Lightweight Cryptographic Algorithms Research Articles

Improved differential fault analysis of Grain128-AEAD

The number of smart devices connected to the Internet has been constantly increasing, and as a result, lightweight cryptography (LWC) has become more important in the past decade. The Lightweight Cryptography (LWC) Project is an initiative taken by the National Institute of Standards and Technology (NIST) to standardize such LWC algorithms. Grain128-AEAD, which was submitted to the NIST LWC project, is an encryption algorithm that provides both confidentiality and integrity assurance. Third-party security analysis of the submitted ciphers is an important aspect of the evaluation of the submission to the NIST LWC project. Although several pieces of existing research, such as the bit-flipping attack, random fault attack, and deterministic random fault attack, have examined the security of Grain128-AEAD, there is still room for improvement in the fault attack models of these studies. This work aims to fill this research gap by analyzing the security margin of Grain128-AEAD against a series of improved differential fault attacks. In this study, we developed a probabilistic random fault attack and applied it to Grain128-AEAD. As an improvement of the existing research, a probabilistic approach can be applied to a more relaxed moderate control attack model. The existing moderate control model assumes the fault to be injected within any bit of a given byte, whereas the faults in our improved approach can be injected within any bits of a two-byte/four-byte segment, thereby relaxing the fault precision. The results indicate that the improved moderate control requires 388 keystreams for the two-byte model and 279 for the four-byte model to identify the target fault locations for implementing a state recovery attack. The relaxed fault attack models presented in this work are more practical to implement; hence, the findings of this research have improved the existing studies and narrowed the current research gap on the fault attack models of Grain128-AEAD. % To maintain consistency in terminology, "Grain-128AEAD" has been revised to "Grain128-AEAD" in both the abstract and the main text. Please confirm this revision.

Lightweight Cryptography for Internet of Things: A Review

The paper examines the rising significance of security in Internet of Things (IoT) applications and emphasizes the need for lightweight cryptographic solutions to protect IoT devices. It acknowledges the growing prevalence of IoT in various fields, where sensors collect data, and computational systems process it for action by actuators. Due to IoT devices' resource limitations and networked nature, security is a concern. The article compares different lightweight cryptographic block cipher algorithms to determine the best approach for securing IoT devices. It also discusses the merits of hardware versus software solutions and explores potential security threats, including intrusion and manipulation. Additionally, the article outlines future work involving the implementation of the trusted Advanced Standard Encryption block cipher in IoT devices, including its use in quick-response (QR) code scanning and messaging platforms. It acknowledges existing drawbacks and suggests areas for improvement in IoT system performance and security.

A Lightweight Image Cryptosystem for Cloud-Assisted Internet of Things

Cloud computing and the increasing popularity of 5G have greatly increased the application of images on Internet of Things (IoT) devices. The storage of images on an untrusted cloud has high security and privacy risks. Several lightweight cryptosystems have been proposed in the literature as appropriate for resource-constrained IoT devices. These existing lightweight cryptosystems are, however, not only at the risk of compromising the integrity and security of the data but also, due to the use of substitution boxes (S-boxes), require more memory space for their implementation. In this paper, a secure lightweight cryptography algorithm, that eliminates the use of an S-box, has been proposed. An algorithm termed Enc, that accepts a block of size n divides the block into L n R bits of equal length and outputs the encrypted block as follows: E=L⨂R⨁R, where ⨂ and ⨁ are exclusive-or and concatenation operators, respectively, was created. A hash result, hasR=SHA256P⨁K, was obtained, where SHA256, P, and K are the Secure Hash Algorithm (SHA−256), the encryption key, and plain image, respectively. A seed, S, generated from enchash=Enchashenc,K, where hashenc is the first n bits of hasR, was used to generate a random image, Rim. An intermediate image, intimage=Rim⨂P, and cipher image, C=Encintimage,K, were obtained. The proposed scheme was evaluated for encryption quality, decryption quality, system sensitivity, and statistical analyses using various security metrics. The results of the evaluation showed that the proposed scheme has excellent encryption and decryption qualities that are very sensitive to changes in both key and plain images, and resistance to various statistical attacks alongside other security attacks. Based on the result of the security evaluation of the proposed cryptosystem termed Hash XOR Permutation (HXP), the study concluded that the security of the cryptography algorithm can still be maintained without the use of a substitution box.

Attack Analysis on Hybrid-SIMON-SPECKey Lightweight Cryptographic Algorithm for IoT Applications

Objective: To perform attack analysis on new developed hybrid-SIMON-SPECKey lightweight cryptographic algorithms and compare its strength with existing SIMON and SPECK Lightweight cryptographic algorithm. Methods: A hybrid-SIMON-SPECKey algorithm is the combination of round function of SIMON and key scheduling of SPECK algorithm. Both SIOMN & SPECK algorithm are used for securing resource constrained devices. In this research work, avalanche effect method is used to analyze attack resistance property of algorithm. Findings: Newly developed Hybrid algorithm shows better results in terms of execution time and memory consumption. As compared to SIMON, hybrid version of algorithm consumes 50% less time and 20% less memory, which makes it efficient. Strict Avalanche criteria for SIMON is 89%, that of SPECK is 90% and in case of hybrid algorithm, it is 90% at start position but when the character is flipped or changed at the end position of plain text then SAC is more (87%) in case of hybrid algorithm as compared as SIMON and SPECK algorithms. Hence, newly developed algorithm showed improved results with equally resistance to the attack as compared to SIMON & SPECK. Novelty and applications: The novelty lies in the creation of a hybrid lightweight cryptographic algorithm that combines the feistel structure of SIMON with the key scheduling function of SPECK. This hybrid approach aims to leverage the strengths of both algorithms, potentially providing a more robust and efficient solution for resource-constrained IoT devices. In section 3.1 comparative analysis is done which show that hybrid algorithm outperforms in term of time and memory consumption as well a strength of newly developed hybrid algorithm is evaluated using avalanche effect which shows that it is at par with base algorithms. Keywords: Attack Analysis, Cipher Code, Decryption, Encryption, Lightweight Cryptography, Iot Devices, And Resource Constraint Devices

A Survey on Lightweight Cryptographic Algorithms in IoT

Abstract The Internet of Things (IoT) will soon penetrate every aspect of human life. Several threats and vulnerabilities are present due to the different devices and protocols used in an IoT system. Conventional cryptographic primitives or algorithms cannot run efficiently and are unsuitable for resource-constrained devices in IoT. Hence, a recently developed area of cryptography, known as lightweight cryptography, has been introduced, and over the years, numerous lightweight algorithms have been suggested. This paper gives a comprehensive overview of the lightweight cryptography field and considers various popular lightweight cryptographic algorithms proposed and evaluated over the past years for analysis. Different taxonomies of the algorithms and other associated concepts were also provided, which helps new researchers gain a quick overview of the field. Finally, a set of 11 selected ultra-lightweight algorithms are analyzed based on the software implementations, and their evaluation is carried out using different metrics.

Improved 2-round collision attack on IoT hash standard ASCON-HASH

Lightweight cryptography algorithms are a class of ciphers designed to protect data generated and transmitted by the Internet of Things. They typically have low requirements in terms of storage space and power consumption, and are well-suited for resource-limited application scenarios such as embedded systems, actuators, and sensors. The NIST-approved competition for lightweight cryptography aims to identify lightweight cryptographic algorithms that can serve as standards. Its objective is to enhance data security in various scenarios. Among the chosen standards for lightweight cryptography, ASCON has been selected. ASCON-HASH is a hash function within the ASCON family. This paper presents a detailed analysis of the differential characteristics of ASCON-HASH, utilizing the quadratic S-box. Additionally, we employ message modification techniques and ultimately demonstrate a non-practical collision attack on the 2-round ASCON-HASH, requiring a time complexity of 298 hash function calls.

Securing large-scale data processing: Integrating lightweight cryptography in MapReduce

<p>In today’s rapidly evolving digital landscape, the imperative of data security stands paramount. With the proliferation of sensitive information being stored and transmitted online, the necessity for robust encryption algorithms has grown exponentially. However, the suitability of traditional encryption methods in resource-constrained settings, like mobile devices and cloud computing, remains a concern due to their computational intensity. To address this, researchers have introduced a novel category of encryption algorithms known as lightweight cryptography algorithms. These cryptographic solutions are designed to offer robust security while minimizing computational demands, thus striking a harmonious balance between security and efficiency. While lightweight cryptography algorithms present a promising solution, their adequacy for applications demanding exceptionally high security, particularly within Big Data environments, warrants careful consideration. In this study, we presented a novel approach involving the utilization of lightweight cryptography algorithms within the MapReduce framework. By subjecting these algorithms to rigorous experimentation, we assessed their performance using software-oriented metrics from various dimensions.</p>

Enhancing financial transaction security with lightweight cryptographic algorithms

The lightweight cryptographic algorithms used to increase the safety for financial transactions. The proposed lightweight cryptographic algorithms provide a middle ground, guaranteeing strong security with low computational overhead. Lightweight cryptography approaches being investigated for their potential in protecting private financial information during transactions. These algorithms are well-suited for real-time monetary transactions since they not only strengthen data integrity but also cut processing times through streamlined encryption and decryption processes. This paper focus into the planning, execution, and efficiency assessment of such lightweight cryptographic algorithms as they pertain to monetary systems. This study shows how successful they are at preventing common security threats like eavesdropping and data manipulation through extensive testing and analysis. Lightweight cryptographic algorithms have been shown to have the ability to dramatically improve the security of financial transactions, providing an efficient and cost-effective means of safeguarding sensitive financial data in today interconnected and potentially dangerous digital environment. 

Hybrid Fusion of Lightweight Security Frameworks Using Data Mining Approach in IoT

The rapid adoption of the Internet of Things throughout healthcare and smart city construction has led to a rise in networked devices and security issues. This work suggests new techniques to improve IoT safety and maximise computing resources. We develop a complete security architecture integrating lightweight cryptography, blockchain, machine learning anomaly detection, and federated learning. We did so because we know that traditional security measures are inadequate for the Internet of Things. The lightweight cryptographic algorithm (LCA) provides efficient encryption and decryption, making it ideal for low-resource Internet of Things devices. Twenty processes comprise the LCA design. These operations include key generation, data encryption, digital signatures, and integrity checking. These procedures secure IoT data transfers. ADML detects anomalies in encrypted Internet of Things data using machine learning. This approach may identify security issues better. To keep up with data trends, this method extracts features, trains models, and updates them. Blockchain-based data integrity (BDI) is the third element. Blockchain ensures that Internet of Things data is reliable and full. BDI developed an immutable ledger solution to increase IoT data security and dependability. This data integrity system generates blocks, hashes, confirms blocks, and updates the blockchain. Fourth, FLIoT (Federated Learning for the Internet of Things) emphasises data privacy and collaborative model training across IoT devices. Foundation for the Internet of Things (FIoT) protocols and standards aim to increase IoT devices' collective intelligence while safeguarding users' privacy. It includes local model training, model aggregation, and the latest global model distribution. Our work also uses Secure Multi-party Computation (SMC) to analyse data more thoroughly and continuously, addressing online transaction cybersecurity issues. The framework outperforms the current state of the art in memory use, energy consumption, anomaly detection accuracy and precision, and encryption and decryption time. The Hybrid Fusion Framework combines lightweight cryptographic algorithms with federated learning, machine learning, blockchain technology, and other similar technologies to provide an effective, adaptable, and affordable IoT security solution.

Healthcare Data Security in Cloud Storage Using Light Weight Symmetric Key Algorithm

Now-a-days, healthcare monitoring system is very much important system in the medical field to know the patient‘s health status immediately. In the proposed system, the sensors are fixed over the patient’s body or placed at some distances around the body to collect patient’s significant parameters like blood pressure, temperature, heart beat rate, etc. These parameters are collected by the healthcare professionals through some connectivity mechanisms like Bluetooth, ZigBee, etc. These significant data will be outsourced to the cloud storage in a secure way to avoid attack from the attackers. So, we need some protection mechanism to safeguard this information. This article proposes a light weight cryptographic algorithm (symmetric key) via random number key generation using Diffie-Hellman key exchange based on Elliptic Curve (ECDH) cryptography. As a result of substituting bytes (S-box) and folding (horizontal and vertical) operations, the proposed symmetric key algorithm achieves the foremost properties of cryptography such as confusion and diffusion quite well. Experimental results showed that the overall execution time of the proposed algorithm is superior to the standard Advanced Encryption Standard (AES) algorithm. The throughput rate of the proposed algorithm is 20.525095 KB/seconds whereas for the standard AES algorithm throughput rate is 18.727215 KB/seconds. So, the proposed algorithm is faster than the existing AES algorithm. Moreover, the construction of S-box, IS-box and the key generation procedures are entirely different in the proposed algorithm so, it increases the complexity for the attacker and it will create confusion to the attacker

Analysis of Lightweight Cryptographic Algorithms for IoT Gateways

This research work explores the growing role of IoT devices in daily life and the increasing demand for secure data transmission in different sectors like healthcare, military, etc. Moreover, this study focuses on the recent advancements in lightweight cryptography and compares various encryption algorithms in an IoT environment using real-time data. Employing Message Queuing Telemetric Transport (MQTT) protocol, this research work assess the time of encryption, memory usage, and CPU usage as key parameters. By standardizing iterations, key width, and block length, this study aims to identify optimal encryption solutions for IoT applications.

Lightweight Cryptographic Algorithms for Medical IoT Devices using Combined Transformation and Expansion (CTE) and Dynamic Chaotic System

Lightweight Cryptographic Algorithms for Medical IoT Devices using Combined Transformation and Expansion (CTE) and Dynamic Chaotic System

Securing micro transactions in the Internet of Things with cryptography primitives

The growing number of IoT devices, microtransaction security in the Internet of Things (IoT) is a critical issue. In order to improve the security of microtransactions in Internet of Things ecosystems, this article investigates the usage of cryptographic primitives. Strong safeguards against possible risks including data manipulation, eavesdropping, and unauthorized access are provided by cryptography, which provides a foundation for guaranteeing the confidentiality, integrity, and validity of transaction data. We address the special problems of power and processing limits by delving into the implementation of lightweight cryptography algorithms and protocols designed for resource-constrained IoT devices. Our goal is to create a trust framework that guarantees the security and privacy of data exchange by incorporating cryptographic primitives into IoT microtransactions. By encouraging trust and dependability in microtransactions, which are essential to the future of networked smart devices, our research helps to build a more secure and robust Internet of Things environment.

ALICA: A Multi-S-Box Lightweight Cryptographic Algorithm Based on Generalized Feistel Structure

With the development of science and technology, IoT devices have already become ubiquitous in the public eye. Through the perception layer, the collected data are displayed or transmitted to the server backend for analysis. Due to the increasing integration of IoT devices into people’s daily lives, privacy issues, such as data leaks, have received more attention. Most sensor nodes, such as temperature and pressure sensors in marine environments, have low computing power, storage capacity, and significant underlying heterogeneity, making it challenging to implement a standardized data security protection solution. Data security in the nodes is seriously challenged as a result. It is of great significance to design a lightweight block cipher for the Internet of Things (IoT) environment, which can ensure the security of node information. A new lightweight block cipher algorithm called ALICA is proposed in this paper, which is well-suited for the low computing power and heterogeneous device environment at the lower layers. A generalized Feistel structure and a linear structure with XOR and shift operations are used to achieve ease of software implementation. Two different S-boxes are used to create the nonlinear structure of the password, thereby enhancing the robust security of the cipher. In addition, the cipher adopts a design approach that prioritizes software efficiency while also considering hardware implementation efficiency. This makes it more suitable for low computing power, storage capacity, and resource-limited IoT sensor nodes at the lower layers.

Bibliometric Analysis of IoT Lightweight Cryptography

In the rapidly developing world of the Internet of Things (IoT), data security has become increasingly important since massive personal data are collected. IoT devices have resource constraints, which makes traditional cryptographic algorithms ineffective for securing IoT devices. To overcome resource limitations, lightweight cryptographic algorithms are needed. To identify research trends and patterns in IoT security, it is crucial to analyze existing works, keywords, authors, journals, and citations. We conducted a bibliometric analysis using performance mapping, science mapping, and enrichment techniques to collect the necessary information. Our analysis included 979 Scopus articles, 214 WOS articles, and 144 IEEE Xplore articles published during 2015–2023, and duplicates were removed. We analyzed and visualized the bibliometric data using R version 4.3.1, VOSviewer version 1.6.19, and the bibliometrix library. We discovered that India is the leading country for this type of research. Archarya and Bansod are the most relevant authors; lightweight cryptography and cryptography are the most relevant terms; and IEEE Access is the most significant journal. Research on lightweight cryptographic algorithms for IoT devices (Raspberry Pi) has been identified as an important area for future research.

ИЗБОР И ОБОСНОВКА НА ПОКАЗАТЕЛИ ЗА СРАВНИТЕЛЕН АНАЛИЗ НА НИСКОРЕСУРСНИ ШИФРИ

The main aim of the paper is selection of criteria for evaluation and analysis of lightweight ciphers with different structure and modes of operation to serve in the subsequent comparative analysis of selected ciphers, finalists in the NIST’s competition for new lightweight cryptographic algorithm. Methods used: comparative analysis and summary. Based on the study, two types of criteria were selected - to assess the capabilities of ciphers and to assess their software performence. The first type of metrics has been applied on representatives of two families of lightweight ciphers, finding which have better characteristics.

An innovative approach for dynamic key dependent S-Box to enhance security of IoT systems

The Internet of Things (IoT) foresees pervasive and connected smart nodes that interact independently while offering varied services. Today, IoT nodes are a treasure house of data and hence security has become a major concern in IoT networks. Conventional cryptography faces many challenges during implementation in IoT devices. These challenges can be tackled by lightweight cryptography which is highly secure with less resource requirements. The vital characteristic of security is fulfilled by one out of 6 inner structures such as Substitution-Permutation Network, Feistel Network, General Feistel Network, Add-Rotate-XOR, Non Linear-Feedback Shift Register and Hybrid. PRESENT, which is a NIST approved lightweight cryptographic algorithm with SPN structure uses fixed or static S-Box. This permits attackers to explore S-Box and identify weaknesses of the algorithm. Key dependent approaches are better because it impedes an attacker from any offline analyses of attacks on the S-Box. Additionally, this is susceptible to linear and differential attacks. The static S Box does not possess superior diffusion and does not have a good rate of avalanche effect. So, the solution is to create a robust dynamic key dependent algorithm with nonlinear S-Boxes to secure the communication between IoT devices and platform. Security analysis is done on Non-linearity, Differential and Linear Cryptanalysis and Avalanche characteristics, besides, encryption of IoT data to demonstrate its aptness for cold chain security applications.© 2017 Elsevier Inc. All rights reserved.

Lightweight Cryptography for Connected Vehicles Communication Security on Edge Devices

Recent advances in mobile connection technology have been involved in every aspect of modern life. Even vehicles are becoming more connected, with the ability to communicate without human intervention. The main idea of connected vehicles is to exchange information to avoid a potential collision or to warn the driver about stop signs/lights. To achieve a wide range of connections between vehicles, they must be equipped with connected devices such as Bluetooth, wi-fi, and cellular connectivity. However, communication raises security issues with regard to cybersecurity attacks that attempt to collect confidential information or to take control of the vehicle by forcing unintended braking or steering. In this paper, we proposed a secure vehicle-to-vehicle (V2V) communication approach by deploying a secure communication protocol based on a key management process and a cryptography system to encrypt exchanged data. The proposed key management process was designed to resist many attacks and eliminate connections to the infrastructure for key generation. Since vehicles are equipped with embedded devices with limited computation resources, a lightweight cryptography algorithm was used. The light encryption device (LED) block cipher was used to encrypt exchanged data. The LED has a low implementation area on hardware and low power consumption. It is considered to be a perfect solution for security issues in connected vehicles. The proposed data encryption algorithm was synthesized with VHDL on the Xilinx Zynq-7020 FPGA using the Vivado HLS tool. The encryption algorithm was implemented only on the logic of the device. The achieved results proved that the proposed algorithm is suitable for implementation in vehicles due to its low implementation requirements and low power consumption in addition to its high security level against cyber-attacks.

Assessment of Radiation-Induced Soft Errors on Lightweight Cryptography Algorithms Running on a Resource-Constrained Device

Most safety-critical edge-computing devices rely on lightweight cryptography (LWC) algorithms to provide security at minimum power and performance overhead. LWC algorithms are traditionally embedded as a hardware component, but with the advance of the Internet of Things (IoT), emerging firmware is more likely to support cryptography algorithms to comply with different security levels and industry-standards. This is the first work to present the soft error assessment of five cryptography algorithms executing in a low-power microprocessor running under neutron radiation, considering electronic code book (ECB) and counter (CTR) mode of operation implementations. Results obtained from two neutron radiation tests suggest that: ( <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">i</i> ) the NOEKEON algorithm gives the best relative soft error reliability, performance, power efficiency and memory footprint utilisation trade-offs between the five algorithms considering both ECB and CTR implementations, and ( <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">ii</i> ) cryptography solutions based on the counter mode of operation present better FIT rate for silent data corruption (SDC) and crash w.r.t. ECB implementations.

Efficient and secure hybrid chaotic key generation for light encryption device block cipher

Lightweight cryptographic algorithms must develop to ensure the confidentiality and integrity of the data in resource-constrained devices. Keys are vital to every cryptography algorithm because they provide randomness, complexity, unexpected nature, and robustness. A light encryption device (LED) is considered a lighter version of advanced encryption standard (AES), but it is vulnerable to related key attacks due to using the same key during the whole encryption process. This paper presents a hybrid chaotic key generator (HCKG) based on 3D Lorenz, and 2D Henon maps to generate a highly randomized key that combines with the LED to provide a high level of secure encryption on resource-constrained devices. We modified the HCKG every four rounds via simple operations to get the subkeys and XORed it with the state to increase the complexity of the ciphertext. Moreover, the HCKG with subkeys allows us to decrease the total number of LED rounds from 32 to 24 to minimize the calculation cost while maintaining a high level of security. National Institute of Science and Technology (NIST) test suite proves that the proposed LED-HCKG demonstrates a high-performance increase by nearly 0.3283 higher than LED concerning data integrity and secrecy.