Exchange Protocol Research Articles

A Publicly Verifiable Optimistic Fair Exchange Protocol Using Decentralized CP-ABE

Abstract Fair exchange is a challenging problem for two mutually distrusting players. It is widely known that fair exchange is impossible without a trusted third party (TTP). However, relying on a single TTP can cause a single-point failure. An intuitive idea is to adopt multiple TTPs to distribute trust. This paper constructs a two-party optimistic fair exchange (OFE) protocol using decentralized ciphertext-policy attribute-based encryption (CP-ABE), achieving decentralized TTPs. This is achievable because decentralized CP-ABE ciphertext supports a nested access control policy. A nested access control policy fits perfectly in a fair exchange protocol which contains multiple roles (i.e. players and TTPs). Further, we apply non-interactive zero knowledge proofs to prove the well-formedness of ciphertexts, so as to enforce players to follow the protocol specification honestly. Consequently, we construct an OFE protocol in which each player’s operations are publicly verifiable without revealing secret information. Also, we obtain decentralized TTPs with optimism (i.e. the TTPs are involved only when arbitration is required), autonomy (i.e. the TTPs do not need to interact with each other), statelessness (i.e. the TTPs do not need to store data for the exchange protocol) and verifiability (i.e. the TTPs are publicly verifiable). Compared with previous work, our protocol assumes only a public communication channel and each party’s operations are publicly verifiable. Besides, it achieves a favorable $O(n)$ verification complexity in the normal case, where $n$ is the number of TTPs. Finally, we present a proof-of-concept implementation to demonstrate the feasibility.

Threshold Cryptography-Based Secure Vehicle-to-Everything (V2X) Communication in 5G-Enabled Intelligent Transportation Systems

Implementing 5G-enabled Vehicle-to-Everything (V2X) intelligent transportation systems presents a promising opportunity to enhance road safety and traffic flow while facilitating the integration of artificial intelligence (AI) based solutions. Yet, security and privacy concerns pose significant challenges that must be addressed. Therefore, researchers have focused on improving the security and integrity of vehicle data sharing, with a particular emphasis on V2X application layer security and privacy requirements. This is crucial given that V2X networks can consist of vehicles manufactured by different companies and registered in various jurisdictions, which may only be within communication range for a few seconds. Thus, it is necessary to establish a trusting relationship between vehicles quickly. The article proposes a threshold cryptography-based key exchange protocol that meets the key requirements for V2X data sharing and privacy, including the rapid establishment of trust, the maintenance of vehicle anonymity, and the provision of secure messages. To evaluate the feasibility and performance of the proposed protocol, a tailored testbed that leverages the NS-3 network simulator, a commercial 5G network, and public cloud infrastructure is used. Overall, the proposed protocol provides a potential solution for addressing security and privacy concerns in V2X networks, which is essential for successfully implementing and adopting this technology.

Sequential repeated tibial tubercle osteotomy in a two-stage exchange strategy: a superior approach to treating a chronically infected knee arthroplasty?

PurposeSurgical approach can impact the reliability of the debridement after a chronic total knee periprosthetic joint infection (PJI), a factor of utmost importance to eradicate the infection. The most adequate knee surgical approach in cases of PJI is a matter of debate. The purpose of this study was to determine the influence of performing a tibial tubercle osteotomy (TTO) in a two-stage exchange protocol for knee PJI treatment.MethodsRetrospective cohort study examining patients managed with two-stage arthroplasty due to chronic knee PJI (2010–2019). Performance and timing of the TTO were collected. Primary end-point was infection control with a minimum FU of 12 months and according to internationally accepted criteria. Correlation between TTO timing and reinfection rate was reviewed.ResultsFifty-two cases were finally included. Overall success (average follow-up: 46.2 months) was 90.4%. Treatment success was significantly higher among cases addressed using TTO during the second stage (97.1% vs. 76.5%, pvalue 0.03). Only 4.8% of the patients relapsed after performing a sequential repeated TTO, that is, during both first and second stages, compared to 23.1% cases in which TTO was not done (p value 0.28). No complications were observed among patients in the TTO group with a significant decrease in soft tissue necrosis (p: 0.052).ConclusionSequential repeated tibial tubercle osteotomy during a two-stage strategy is a reasonable option and offers high rates of infection control in complex cases of knee PJI with a low rate of complications.

Private and Mutual Authentication Protocols for Internet of Things

The Internet of Things (IoT) consists of a range of devices that communicate with other devices that are surrounding them. Secure communications between IoT devices have been an essential requirement. However, most existing authentication protocols fail to provide privacy protection for devices such that sensitive information including device owner’s identity and device type can be leaked. In this paper, based on attribute-based encryption (ABE), we propose two private and mutual authentication protocols to protect the privacy of IoT devices. The first protocol is a three-message key exchange protocol, following the public-key encryption mode of the Internet Key Exchange (IKE). The second protocol is a one-round key exchange protocol, thereby providing simplicity and efficiency of messages communicated between the participants. Both of our protocols can be proved secure in the defined model. Finally, we implement the two protocols in an open source framework.

Robust Certificateless Authentication Protocol for the SAE J1939 Commercial Vehicles Bus

Authentication for controller area network (CAN) buses in an intra-vehicular network involving electronic control units (ECUs) is a challenging factor. The Society of Automotive Engineers standard (SAE J1939) incorporating the ISO 11898-1 specification for the data link and physical layers of the standard CAN and CAN-flexible data rate (CAN-FD) handles communication among ECUs. The SAE J1939 is vulnerable to attacks, namely replay, masquerading and machine-in-the-middle (MITM) attacks. To prevent such attacks, there exist protocol suites for resource-constrained and resource-unconstrained nodes proposed in the literature which are not formally analysed. We formally analyse one of the comprehensive protocol suites using the state-of-the-art Tamarin automated software validation tool. The analysis reveals that the protocols have a vulnerability that can be exploited by replay attack. The identified replay attack prevents further frame authentication. To mitigate the identified attacks, we propose two new authentication protocols. At first, we propose one pass authentication protocol for computationally restricted nodes. For nodes that are not restricted computationally, we present a certificateless signature-based authentication protocol. Additionally, we present a new certificateless key insulated manageable signature (CL-KIMS) scheme for the signature-based authentication protocol. CL-KIMS ensures key insulation and random access key update properties. CL-KIMS scheme assures a novel property, known as self-healing property. The security of the proposed protocol suite and the signature scheme is formally analysed using the random oracle model (ROM). Especially, CL-KIMS scheme is shown to be provably secure in the ROM against Type-I and Type-II adversaries. We use the Tamarin tool to verify mutual authentication, session key security, known key secrecy and forward security. A detailed performance comparison shows that compared with the existing protocol suites, the proposed protocol suite has lesser communication overhead and ensures robust security. Our simulation study in Matlab further reveals that the key exchange protocols in the proposed protocol suite are efficient with lesser total message delay than its counterpart protocols.

Disentangling Decentralized Finance (DeFi) Compositions

We present a measurement study on compositions of Decentralized Finance (DeFi) protocols, which aim to disrupt traditional finance and offer services on top of distributed ledgers, such as Ethereum. Understanding DeFi compositions is of great importance, as they may impact the development of ecosystem interoperability, are increasingly integrated with web technologies, and may introduce risks through complexity. Starting from a dataset of 23 labeled DeFi protocols and 10,663,881 associated Ethereum accounts, we study the interactions of protocols and associated smart contracts. From a network perspective, we find that decentralized exchange (DEX) and lending protocol account nodes have high degree and centrality values, that interactions among protocol nodes primarily occur in a strongly connected component, and that known community detection methods cannot disentangle DeFi protocols. Therefore, we propose an algorithm to decompose a protocol call into a nested set of building blocks that may be part of other DeFi protocols. This allows us to untangle and study protocol compositions. With a ground truth dataset that we have collected, we can demonstrate the algorithm’s capability by finding that swaps are the most frequently used building blocks. As building blocks can be nested, that is, contained in each other, we provide visualizations of composition trees for deeper inspections. We also present a broad picture of DeFi compositions by extracting and flattening the entire nested building block structure across multiple DeFi protocols. Finally, to demonstrate the practicality of our approach, we present a case study that is inspired by the recent collapse of the UST stablecoin in the Terra ecosystem. Under the hypothetical assumption that the stablecoin USD Tether would experience a similar fate, we study which building blocks — and, thereby, DeFi protocols — would be affected. Overall, our results and methods contribute to a better understanding of a new family of financial products.

A construction of encryption protocols over some semidirect products

Abstract In CANDARW ’18, Isobe et al. proposed a secure encryption protocol on non-abelian groups based on the Anshel–Anshel–Goldfeld key exchange protocol. There have remained two weak points on the protocol: one is that the protocol is indistinguishable against adaptive chosen ciphertext attack (IND-CCA) in a slightly restricted sense, what they call IND-rCCA secure, and the other is that the conditions imposed on groups and hashing schemes are too strict to make the protocol practical. In this article, we propose an IND-CCA secure protocol that resolves those problems. The key idea is to employ some specific semidirect product as platform groups, so that we can achieve the exact IND-CCA security from concise conditions on groups and hashing schemes. Our protocol is not dependent on any computational assumptions on abelian subgroups.

A player reputation system based on belief formation among Non-Player character societies in Open-World Role-Playing games

The present work is an attempt to design and implement an artificial game environment that provides information dissemination among Non-Player Characters (NPCs) of Open-World Role-Playing Game communities. Based on the perspective that an NPC is a mobile, communicating, cooperative agent that has autonomy and learning ability, and shows socialness in its virtual environment, it was possible to experiment and observe the impacts of human player-generated events on NPCs’ social learning. By means of introducing different tuneable NPC autonomy and socialness parameter values, it is ensured that information and NPC opinions about the player not only spread over the society, but they also help develop player reputation among NPCs.The defined primitives such as NPCs’ self and group-model views; event valuation and reputation models; established learning, memorization, forgetting mechanisms; the introduced information exchange and update protocol; and reputation metric provided for the construction of a tuneable, scalable virtual environment that can be used to investigate the individual and social behavioural aspects of artificial NPC societies. In this virtual environment, it is shown that player’s reputation converges to fixed values. This is noteworthy since it is an indicator of societal learning and belief formation through NPC communications in the game environment.

Transmitochondrial Cybrid Generation Using Cancer Cell Lines.

In recent years, the number of studies dedicated to ascertaining the connection between mitochondria and cancer has significantly risen. However, more efforts are still needed to fully understand the link involving alterations in mitochondria and tumorigenesis, as well as to identify tumor-associated mitochondrial phenotypes. For instance, to evaluate the contribution of mitochondria in tumorigenesis and metastasis processes, it is essential to understand the influence of mitochondria from tumor cells in different nuclear environments. For this purpose, one possible approach consists of transferring mitochondria into a different nuclear background to obtain the so-called cybrid cells. In the traditional cybridization techniques, a cell line lacking mtDNA (ρ0, nuclear donor cell) is repopulated with mitochondria derived from either enucleated cells or platelets. However, the enucleation process requires good cell adhesion to the culture plate, a feature that is partially or completely lost in many cases in invasive cells. In addition, another difficulty found in the traditional methods is achieving complete removal of the endogenous mtDNA from the mitochondrial-recipient cell line to obtain pure nuclear and mitochondrial DNA backgrounds, avoiding the presence of two different mtDNA species in the generated cybrid. In this work, we present a mitochondrial exchange protocol applied to suspension-growing cancer cells based on the repopulation of rhodamine 6G-pretreated cells with isolated mitochondria. This methodology allows us to overcome the limitations of the traditional approaches, and thus can be used as a tool to expand the comprehension of the mitochondrial role in cancer progression and metastasis.

On the security of ring learning with error‐based key exchange protocol against signal leakage attack

AbstractDue to the rapid development of mobile communication and hardware technologies, several mobile‐based web applications have gained popularity among mobile users. Mobile users can utilize these devices to access numerous services over the Internet. To ensure secure communication, different key exchange and authentication (KEA) protocols are proposed and frequently used. However, due to the advent of quantum computers, numerous quantum‐safe KEA protocols are also developed using various complex mathematical problems in ideal lattices. As it is an emerging and developing area, we analyze the security of recently suggested ring learning with error based KEA protocols. The goal of this study is to gain a comprehensive understanding of quantum‐safe KEA mechanisms. For our study, we have considered Dharminder's LWE‐based KEA mechanism and Dharminder and Chandran's LWE‐based KEA mechanism. These protocols enable effective communication and provide a better means for safely transmitting messages between user and server. However, we have discovered that a fundamental security weakness in these methods makes them vulnerable to signal leakage attacks (SLA). Based on our analysis, we demonstrated security weakness against SLA and provide the road‐map for secure construction.

Attacking the IETF/ISO Standard for Internal Re-keying CTR-ACPKM

Encrypting too much data using the same key is a bad practice from a security perspective. Hence, it is customary to perform re-keying after a given amount of data is transmitted. While in many cases, the re-keying is done using a fresh execution of some key exchange protocol (e.g., in IKE or TLS), there are scenarios where internal re-keying, i.e., without exchange of information, is performed, mostly due to performance reasons.Originally suggested by Abdalla and Bellare, there are several proposals on how to perform this internal re-keying mechanism. For example, Liliya et al. offered the CryptoPro Key Meshing (CPKM) to be used together with GOST 28147-89 (known as the GOST block cipher). Later, ISO and the IETF adopted the Advanced CryptoPro Key Meshing (ACKPM) in ISO 10116 and RFC 8645, respectively.In this paper, we study the security of ACPKM and CPKM. We show that the internal re-keying suffers from an entropy loss in successive repetitions of the rekeying mechanism. We show some attacks based on this issue. The most prominent one has time and data complexities of O(2κ/2) and success rate of O(2−κ/4) for a κ-bit key.Furthermore, we show that a malicious block cipher designer or a faulty implementation can exploit the ACPKM (or the original CPKM) mechanism to significantly hinder the security of a protocol employing ACPKM (or CPKM). Namely, we show that in such cases, the entropy of the re-keyed key can be greatly reduced.

Tunable Selectivity of Photocatalytic Benzyl Alcohol Transformation over Ag-Ion-Exchanged CdS Nanowires

Existing methods for the photocatalytic transformation of aromatic alcohols to value-added products via C–C cross-coupling are inefficient and insufficiently selective. Herein, a series of cadmium sulfide nanowires (CdS NWs) loaded with Ag2S (denoted as Ag2S@CdS NWs) are constructed via a simple Ag+ exchange protocol for the photocatalytic transformation of benzyl alcohol. We successfully demonstrated that the selectivity toward specific products in the photocatalytic transformation of benzyl alcohol over Ag+-exchanged CdS NWs is controlled by varying the amount of exchanged Ag+ ions. Notably, the product of the photocatalytic reaction was dependent on the amount of Ag+ ions exchanged: with a Ag+ exchange of <5 mol %, the C–C coupling product was obtained with >90% selectivity and >95% transformation yield owing to photoinduced electron transfer from the conduction band of CdS to Ag2S. Conversely, with a Ag+ exchange of >7 mol %, a cocatalyst in which Ag2S and Ag are mixed was produced, and benzaldehyde was obtained with >90% selectivity and >90% transformation yield because of photoinduced hole transfer from the valence band of CdS to Ag2S/Ag. This study proves that Ag2S@CdS NWs can be used as a basis for the development of heterojunction photocatalysts for the conversion of aromatic alcohols into value-added products via C–C cross-coupling reactions or photooxidation toward aromatic aldehyde.

Engineered tenorite structure of barium-enriched copper oxide for on-site monitoring of cytotoxic methotrexate in environmental samples

Emerging pharmaceutical pollutants pose a threat to both human and environmental health. The removal and monitoring of such pollutants necessitate the use of practical on-site monitoring devices; however, the designs of such devices are underdeveloped. This study involves the fabrication of a low-cost sensor based on barium-incorporated copper oxide (Ba-CuO) for the on-site monitoring of the cytotoxic drug methotrexate (MTRX) in water and sediment samples. The tenorite structure of CuO was slightly enriched with Ba ions at the td sites, distorting the tetrahedron and enhancing its electrochemical properties. Ba-CuO was obtained from Cu(NO3)2 and Ba(OH)2 by a ligand exchange protocol and was characterized using X-ray diffraction, Raman spectroscopy, X-ray photoelectron spectroscopy, field-emission scanning electron microscopy, transmission electron microscopy, and energy dispersive X-ray analysis. In addition, the Ba-CuO sensor was tested under various conditions, and it could detect MTRX at concentrations as low as 0.4 nM, with a high sensitivity of 1.3567 µA µM−1 cm−2. On-site monitoring yielded recoveries of greater than 93 % from spiked samples, thus exhibiting excellent reproducibility and stability. Therefore, the developed method is practical and has no matrix effect on the MTRX sensor.

Security of device-independent quantum key distribution protocols: a review

Device-independent quantum key distribution (DI-QKD) is often seen as the ultimate key exchange protocol in terms of security, as it can be performed securely with uncharacterised black-box devices. The advent of DI-QKD closes several loopholes and side-channels that plague current QKD systems. While implementing DI-QKD protocols is technically challenging, there have been recent proof-of-principle demonstrations, resulting from the progress made in both theory and experiments. In this review, we will provide an introduction to DI-QKD, an overview of the related experiments performed, and the theory and techniques required to analyse its security. We conclude with an outlook on future DI-QKD research.

Transpyloric misplacement and intramural dislocation: two novel complications related to balloon-type G-tubes.

To the Editor: Percutaneous endoscopic gastrostomy (PEG) remains the standard enteral nutrition access in clinical practice with limited complication potential. Beyond mushroom and/or disk-tip tubes (pull technique), in the introducer technique balloon-type G-tubes are implanted, warranting regular, often nurse-led exchanges. Herein, two novel complications related to tube exchange are presented. A frail male patient with advanced diffuse idiopathic skeletal hyperostosis (DISH)–related dysphagia reported on worsening enteral nutrition tolerance (intermittent administration) due to abdominal pain since the last bedside tube exchange by a specialized nutrition team in the nursing home. On endoscopy, transpyloric misplacement likely related to inadvertent duodenal guidewire insertion (Fig. 1A), resistant to repositioning by external traction (Fig. 1B), was detected. Endoscopy-directed repositioning was easily performed after balloon deflation and withdrawal into the stomach, and other potential causes for deterioration of nutrition tolerance, such as ulcer disease, were excluded. In retrospective, this uncommon and as yet unreported complication may have been avoided by strictly keeping attention to the distance markings during tube exchange, although the mere distance between the PEG exit point and the pylorus was indeed short.Figure 1.: Patient 1: (A) Endoscopic visualization of transpyloric misplacement of a balloon-type G-tube, causing discomfort due to inadvertent duodenal instead of gastric administration of the enteral nutrition regimen. (B) Failed repositioning by external pulling without balloon deflation (not shown uncomplicated repositioning under endoscopic guidance after balloon deflation). Patient 2: (C) Marked edema and hyperemia along endoscopic impression of a “subepithelial lesion” consistent with intramural balloon dislocation. (D) The latter was confirmed after balloon deflation, resulting in collapse of the lesion, and the PEG tract became visible in the vicinity.The second patient with a history of head and neck cancer presented with high-grade abdominal pain. Of note, the patient had only been discharged from a nearby hospital the same day after reinsertion of a balloon-type G-tube using the same PEG stoma after external loss of the previous tube during care measures. CT scans indicated minor free abdominal and intramural air in the stomach along suspected tube dislocation. This was confirmed during urgent endoscopy under CO2, revealing a markedly edematous and hyperemic “pseudotumor” in the antrum (Fig. 1C). After balloon deflation, the stoma entry site was found in the vicinity (Fig. 1D), and the balloon-type tube was repositioned correctly under endoscopic vision, obviating the need for surgery. It remains unclear why this complication occurred despite endoscopic guidance of tube exchange. On a speculative basis, incomplete balloon blocking and/or too aggressive tube retraction during care measures postendoscopy might be discussed. To the best of our knowledge, transpyloric misplacement and intramural dislocation have not yet been reported in the literature and represent two novel, clinically relevant complications related to balloon-type G-tubes.1 Nevertheless, similar to more common G-tube–related complications, such as buried bumper syndrome, strict adherence to tube exchange protocols and proper tube care are of utmost importance. Conflicts of interest The authors report no conflicts of interest.

Blockchain-Oriented Data Exchange Protocol With Traceability and Revocation for Smart Grid

&lt;p&gt;The smart energy system (SES) encourages data administration and information services developments, particularly smart grids. Presently, numerous SESs cloud environments are accessible to smart grids. Nonetheless, because of the semi-credible character of the SES cloud environments, achieving secured access, information storage, updates, deletion, tracing, and revocation of ill-disposed clients is a genuine concern. In this publication, an Ethereum blockchain-oriented secured access regulation design upholding traceability and revocability is offered for smart grids to resolve these problems. The blockchain implements unified identity verification and saves all public-keys, users&amp;rsquo; attribute sets, and revocable lists. The system administrator creates system parameters and sends private-keys to users. The domain administrator prepares the domain&amp;rsquo;s security and privacy-preservation policies and executes encryption procedures. If the attributes correspond with the access policy and the user&amp;rsquo;s ID is unrevoked, they could acquire interim-decryption capabilities from the edge/cloud servers. Tracking malevolent users for revocation is applicable throughout all stages, ensuring the system is secured under Decisional-Bilinear-Diffie-Hellman (DBDH) complex theory and can withstand multi-attacks. Analysis revealed the size of the public/private keys to be shorter, contrary to relevant schemes. The overhead duration is less for generating the public-key, data encryption, and decryption phases. &lt;/p&gt; &lt;p&gt;&amp;nbsp;&lt;/p&gt;

A Survey on Zero-Knowledge Authentication for Internet of Things

The Internet of Things (IoT) is ubiquitous in our lives. However, the inherent vulnerability of IoT smart devices can lead to the destruction of networks in untrustworthy environments. Therefore, authentication is a necessary tool to ensure the legitimacy of nodes and protect data security. Naturally, the authentication factors always include various sensitive users’ information, such as passwords, ID cards, even biological information, etc. How to prevent privacy leakage has always been a problem faced by the IoT. Zero-knowledge authentication is a crucial cryptographic technology that uses authenticates nodes on the networks without revealing identity or any other data entered by users. However, zero-knowledge proof (ZKP) requires more complex data exchange protocols and more data transmission compared to traditional cryptography technologies. To understand how zero-knowledge authentication works in IoT, we produce a survey on zero-knowledge authentication in privacy-preserving IoT in the paper. First, we overview the IoT architecture and privacy, including security challenges and open question in different IoT layers. Next, we overview zero-knowledge authentication and provide a comprehensive analysis of designing zero-knowledge authentication protocols in various IoT networks. We summarize the advantages of ZKP-based authentication in IoT. Finally, it summarizes the potential problems and future directions of ZKP in IoT.

Secure Marine Environment Communication: A Multiobject Authentication Protocol Based on Secret Sharing

In the field of marine communication, with the rapid development of the Internet of Things, big data, blockchain, and other new-generation information technology, marine information security is gradually being attached to more and more coastal countries, and marine information technology has ushered in epoch-making development opportunities. However, marine communication networks are open, and marine equipment is vulnerable to attacks on communication systems. On the one hand, a malicious adversary can intercept and analyze information, obtain relevant data with high probability, and even obtain the identity information of the equipment. On the other hand, attackers can also maliciously inject false information. At the same time, it is difficult for the existing marine information security technology to guarantee the confidentiality and authenticity of information simultaneously, which will bring substantial potential hidden dangers to the development of the ocean. We propose a multitarget authentication and key exchange protocol for secure communication. Our protocol assigns complex cryptographic operations to servers, thus balancing the system’s security and efficiency. The secret is divided into multiple subsecrets using the secret sharing feature, and the subsecret information is used to manage the identity credentials of resource-constrained devices. Then, after successful authentication, the server reassigns the subsecret information of the device to achieve the dynamic generation of identity credentials. Meanwhile, a multitarget authentication scheme is proposed based on recovering secrets. In addition, device extension measures are provided to replace or increase devices. Finally, well-established cryptographic assumptions are used to prove the protocol’s security. Simulation results verify the effectiveness of the protocol in multiobjective authentication.

Universally Composable Oblivious Transfer with Low Communication

In this paper, a universally composable 1-out-of-N oblivious transfer protocol with low communication is built. This protocol obtained full simulation security based on the modulo learning with rounding (Mod-LWR) assumption. It can achieve universally composable security in the random oracle machine (ROM) model by combining random OT based on the key exchange protocol with the authentication encryption algorithm. It can be proven to resist static adversary attacks by simulating all corruption cases. Based on computer simulation and detailed mathematical derivation, this protocol was practicable and had better efficiency and lower communication.

Post-Quantum Lattice-Based Secure Reconciliation Enabled Key Agreement Protocol for IoT

The authenticated key agreement is one of the major security services that can be used to secure an Internet of Things (IoT) environment, where the devices collect the data and the data is then aggregated at the cloud server, and then a user needs to access the data stored at the server(s) securely. For this purpose, after a mutual authentication performed between a user and the accessed server, a session key needs to be established among them for secure communication. In this article, we design an efficient lattice-based authenticated key exchange protocol using ring-based version of learning with errors assumption for the IoT-enabled smart devices. The proposed protocol is basically a key exchange that uses the reconciliation mechanism. The detailed security analysis under the standard model has been performed along with the informal security analysis to show that the proposed protocol is robust against different attacks. We then simulate the proposed protocol under the NS-3 simulator to measure the network performance parameters like network throughput and latency. A comparative analysis shows that the proposed protocol has superior security, less computational cost, and comparable communication cost when compered these parameters with the other competing schemes.