Abstract:The accelerated development of quantum computers poses a direct threat to all current standards of public key encryption, for example, the Shor algorithm exploits the superposition state of the qubits to solve the problem of integer factorization in polynomial time, rendering all systems whose security relies on this hard mathematical problem not secure. Public key encryption algorithms are used in a multitude of applications that form the core of the digital world (e.g., emails, banking, digital currency, defense, and communication.). The prospects of a quantum machine that can break such systems are too risky to ignore, even if such a computer still needs thirty years to build. This is because adversaries can be storing data now to decrypt later aka. SNLD attack, moreover, some systems have an operational lifetime that spans more than thirty years (e.g., defense, aviation industry). Consequently, the work has already started to develop quantum-attack resilient security schemes. The number of Internet of Things (IoT) devices is expected to be around 29 billion in 2030, forming a significant portion of all computing machines. Most of these will be implemented as embedded systems with limited resources. Consequently, assessing the energy and computational overheads of the quantum-attack resilient security schemes is vital. This work presents a comprehensive study that evaluates the energy and performance costs of the proposed solutions in resource-constrained devices, in comparison with the existing schemes. This was achieved through the development of a testbed that emulates a client-server configuration, wherein both devices perform mutual authentication and then agree on a shared key using the TLS protocol. A Raspberry Pi 3b+ was used as a server, and a client in the first set of experiments. Raspberry Pi Pico W was the client in the second group of tests. The results of the evaluation have shown that Kyber1-Dilithuim-2 is the most resource-efficient solution, it outperforms all other PQC algorithms, including the current scheme that uses elliptic curve cryptography. Our study has also shown the digital signature scheme Sphinx+ is associated with significant latency and energy costs so may not be suitable for IoT-type devices.

An Experimental Study of Cryptography Capability using Chained Key Exchange Scheme for Embedded Devices

Public-Key Based Authentication Architecture for IoT Devices Using PUF

Secure End-to-End Communications with Lightweight Cryptographic Algorithm

A Lightweight and Efficient Secure Hybrid RSA (SHRSA) Messaging Scheme with Four-Layered Authentication Stack

EBAKE-SE: A Novel ECC Based Authenticated Key Exchange between Industrial IoT Devices using Secure Element

A secured TPM integration scheme towards smart embedded system based collaboration network

Efficient ECC-based authentication scheme for fog-based IoT environment

Securing IoT-Based RFID Systems: A Robust Authentication Protocol Using Symmetric Cryptography

A Lightweight System-On-Chip Based Cryptographic Core for Low-Cost Devices

A lightweight remote user authentication scheme for IoT communication using elliptic curve cryptography

Remarks on the Cryptanalysis of Common Prime RSA for IoT Constrained Low Power Devices.

Evaluation of Performance, Energy, and Computation Costs of Quantum-Attack Resilient Encryption Algorithms for Embedded Devices

An hybrid security framework using internet of things for healthcare system

A Lightweight Key Distribution Scheme for Secure D2D Communication

A Cost-Efficient Implementation Of Public-Key Cryptography On Embedded Systems

A Heterogeneous Signcryption Scheme with Cryptographic Reverse Firewalls for IoT and Its Application

Novel key-integration to safeguard counting-based secret-sharing from possibilities of cyberattack breaches

An Enhanced Mutual Authentication Scheme Based On Ecdh For Iot Devices Using Esp8266

Enhancing the security in RSA and elliptic curve cryptography based on addition chain using simplified Swarm Optimization and Particle Swarm Optimization for mobile devices

An efficient secure channel establishment through lightweight key distribution in e-health communication systems

Lightweight integrated cryptosystem based on reconfigurable hardware for IoT security