AlMajed Hisham, AlMogren Ahmad
Department of Computer Science, College of Computer and Information Sciences, King Saud University, Riyadh 11633, Saudi Arabia.
Sensors (Basel). 2020 Oct 29;20(21):6158. doi: 10.3390/s20216158.
Recent growth in the Internet of Things (IoT) has raised security concerns over the confidentiality of data exchanged between IoT devices and the edge. Many IoT systems adopt asymmetric cryptography to secure their data and communications. A drawback of asymmetric cryptography is the sizeable computation and space requirements. However, elliptic curve cryptography (ECC) is widely used in constrained environments for asymmetric cryptography due its superiority in generating a powerful encryption mechanism with small key sizes. ECC increases device performance and lowers power consumption, meaning it is suitable for diverse applications ranging from the IoT to wireless sensor network (WSN) devices. To ensure the confidentiality and security of data and communications, it is necessary to implement ECC robustly. A special area of focus in this regard is the mapping phase. This study's objective was to propose a tested and trusted scheme that offers authenticated encryption (AE) via enhancing the mapping phase of a plain text to an elliptic curve to resist several encryption attacks such as Chosen Plaintext Attack (CPA) and Chosen Ciphertext Attack (CCA). The proposed scheme also undertakes evaluation and analysis related to security requirements for specific encryption attributes. Finally, results from a comparison of the proposed scheme and other schemes are presented, evaluating each one's security characteristics and performance measurements. Our scheme is efficient in a way that makes so suitable to the IoT, and in particular to the Industrial IoT and the new Urbanization where the demands for services are huge.
物联网(IoT)的近期发展引发了对物联网设备与边缘之间交换数据保密性的安全担忧。许多物联网系统采用非对称密码学来保护其数据和通信。非对称密码学的一个缺点是计算量和空间需求较大。然而,椭圆曲线密码学(ECC)由于在生成具有小密钥大小的强大加密机制方面具有优势,因而在受限环境中被广泛用于非对称密码学。ECC提高了设备性能并降低了功耗,这意味着它适用于从物联网到无线传感器网络(WSN)设备的各种应用。为确保数据和通信的保密性和安全性,有必要稳健地实施ECC。在这方面,一个特别关注的领域是映射阶段。本研究的目标是提出一种经过测试和可信的方案,该方案通过增强明文到椭圆曲线的映射阶段来提供认证加密(AE),以抵御诸如选择明文攻击(CPA)和选择密文攻击(CCA)等多种加密攻击。所提出的方案还对特定加密属性的安全要求进行评估和分析。最后,给出了所提出方案与其他方案的比较结果,评估了每个方案的安全特性和性能指标。我们的方案具有高效性,非常适合物联网,特别是对服务需求巨大 的工业物联网和新型城镇化。