A Novel Secure End-to-End IoT Communication Scheme Using Lightweight Cryptography Based on Block Cipher

Abstract

Personal data security is a cybersecurity trend that has captured the world’s attention. Governments, practitioners and academics are jointly building personal data security in various communication systems, including IoT. The protocol that is widely used in IoT implementation is MQTT. By default, MQTT does not provide data security features in the form of data encryption. Therefore, this research was carried out on the design of Secure End-to-End Encryption MQTT with Block Cipher-Based Lightweight Cryptography. The protocol is designed by utilizing the Galantucci secret sharing scheme and a lightweight cryptographic algorithm based on a block cipher. The algorithms used include AES-128 GCM mode, GIFT-COFB, Romulus N1, and Tiny JAMBU. We tested the Secure End-to-End for MQTT protocol on the ARM M4 and ESP8266 processors. Our testing results on NodeMCU board, Tiny JAMBU have an average encryption time of 313 and an average decryption time of 327 . AES-128 GCM mode has an average encryption time of 572 and an average decryption time of 584 . GIFT-COFB has an average encryption time of 1094 and an average decryption time of 1110 . Meanwhile, Romulus N1 has an average encryption time of 2157 and an average decryption time of 2180 . On STM32L4 discovery, Tiny JAMBU had average encryption of 82 and an average decryption time of 85 . AES-128 GCM mode has an average encryption time of 163 and an average decryption time of 164 . GIFT-COFB has an average encryption time of 164 and an average decryption time of 165 . Meanwhile, Romulus N1 has an average encryption time of 605 and an average decryption time of 607 . Our experiment shows that the fastest performance is produced by Tiny JAMBU, followed by AES-128 Mode GCM, GIFT-COFB and Romulus N1.

MARAS: Mutual Authentication and Role-Based Authorization Scheme for Lightweight Internet of Things Applications

“…Unlike this scheme, MARAS provides the right to access the topic and the client’s permission to publish or subscribe via OAuth 2.0 protocol. In relation to that, [ 37 ] compared the runtime performances of lightweight encryption algorithms in terms of encryption and decryption operations on MQTT payloads. The study evaluates AES-128 Galois/counter mode (GCM), GIFT-combined feedback (COFB), Romulus N1, and Tiny JAMBU.…”

“…As reflected in Table 9, no previous attempt could collectively provide all the security features that MARAS provides. [17]       antle et al [21]       h et al [28]       dhyay et al [29]       ntasukrat et al [30]       fir et al [31]       n et al [32]       arajan et al [33]       ammari [34]       y et al [35]       pa et al [36]       arno et al [37]       yasri et al [38]       l et al [39]       ib et al [40]       sikeas et al [41]       wiyuga et al [42]       hir et al [43]       dana et al [44]       bretta et al [45]       et al [47]       darrajan et al [48]       in et al [49]       juan et al [50]       oretti et al [51]       y et al [52] …”

E-MQTT: End-to-End Synchronous and Asynchronous Communication Mechanisms in MQTT Protocol

“…Existing research concerning end-to-end support within MQTT is predominantly focused on security investigations [41][42][43][44][45][46], with some research works [47][48][49][50] also touching on end-to-end services. Park et al [42] introduced a security architecture and protocols designed to establish MQTT security within wireless sensor networks.…”

“…SEEMQTT [41] is a framework that ensures end-to-end data confidentiality, integrity, and authorization in MQTT-based communication for mobile IoT systems. Winarno et al [44] presented the design of a secure end-to-end encryption MQTT protocol using lightweight cryptographic algorithms and Galantucci secret sharing. Chien et al [45] discussed the importance of over-the-air (OTA) updates for secure IoT systems and highlighted the widespread use of MQTT as an IoT communication protocol.…”

“…The versatility of MQTT is evident through its extensive range of applications, which encompass various domains [2][3][4][5][6][7][8][9][10][11][12][13], including (but not limited to) the Internet of Things (IoT), home and industrial automation, telemetry and remote environment monitoring, energy management, smart agriculture, healthcare, transportation, and social networking systems. As described in Section 2, previous research efforts have explored various aspects of MQTT, including research to enhance MQTT functionalities [2,4,[14][15][16][17][18][19][20][21][22], comparative analyses with other protocols [23][24][25][26][27][28][29][30], support for synchronous communication [31][32][33][34][35][36][37][38][39][40], and the facilitation of end-to-end services for security or quality of service (QoS) [41][42][43][44]…”