Similarly to elsewhere on the Internet, practical security in the Internet of Things (IoT) is achieved by combining an array of mechanisms, at work at all layers of the protocol stack, in system software, and in hardware. Standard protocols such as Datagram Transport Layer Security (DTLS 1.2) and Transport Layer Security (TLS 1.2) are often recommended to secure communications to/from IoT devices. Recently, the TLS 1.3 standard was released and DTLS 1.3 is in the final stages of standardization. In this paper, we give an overview of version 1.3 of these protocols, and we provide the first experimental comparative performance analysis of different implementations and various configurations of these protocols, on real IoT devices based on low-power microcontrollers. We show how different implementations lead to different compromises. We measure and compare bytes-over-the-air, memory footprint, and energy consumption. We show that, when DTLS/TLS 1.3 requires more resources than DTLS/TLS 1.2, this additional overhead is quite reasonable. We also observe that, in some configurations, DTLS/TLS 1.3 actually decreases overhead and resource consumption. All in all, our study indicates that there is still room to optimize the existing implementations of these protocols.
Accelerating HQC for Post-Quantum TLS 1.3 on x86 IoT Gateways
School of Cyber Security, Korea University（韩国大学网络安全学院）；School of Mathematics, Statistics and Data Science, Sungshin Women’s University（圣心女子大学数学、统计与数据科学学院）；SmartM2M
JSON Web Token (JWT) based client authentication in Message Queuing Telemetry Transport (MQTT)
本文概述了JSON Web令牌（JWT）和传输层安全性（TLS）作为互联网上事物认证的两种主要方法。JSON Web Token（JWT）目前被广泛用于OAuth和OpenId框架中的授权和身份验证。最近，Google Cloud IoT强制要求将JWT用于基于HTTP和消息传输远程传输（MQTT）协议的客户端，通过TLS安全地连接到云服务。MQTT是物联网设备中的首选协议，也是本文作为应用协议的主要关注点。另一个流行的云平台Amazon Web Service（AWS）使用TLS双向身份验证进行客户端身份验证。这里提供的两种方法之间的任何比较主要是从受约束的设备客户端的角度。
HPQ-AKE: A Provably Secure Sign-Less Hybrid Authenticated Key Exchange Protocol for Bandwidth-Constrained IoT and Edge Networks
Ho Chi Minh City Open University（胡志明市开放大学）；Faculty of Information Technology, Ho Chi Minh City University of Industry and Trade (HUIT)（胡志明市工业贸易大学信息技术学院）；Faculty of Information Technology, Ho Chi Minh City Open University（胡志明市开放大学信息技术学院）；Faculty of Computer Science and Engineering, Ho Chi Minh City University of Technology (HCMUT)（胡志明市理工大学计算机科学与工程系）；Vietnam National University Ho Chi Minh City（越南国家大学胡志明市分校）
