IoT Edge Device Security: An Efficient Lightweight Authenticated Encryption Scheme Based on LED and PHOTON
Source abstract
Abstract
IoT devices and embedded systems are deployed in critical environments, emphasizing attributes like power efficiency and computational capabilities. However, these constraints stress the paramount importance of device security, stimulating the exploration of lightweight cryptographic mechanisms. This study introduces a lightweight architecture for authenticated encryption tailored to these requirements. The architecture combines the lightweight encryption of the LED block cipher with the authentication of the PHOTON hash function. Leveraging shared internal operations, the integration of these bases optimizes area–performance tradeoffs, resulting in reduced power consumption and a reduced logic footprint. The architecture is synthesized and simulated using Verilog HDL, Quartus II, and ModelSim, and implemented on Cyclone FPGA devices. The results demonstrate a substantial 14% reduction in the logic area and up to a 46.04% decrease in power consumption in contrast to the individual designs of LED and PHOTON. This work highlights the potential for using efficient cryptographic solutions in resource-constrained environments.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Cryptographic Implementations and Security · Chaos-based Image/Signal Encryption · Physical Unclonable Functions (PUFs) and Hardware Security
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of Electrical and Electronic Engineering, Universiti Teknologi PETRONAS, Seri Iskandar 32610, Malaysia
Department of Information Systems-Girls Section, King Khalid University, Mahayil 62529, Saudi Arabia
VNU Information Technology Institute, Vietnam National University, Hanoi 100000, Vietnam
Department of Mathematics—Girls Section, King Khalid University, Mahayil 62529, Saudi Arabia
Funding
Deanship of Scientific Research at King Khalid University
References (76)
Show source-provided references
1. That ‘internet of things’ thing
2. Stuxnet: Dissecting a cyberwarfare weapon10.1109/MSP.2011.67 ↗
3. A Survey on the Cryptographic Encryption Algorithms
4. Maurer, U. (1996). European Symposium on Research in Computer Security, Springer.
5. Compact Keccak hardware architecture for data integrity and authentication on FPGAs10.1080/19393555.2012.660678 ↗
6. Tsantikidou, K., and Sklavos, N. (2022). Hardware Limitations of Lightweight Cryptographic Designs for IoT in Healthcare. Cryptography, 6.10.3390/cryptography6030045 ↗
7. Poschmann, A.Y. (2009). Lightweight Cryptography: Cryptographic Engineering for a Pervasive World. [Ph.D. Thesis, Ruhr-University Bochum].
8. On the hardware implementation cost of crypto-processors architectures10.1080/19393551003649016 ↗
9. Leander, G., Paar, C., Poschmann, A., and Schramm, K. (2007). International Workshop on Fast Software Encryption, Springer.
10. Lightweight authenticated encryption for embedded on-chip systems10.1080/19393555.2016.1209259 ↗
11. Authenticated encryption schemes: A systematic review10.1109/ACCESS.2022.3147201 ↗
12. Authenticated encryption: Relations among notions and analysis of the generic composition paradigm10.1007/s00145-008-9026-x ↗
13. Degabriele, J.P., and Paterson, K.G. (2010, January 4–8). On the (in) security of IPsec in MAC-then-encrypt configurations. Proceedings of the 17th ACM Conference on Computer and Communications Security, Chicago, IL, USA.10.1145/1866307.1866363 ↗
14. Systematic Literature Review: Trend Analysis on the Design of Lightweight Block Cipher
15. Rajalakshmi, S., and Duraisamy, P. (2023, January 3–5). A Review on Lightweight Cryptographic algorithms in Internet of Things. Proceedings of the 2023 5th International Conference on Inventive Research in Computing Applications (ICIRCA), Coimbatore, India.
16. A Comprehensive Review of Hashing Algorithm Optimization for IoT Devices
17. Seok, B., Park, J., and Park, J.H. (2019). A lightweight hash-based blockchain architecture for industrial IoT. Appl. Sci., 9.10.3390/app9183740 ↗
18. Madushan, H., Salam, I., and Alawatugoda, J. (2022). A review of the nist lightweight cryptography finalists and their fault analyses. Electronics, 11.10.3390/electronics11244199 ↗
19. Nalla Anandakumar, N., Peyrin, T., and Poschmann, A. (2014). International Conference on Cryptology in India, Springer.
20. Reliable hardware architectures for cryptographic block ciphers LED and HIGHT10.1109/TCAD.2017.2661811 ↗
21. Reusable data-path architecture for encryption-then-authentication on FPGA
22. Reusable Data-Path Architectures for EtM and MtE on FPGA
23. FPGA Implementation of DLP-PHOTON Hash Function10.14257/ijfgcn.2017.10.12.07 ↗
24. Al-Shatari, M., Hussin, F.A., Abd Aziz, A., Witjaksono, G., Rohmad, M.S., and Tran, X.-T. (2019, January 15–16). An efficient implementation of LED block cipher on FPGA. Proceedings of the 2019 First International Conference of Intelligent Computing and Engineering (ICOICE), Hadhramout, Yemen.10.1109/ICOICE48418.2019.9035193 ↗
25. Fast lightweight encryption device based on LFSR technique for increasing the speed of LED performance10.1063/5.0128450 ↗
26. Nalla Anandakumar, N. (2015, January 11–12). SCA Resistance Analysis on FPGA Implementations of Sponge Based MAC-PHOTON. Proceedings of the International Conference for Information Technology and Communications, Bucharest, Romania.10.1007/978-3-319-27179-8_6 ↗
27. FPGA-based lightweight hardware architecture of the PHOTON hash function for IoT edge devices10.1109/ACCESS.2020.3038219 ↗
28. Lightweight Cryptographic Hash Functions: Design Trends, Comparative Study, and Future Directions10.1109/ACCESS.2022.3195572 ↗
29. Efficient implementation of lightweight hash functions on gpu and quantum computers for iot applications10.1109/ACCESS.2022.3179970 ↗
30. Heera, W., Bhagyashree, K., Patil, R., Iyer, N., and Hiremath, S. (2023). Advances in Signal Processing, Embedded Systems and IoT, Proceedings of the Seventh ICMEET-2022, Andhra Pradesh, India, 22–23 July 2022, Springer.
31. Al-Shatari, M., Hussin, F.A., Abd Aziz, A., Rohmad, M.S., and Tran, X.-T. (2022, January 19–22). Composite Lightweight Authenticated Encryption Based on LED Block Cipher and PHOTON Hash Function for IoT Devices. Proceedings of the IEEE 15th International Symposium on Embedded Multicore/Many-Core Systems-on-Chip (MCSoC), Penang, Malaysia.10.1109/MCSoC57363.2022.00030 ↗
32. Bellare, M., and Hoang, V.T. (June, January 30). Efficient schemes for committing authenticated encryption. Proceedings of the Advances in Cryptology–EUROCRYPT 2022: 41st Annual International Conference on the Theory and Applications of Cryptographic Techniques, Trondheim, Norway.10.1007/978-3-031-07085-3_29 ↗
33. An Ultra-Fast Authenticated Encryption Scheme with Associated Data Using AES-OTR10.1142/S0218126622501675 ↗
34. Alasmary, H., and Tanveer, M. (2023). ESCI-AKA: Enabling Secure Communication in an IoT-Enabled Smart Home Environment Using Authenticated Key Agreement Framework. Mathematics, 11.10.3390/math11163450 ↗
35. CMAF-IIoT: Chaotic map-based authentication framework for Industrial Internet of Things10.1016/j.iot.2023.100902 ↗
36. Bogdanov, A., Knudsen, L.R., Leander, G., Paar, C., Poschmann, A., Robshaw, M.J., Seurin, Y., and Vikkelsoe, C. (2007). International Workshop on Cryptographic Hardware and Embedded Systems, Springer.
37. Bogdanov, A., Knežević, M., Leander, G., Toz, D., Varıcı, K., and Verbauwhede, I. (2011). International Workshop on Cryptographic Hardware and Embedded Systems, Springer.
38. Guo, J., Peyrin, T., Poschmann, A., and Robshaw, M. (October, January 28). The LED block cipher. Proceedings of the 13th International Conference on Cryptographic Hardware and Embedded Systems, Nara, Japan.
39. Guo, J., Peyrin, T., and Poschmann, A. (2011). Annual Cryptology Conference, Springer.
40. The CiliPadi family of lightweight authenticated encryption, v1. 2
41. Energy efficient and side-channel secure cryptographic hardware for IoT-edge nodes10.1109/JIOT.2018.2861324 ↗
42. Chakraborti, A., Datta, N., Nandi, M., and Yasuda, K. (2018). Beetle family of lightweight and secure authenticated encryption ciphers. Cryptol. Eprint Arch.10.46586/tches.v2018.i2.218-241 ↗
43. Dobraunig, C., Eichlseder, M., Mendel, F., and Schläffer, M. (2023, August 30). Ascon v1. 2. Submission to the CAESAR Competition. Available online: https://competitions.cr.yp.to/round3/asconv12.pdf.
44. Iwata, T., Minematsu, K., Guo, J., and Morioka, S. (2014). International Workshop on Fast Software Encryption, Springer.
45. Carlet, C., Anwar Hasan, M., and Saraswat, V. (2016). Proceedings of Security, Privacy, and Applied Cryptography Engineering, Springer.10.1007/978-3-319-49445-6 ↗
46. Andreeva, E., Bilgin, B., Bogdanov, A., Luykx, A., Mendel, F., Mennink, B., Mouha, N., Wang, Q., and Yasuda, K. (2023, August 30). PRIMATEs v1. Submission to the CAESAR Competition. Available online: https://competitions.cr.yp.to/round2/primatesv102.pdf.
47. Lukas, K., and Daemen, J. (2023, August 30). Cube Attack on Primates. Available online: https://acad.ro/sectii2002/proceedings/doc2017-4s/01artSupl.pdf.
48. Wu, H., and Huang, T. (2014). JAMBU lightweight authenticated encryption mode and AES-JAMBU. CAESAR Compet. Propos.
49. Peyrin, T., Sim, S.M., Wang, L., and Zhang, G. (2015, January 8–11). Cryptanalysis of JAMBU. Proceedings of the Fast Software Encryption: 22nd International Workshop, FSE 2015, Istanbul, Turkey.10.1007/978-3-662-48116-5_13 ↗
50. Nikolic, I. (2023, August 30). Tiaoxin-346. Submission to the CAESAR Competition. Available online: https://competitions.cr.yp.to/round2/tiaoxinv2.pdf.
51. Salam, I., Mahri, H.Q.A., Simpson, L., Bartlett, H., Dawson, E., and Wong, K.K.-H. (February, January 29). Fault attacks on Tiaoxin-346. Proceedings of the Australasian Computer Science Week Multiconference, Brisbane, QLD, Australia.
52. Bertoni, G., Daemen, J., Peeters, M., Van Assche, G., and Van Keer, R. (2023, August 30). CAESAR Submission: Ketje v2. Candidate CAESAR Compet. Available online: https://competitions.cr.yp.to/round3/ketjev2.pdf.
53. Practical key-recovery attacks on round-reduced Ketje Jr, Xoodoo-AE and Xoodyak10.1093/comjnl/bxz152 ↗
54. Dobraunig, C., Mangard, S., Mendel, F., and Primas, R. (2018, January 15–17). Fault attacks on nonce-based authenticated encryption: Application to keyak and ketje. Proceedings of the Selected Areas in Cryptography–SAC 2018: 25th International Conference, Calgary, AB, Canada.10.1007/978-3-030-10970-7_12 ↗
55. Cube-like attack on round-reduced initialization of Ketje Sr10.46586/tosc.v2017.i1.259-280 ↗
56. Cube-attack-like cryptanalysis of round-reduced Keccak using MILP10.46586/tosc.v2018.i3.182-214 ↗
57. State-recovery attacks on modified Ketje Jr10.46586/tosc.v2018.i1.29-56 ↗
58. Wu, H., and Huang, T. (2023, August 30). The authenticated cipher MORUS (v2). CAESAR Submission. Available online: https://competitions.cr.yp.to/round3/morusv2.pdf.
59. A new cube attack on MORUS by using division property10.1109/TC.2019.2929137 ↗
60. Real-time state recovery attack against MORUS in nonce-misuse setting10.1007/s11432-017-9457-x ↗
61. Jean, J., Nikolić, I., and Peyrin, T. (2015). Joltik v1. 3. CAESAR Round, 2, Available online: https://competitions.cr.yp.to/round2/joltikv13.pdf.
62. Key recovery attacks on reduced-round Joltik-BC in the single-key setting10.1016/j.ipl.2019.105834 ↗
63. Milp-aided related-tweak/key impossible differential attack and its applications to qarma, joltik-bc10.1109/ACCESS.2019.2946638 ↗
64. Minematsu, K., Guo, J., and Kobayashi, E. (2023, August 30). SILC: SImple Lightweight CFB. Available online: https://competitions.cr.yp.to/round2/silcv2.pdf.
65. Two efficient fault-based attacks on CLOC and SILC10.1007/s41635-017-0022-1 ↗
66. Roy, D.B., Chakraborti, A., Chang, D., Kumar, S.V.D., Mukhopadhyay, D., and Nandi, M. (2016, January 14–18). Fault Based Almost Universal Forgeries on CLOC and SILC. Proceedings of the Security, Privacy, and Applied Cryptography Engineering: 6th International Conference, SPACE 2016, Hyderabad, India.10.1007/978-3-319-49445-6_4 ↗
67. Bertoni, G., Daemen, J., Peeters, M., Van Assche, G., and Van Keer, R. (2023, August 30). Keyak v2. CAESAR Submission. Available online: https://competitions.cr.yp.to/round3/keyakv22.pdf.
68. Wu, H. (2023, August 30). Acorn v3. Submission to CAESAR Competition. Available online: https://www3.ntu.edu.sg/home/wuhj/research/caesar/caesar.html.
69. Fault attack on ACORN v310.1093/comjnl/bxy044 ↗
70. Ascon v1. 2: Lightweight authenticated encryption and hashing10.1007/s00145-021-09398-9 ↗
71. Li, H., He, L., Chen, S., Guo, J., and Qiu, W. (2023). Automatic Preimage Attack Framework on\ascon Using a Linearize-and-Guess Approach. Cryptol. Eprint Arch.10.46586/tosc.v2023.i3.74-100 ↗
72. Low Trace-Count Template Attacks on 32-bit Implementations of ASCON AEAD10.46586/tches.v2023.i4.344-366 ↗
73. Luo, S., Wu, W., Li, Y., Zhang, R., and Liu, Z. (2022, January 24–26). An Efficient Soft Analytical Side-Channel Attack on Ascon. Proceedings of the International Conference on Wireless Algorithms, Systems, and Applications, Dalian, China.10.1007/978-3-031-19208-1_32 ↗
74. Practical cube attack against nonce-misused Ascon10.46586/tosc.v2022.i4.120-144 ↗
75. Efficient Persistent Fault Analysis with Small Number of Chosen Plaintexts10.46586/tches.v2023.i2.519-542 ↗
76. S-Box Attack Using FPGA Reverse Engineering for Lightweight Cryptography10.1109/JIOT.2022.3195733 ↗