Citation :

Turelle Ange Leslie AROUN FAIMINDI BEREGNON, Lawrence NGUGI, Irene MUISYO, "Hardware Evaluation of a Lightweight Secure Communication Protocol for Constrained IoT Devices," International Journal of Electronics and Communication Engineering, vol. 13, no. 9, pp. 1-11, 2026. Crossref, https://doi.org/10.14445/23488549/IJECE-V13I9P101

Abstract

This paper details the design and hardware evaluation of a lightweight communication protocol for constrained Internet of Things (IoT) devices. The design was implemented on one single Nordic nRF52840 Development Kit (ARM Cortex-M4F, 64 MHz) with the help of Zephyr OS, using the micro-ECC library for ECDH key exchange on the secp256r1 curve and TinyCrypt library for key derivation and AES-128-CCM cipher suite. It took 31,405,906 CPU cycles in a handshake operation that comprised generation of key pair, deriving shared secret, key derivation and encryption of 128-byte transcript using AES-CCM, which was performed ten times without variation, taking about 491 ms at 64 MHz frequency. Energy profiling using the Nordic Power Profiler Kit II over a 447.2 ms time window revealed an energy consumption of about 32.8 mJ. The implementation consumes 39 KB Flash and 13 KB RAM, corresponding to 3.8% and 5.1% of the device resource pool, respectively. On an individual stage level, ECDH scalar multiplication over secp256r1 is responsible for 99.8% of the overall cycle count, whereas HKDF-SHA256 and AES-128-CCM cover 0.2% together. The protocol provides key agreement and authenticated encryption but lacks public key authentication functionality. This shows that the full protocol could be implemented on an IoT device with reasonable resource usage, and that hardware evaluation gives a good point of reference for future optimizations.

Keywords

ECDH, Elliptic curve cryptography, Energy profiling, Zephyr, Embedded systems.

References

1. Luigi Atzori, Antonio Iera, and Giacomo Morabito, “The Internet of Things: A Survey,” Computer Networks, vol. 54, no. 15, pp. 2787-2805, 2010.
   [CrossRef] [Google Scholar] [Publisher Link]
2. Ala Al-Fuqaha et al., “Internet of Things: A Survey on Enabling Technologies, Protocols, and Applications,” IEEE Communications Surveys & Tutorials, vol. 17, no. 4, pp. 2347-2376, 2015.
   [CrossRef] [Google Scholar] [Publisher Link]
3. Gabriele Restuccia, Hannes Tschofenig, and Emmanuel Baccelli, “Low-Power IoT Communication Security: On the Performance of DTLS and TLS 1.3,” 2020 9^th IFIP International Conference on Performance Evaluation and Modeling in Wireless Networks (PEMWN), Berlin, Germany, pp. 1-6, 2020.
   [CrossRef] [Google Scholar] [Publisher Link]
4. Angelo Capossele et al., “Security as a CoAP Resource: An Optimized DTLS Implementation for the IoT,” 2015 IEEE International Conference on Communications (ICC), London, UK,  pp. 549-554, 2015.
   [CrossRef] [Google Scholar] [Publisher Link]
5. Shahid Raza et al., “Lithe: Lightweight Secure CoAP for the Internet of Things,” IEEE Sensors Journal, vol. 13, no. 10, pp. 3711-3720, 2013.
   [CrossRef] [Google Scholar] [Publisher Link]
6. Rikard Höglund et al., “Secure Communication for the IoT: EDHOC and (Group) OSCORE Protocols,” IEEE Access, vol. 12, pp. 49865-49877, 2024.
   [CrossRef] [Google Scholar] [Publisher Link]
7. Martin Gunnarsson et al., “Evaluating the Performance of the OSCORE Security Protocol in Constrained IoT Environments,” Internet of Things, vol. 13, pp. 1-16, 2021.
   [CrossRef] [Google Scholar] [Publisher Link]
8. An Liu, and Peng Ning, “TinyECC: A Configurable Library for Elliptic Curve Cryptography in Wireless Sensor Networks,” 2008 International Conference on Information Processing in Sensor Networks (ipsn 2008), St. Louis, MO, USA, pp. 245-256, 2008.
   [CrossRef] [Google Scholar] [Publisher Link]
9. A.S. Wander et al., “Energy Analysis of Public-Key Cryptography for Wireless Sensor Networks,” Third IEEE International Conference on Pervasive Computing and Communications, Kauai, HI, USA, pp. 324-328, 2005.
   [CrossRef] [Google Scholar] [Publisher Link]
10. A. H. Al-Omari, “Lightweight Dynamic Crypto Algorithm for Next Internet Generation,” Engineering, Technology & Applied Science Research, vol. 9, no. 3, pp. 4203-4208, 2019.
    [CrossRef] [Google Scholar] [Publisher Link]
11. U. Iftikhar et al., “Evaluating the Performance Parameters of Cryptographic Algorithms for IoT-based Devices,” Engineering, Technology & Applied Science Research, vol. 11, no. 6, pp. 7867-7874, 2021.
    [CrossRef] [Google Scholar] [Publisher Link]
12. D.J. Malan, M. Welsh, and M.D. Smith, “A Public-Key Infrastructure for Key Distribution in TinyOS based on Elliptic Curve Cryptography,” 2004 First Annual IEEE Communications Society Conference on Sensor and Ad Hoc Communications and Networks, Santa Clara, CA, USA, pp. 71-80, 2004. [CrossRef] [Google Scholar] [Publisher Link]
13. Simon Heron, “Advanced Encryption Standard (AES),” Network Security, vol. 2009, no. 12, pp. 8-12, 2009.
    [CrossRef] [Google Scholar] [Publisher Link]
14. Sharadadevi Kaganurmath, Nagaraj G. Cholli, and M. R. Anala, “DLKS-MQTT: A Lightweight Key Sharing Protocol for Secure IoT Communications,” Engineering, Technology & Applied Science Research, vol. 15, no. 2, pp. 21532-21538, 2025.
    [CrossRef] [Google Scholar] [Publisher Link]
15. Rupali P. Shete, Anupkumar M. Bongale, and Deepak Dharrao, “Lightweight Cryptographic and Scalable IoT Systems for Encryption across GSM-MQTT Architectures in Resource-Constrained Aquaculture Environment,” Engineering, Technology & Applied Science Research, vol. 15, no. 4, pp. 25133-25139, 2025.
    [CrossRef] [Google Scholar] [Publisher Link]
16. Hayder Yasir Naser et al., “A Comparison of Lightweight Cryptographic Protocols for Energy-Efficient and Sustainable IoMT Authentication,” Engineering, Technology & Applied Science Research, vol. 15, no. 4, pp. 25746-25756, 2025.
    [CrossRef] [Google Scholar] [Publisher Link]
17. Batool Mohammed Radhi et al., “A Lightweight Identity Authentication Protocol for Nano-Scale IoT Devices,” Engineering, Technology & Applied Science Research, vol. 15, no. 5, pp. 27938-27946, 2025.
    [CrossRef] [Google Scholar] [Publisher Link]
18. Waleed Khalid Al-Zubaidi et al., “Resilient IoT Authentication Against Physical Tampering and Side Channel Attacks,” Engineering, Technology & Applied Science Research, vol. 15, no. 6, pp. 28787-28795, 2025.
    [CrossRef] [Google Scholar] [Publisher Link]