increasing during the last years in several life fields causes need to provide a secure identifier for protecting sensing data passing between IoT sensors/devices and embedded-subsystem connected by networks. This paper was proposed an algorithm for helping in IoT communication security can used in different IOT entities used in unofficial industrial machine to machine (M2M) communications, smart energy-grids, home or buildings and other computing devices. 
 This paper proposed a secure system using new proposed 4D chaotic system combined with the modified lightweight Advanced Encryption Standard (AES). The proposed 4-dimension (4D) chaos system Lyapunov was tested and pass for many initial periods and get a super chaos system (4 positive Lyapunov). Generated chaos keys (used JORN) were used in the lightweight AES and the Secure Hash Algorithm version 3 (SHA3-256). The Lightweight AES was design in case to reduce CPU computation cycles and complexity of AES. Results show that computation time for proposed system decreased (has 145% speedup more). The output of modified lightweight AES encryption System has the good statistical tests near to original AES that can avoid many attacks.

Asymmetric cryptography is inherently slow because of its associated complex computing, while symmetric cryptography is speedy. However, the latter is suffering from a serious gap which is secure key exchange. To deal with this problem, we suggest an efficient hybrid AES-ECC cryptosystem combining the benefits of the symmetric advanced encryption standard (AES) to speed-up data encryption and the asymmetric elliptic curve cryptography (ECC) to secure the symmetric key session interchange. The proposed hybrid AES-ECC cryptosystem uses a co-design approach and relies on AES-ECC optimisations. We fundamentally mix the matrix multiplication of the AES MixColumns with the S-box allowing for very fast software implementation (on NIOS-II processor). Then, we propose an optimised ECC hardware architecture based on Lopez-Dahab scalar multiplication (on Cyclone IV.E). The implementation results of the proposed cryptosystem afford an interesting trade-off between area, speed, and power and can be used for information and computer security.

The Advanced Encryption Standard (AES) specifies an algorithm for a symmetric-key cryptosystem that has already found wide adoption in security applications. A substantial part of the AES algorithm are the MixColumns and InvMixColumns operations, which involve multiplications in the binary extension field GF(28). Recently proposed instruction set extensions for elliptic curve cryptography (ECC) include custom instructions for the multiplication of binary polynomials. In the present paper we analyze how well these custom instructions are suited to accelerate a software implementation of the AES. We used the SPARC V8-compatible LEON-2 processor with ECC extensions for verification and to obtain realistic timing results. Taking the fastest implementation for 32-bit processors as reference, we were able to achieve speedups of up to 25% for encryption and nearly 20% for decryption.

A lightweight key management scheme for key-escrow-free ECC-based CP-ABE for IoT healthcare systems

The internet of things (IoT) is a rapidly developing area that consists of a globally linked network architecture based on the Internet. The internet of healthcare things (IoHT) is a subset of IoT that comprises of smart healthcare devices that are critical in monitoring, processing, storing, and transferring sensitive data. It is confronted with new issues in terms of data privacy protection. To safeguard healthcare information, this work proposes hybrid lightweight ciphers (PRESENT and TEA) that leverage elliptic curve cryptography (ECC) in the key generation phase. The proposed system evaluated using the main network evaluation parameters as throughput in Kbps, delay in ms, packet loss rate (%). The proposed approach provides secure data transmission of IoT devices based on the used lightweight security algorithms, in addition it provides conserving network performance, improving channel resource usage, network latency is increased due to the security level added by PRESENT and TEA with ECC, and decrease number of loss packets compared without security case study.

The data everywhere was being transferred for each second using domain of Internet of Things (IoT). To secure data using the Internet of Things (IoT) is a tedious task. When the data is being transferred using Internet of Things (IoT), more security can be provided using elliptic curve cryptography. Asymmetric cryptography is used by most of the applications for providing secure communication between two parties (Weber in Comput Law Secur Rev 26:23–30, 2010). The purpose of this type of cryptography is the requirement of huge amount of computation and storage. This is where the use of elliptic curve cryptography comes into picture, as it needs less storage and can be used in small computational devices. ECC needs smaller key sizes and provides stronger encryption compared to various asymmetric cryptographic algorithms like RSA. The usage of power required is low but the performance of the devices using ECC is high for different types of devices like IoT, sensors, etc. This paper shows how ECC must be implemented strongly for providing communication securely to encode the data on an elliptic curve, in IoT devices. The encryption of the data must be done securely while mapping the data on to the elliptic curve. This paper shows how the data is encrypted and mapped on to the curve securely. The work shows how the data can be encrypted with ECC and how it can be visible to only authorized users. In the field of cryptography, ECC is a method for asymmetric cryptography which is dependent on the algebraic structure of an elliptic curve on the finite field.

Encryption and decryption of data with very low latency and high energy efficiency is desirable in almost every application that deals with sensitive data. The advanced encryption standard (AES) is a widely adopted algorithm in symmetric key cryptography with numerous efficient implementations. Nonetheless, in scenarios involving extensive data processing, the primary limitations on performance and efficiency arise from data movement between memory and the processor, rather than data processing itself. In this article, we present a novel in-memory computing (IMC) approach for AES encryption and key-expansion, and experimentally validate it on an IMC prototype chip based on phase-change memory (PCM) technology. We leverage operators stored in PCM crossbar arrays to achieve the flexibility to tune performance at runtime based on the amount of free storage available in the memory system. In addition, we introduce a method for parallel in-memory polynomial modular multiplication and evaluate the potential of intrinsic stochastic properties of PCM devices for random key generation. We show how to further improve efficiency with minimal additional auxiliary circuitry. To evaluate the performance within a custom-built large-scale in-memory AES system, we design and implement a cycle-accurate simulator that integrates parameters from Spice simulations for detailed latency and energy consumption analysis of the AES algorithm. Our evaluations indicate that our IMC-based AES approach outperforms state-of-the-art methods, achieving speed factor improvements of up to 19.7 at equivalent energy efficiency.This article is part of the theme issue 'Emerging technologies for future secure computing platforms'.

Despite being a hopeful technique that make our life very easy we cannot unware to the fact of IoT is safe or unsafe over the cyber world threats and attacks. Nowadays with the growth of architecture of Internet of Things (IoT) everything can be connected to internet for the better communication with one another so that they need to be secure from threat and attack and also need to works on their aspect of his sensitive information. The new generation of cyber world in which there are many sensor devices connect over the internet which have to daily produce more sensitive information. For this sensitive information we implement a authentication protocol in which we setup RFID (Radio Frequency and Identification) tags at the physical layer. Elliptic curve cryptography (ECC) is a most efficient and effective public key cryptography (PKC) protocol to be responsible for privacy and security with less number of computation. Considering lightweight architecture of IoT sensor devices. We implement an authentication protocol based on ECC between Server using IoT devices RFID Tag and reader. We also present security investigation to verify the accuracy of our planned method.

The demand of higher spectrum bandwidth can almost have mitigated now-a-days by the use of Internet of Things (IoT) based 5G communication networks. IoT is getting massive attention because of the complexity features of IoT devices. Its less power constraints property have decreased the utilization of traditional cryptographic methods though it has used the Trusted platform module (TPM) for authentication and Trusted network connect (TNC) standards to monitor the malicious software or firmware. This paper, proposed an algorithm based on Physical layer key generation (PLKG) and Physical layer encryption (PLE) as a protecting measures. Also this paper investigates the advanced encryption standard (AES) and make a comparative study to prove it's much secured, effective and fast encryption features among the rest of the available methods and concludes that AES produces a better solution.

The Internet of Things (IoT) as an important technology consists of a heterogeneous and huge number of devices that generates an enormous amount of data in various applications. However, generating and transmitting huge amount of data in the IoT makes it crucial to implement a secure and safe data transmission scheme. Cryptography methods can secure the confidentiality, data integrity, access control, and authentication. Due to constrained resources in IoT devices, providing classical cryptography schemes isn’t efficient for IoT applications, so a lightweight cryptography scheme is one of the most important solutions to overcome security challenges in IoT. In this paper, a new security scheme called ECCCSASHA256 based on Elliptic Curve Cryptography (ECC) and Secure Hash Algorithm (SHA-256) using Crow Search Algorithm (CSA) has been proposed for secure data transmission in IoT devices. The ECCCSASHA256 model uses the CSA for generating a private key to encode the elliptic curve. Furthermore, the proposed scheme uses SHA-256 model for hashing the incoming encoded data using ECC. The simulation results indicate that the average throughput of the proposed model was about 8.22% and 8.97% higher in encryption and 8.72% and 9.81% higher in decryption compared to 3DES&ECC&SHA-256 and RC4&ECC&SHA-256, respectively.