论文标题
Extru:对物联网的轻巧,快速且安全的可就到期信任
ExTru: A Lightweight, Fast, and Secure Expirable Trust for the Internet of Things
论文作者
论文摘要
物联网(IoT)设备的资源受限性质在为这个设备家族设计安全,可靠,尤其是高性能的通信方面构成了挑战。尽管抗侧通道的防密码(块密码或流密码)是建立保证安全通信的合理解决方案,但这些密码的能源密集型性质使得它们对于特别轻巧的IoT解决方案不可能。在本文中,我们介绍了Extru,这是一种基于流密码的新型加密通信协议,它添加了可配置的开关和切换网络(CSTN),不仅可以提高轻量级物联网设备中通信的性能,而且与常规的侧型侧通力阻力相比,它的消耗能量却少于较小的能量。尽管所提出的方案的总体结构是针对物理攻击的泄漏,例如侧通道或新的基于扫描的布尔满意度(SAT)攻击或代数攻击,但我们引入了一种动态加密机制,可以消除这种脆弱性。我们演示了在拟议的方案中如何传达的每个信息降低信任水平。因此,由于特定数量的消息N可以通过使用动态加密机制打破通信并提取密钥,因此Extru可以在t <n之后定期重新定期信任水平,以保护针对基于侧向通道和基于扫描的攻击的通信(例如,SAT攻击)。此外,我们证明,通过正确配置t的值,Extu不仅会增加“设备”到每个“消息”的安全强度,而且还可以显着改善能源消耗,以及与仅使用常规的侧渠道抗频道块/流块/流动器相比,它也可以显着提高吞吐量。
The resource-constrained nature of the Internet of Things (IoT) devices, poses a challenge in designing a secure, reliable, and particularly high-performance communication for this family of devices. Although side-channel resistant ciphers (either block cipher or stream cipher) are the well-suited solution to establish a guaranteed secure communication, the energy-intensive nature of these ciphers makes them undesirable for particularly lightweight IoT solutions. In this paper, we introduce ExTru, a novel encrypted communication protocol based on stream ciphers that adds a configurable switching & toggling network (CSTN) to not only boost the performance of the communication in lightweight IoT devices, it also consumes far less energy compared with the conventional side-channel resistant ciphers. Although the overall structure of the proposed scheme is leaky against physical attacks, such as side-channel or new scan-based Boolean satisfiability (SAT) attack or algebraic attack, we introduce a dynamic encryption mechanism that removes this vulnerability. We demonstrate how each communicated message in the proposed scheme reduces the level of trust. Accordingly, since a specific number of messages, N, could break the communication and extract the key, by using the dynamic encryption mechanism, ExTru can re-initiate the level of trust periodically after T messages where T<N, to protect the communication against side-channel and scan-based attacks (e.g. SAT attack). Furthermore, we demonstrate that by properly configuring the value of T, ExTru not only increases the strength of security from per "device" to per "message", it also significantly improves energy consumption as well as throughput in comparison with an architecture that only uses a conventional side-channel resistant block/stream cipher.