Citation :

Manisha Ahirrao, Bageshree Pathak, Mrudul Dixit, "Reproducible AES-128 Benchmarking and Security-Assessment Boundary for Resource-Constrained IoT Environments," International Journal of Electrical and Electronics Engineering, vol. 13, no. 9, pp. 55-65, 2026. Crossref, https://doi.org/10.14445/23488379/IJEEE-V13I9P105

Abstract

To meet the constraints of resource-constrained Internet of Things (IoT) devices, the encryption mechanism must provide confidentiality while adding little complexity and memory usage. This work presents a reproducible Advanced Encryption Standard (AES) -128 performance benchmarking and security boundary analysis for constrained IoT applications. Before any benchmarking, the AES-128 implementation was tested against a standard cryptographic test vector. Encryption and decryption were verified based on the successful plaintext recovery. To enhance methodological rigour and reproducibility, the experimental design used 250 runs over four IoT-relevant payload sizes (16 bytes, 1 KB, 10 KB, and 1 MB) executed in a controlled execution environment. The evaluation consisted of performance metrics that include encryption time, decryption time, execution stability, standard deviation and memory variation, analysed in a controlled execution environment. Results show that while AES-128 exhibits stable run-to-run timing for small and medium payloads, execution overhead and timing variance increased for 1 MB workloads in the implementation presented using Python. It also points out that process-level memory profiling is limited for small workloads since they are impacted by noise and variability in the measurement. Reduced-key brute-force attack analysis is shown only as a pedagogical example of key-space growth and makes no claim about the security of full AES configurations. Likewise, side-channel attack concerns are qualitatively addressed because attack analysis was performed. The study provides an AES-128 benchmarking methodology for IoT security evaluation that is statistically founded and fully reproducible.

Keywords

AES-128, IoT security, Performance evaluation, Reproducible benchmarking, Reduced key demonstration.

References

1. Mohammed N. Alenezi et al., “On the Performance of AES Algorithm Variants,” International Journal of Information and Computer Security, vol. 23, no. 3, pp. 322-337, 2024.
   [CrossRef] [Google Scholar] [Publisher Link]
2. Galih Putra Riatma et al., “Performance Evaluation and the Impact of File Size on Various AES Encryption Modes,” JARTEL JOURNAL: Telecommunication Network Journal, vol. 15, no. 2, pp. 121-128, 2025.
   [CrossRef] [Google Scholar] [Publisher Link]
3. Sumit Singh Dhanda, Brahmjit Singh, and Poonam Jindal, “Lightweight Cryptography: A Solution to Secure IoT,” Wireless Personal Communications, vol. 112, no. 3, pp. 1947-1980, 2020.
   [CrossRef] [Google Scholar] [Publisher Link]
4. Muhammad Rana, Quazi Mamun, and Rafiqul Islam, “Lightweight Cryptography in IoT Networks: A Survey,” Future Generation Computer Systems, vol. 129, pp. 77-89, 2022.
   [CrossRef] [Google Scholar] [Publisher Link]
5. Monika Jangra, and Buddha Singh, “Performance Evaluation of SIMON and SPECK Block Ciphers to Secure IoT-Enabled Smart Cities,” Advanced Computing and Intelligent Technologies, Lecture Notes in Electrical Engineering, Springer, Singapore, vol. 914, pp. 451-461, 2022.
   [CrossRef] [Google Scholar] [Publisher Link]
6. Abeer Tariq Maolood, Ekhlas Khalaf Gbashi, and Eman Shakir Mahmood, “Novel Lightweight Video Encryption Method based on ChaCha20 Stream Cipher and Hybrid Chaotic Map,” International Journal of Electrical and Computer Engineering, vol. 12, no. 5, pp. 4988-5000, 2022.
   [CrossRef] [Google Scholar] [Publisher Link]
7. Indu Radhakrishnan, Shruti Jadon, and Prasad B. Honnavalli, “Efficiency and Security Evaluation of Lightweight Cryptographic Algorithms for Resource-Constrained IoT Devices,” Sensors, vol. 24, no. 12, pp. 1-19, 2024.
   [CrossRef] [Google Scholar] [Publisher Link]
8. Mohammed El-hajj, Hussien Mousawi, and Ahmad Fadlallah, “Analysis of Lightweight Cryptographic Algorithms on IoT Hardware Platform,” Future Internet, vol. 15, no. 2, pp. 1-29, 2023.
   [CrossRef] [Google Scholar] [Publisher Link]
9. Catarina Silva et al., “Analysis of the Cryptographic Algorithms in IoT Communications,” Information Systems Frontiers, vol. 26, no. 4, pp. 1243-1260, 2024.
   [CrossRef] [Google Scholar] [Publisher Link]
10. Tiberius-George Sorescu et al., “Comparative Performance Analysis of Lightweight Cryptographic Algorithms on Resource-Constrained IoT Platforms,” Sensors, vol. 25, no. 18, pp. 1-17, 2025.
    [CrossRef] [Google Scholar] [Publisher Link]
11. Ventura Sarasa Laborda et al., “Study about the Performance of ASCON in Arduino Devices,” Applied Sciences, vol. 15, no. 7, pp. 1-34, 2025.
    [CrossRef] [Google Scholar] [Publisher Link]
12. A.V. Nageswara Rao et al., “End-to-End Encryption in IoT System with AES Technique,” Proceedings of the 1^st International Conference on Research and Development in Information, Communication and Computing Technologies (ICRDICCT 2025), vol. 3, pp. 105-112, 2025.
    [CrossRef] [Google Scholar] [Publisher Link]
13. William J. Buchanan, Shancang Li, and Rameez Asif, “Lightweight Cryptography Methods,” Journal of Cyber Security Technology, vol. 1, no. 3-4, pp. 187-201, 2017.
    [CrossRef] [Google Scholar] [Publisher Link]
14. Balajee Maram et al., “Lightweight Cryptography-based Deep Learning Techniques for Securing IoT-based E-Healthcare System,” 2023 2^nd International Conference on Automation, Computing and Renewable Systems (ICACRS), Pudukkottai, India, pp. 1334-1341, 2023.
    [CrossRef] [Google Scholar] [Publisher Link]
15. Abel Yeboah-Ofori et al., “Applied Cryptography in Network Systems Security for Cyberattack Prevention,” 2021 International Conference on Cyber Security and Internet of Things (ICSIoT), France, pp. 43-48, 2021.
    [CrossRef] [Google Scholar] [Publisher Link]
16. Abubakar Wakili, and Sara Bakkali, “Privacy-Preserving Security of IoT Networks: A Comparative Analysis of Methods and Applications,” Cyber Security and Applications, vol. 3, pp. 1-15, 2025.
    [CrossRef] [Google Scholar] [Publisher Link]
17. Paul C. Kocher, “Timing Attacks on Implementations of Diffie-Hellman, RSA, DSS, and other Systems,” Advances in Cryptology - CRYPTO '96, Lecture Notes in Computer Science, Springer, Berlin, Heidelberg, vol. 1109, pp. 104-113, 1996.
    [CrossRef] [Google Scholar] [Publisher Link]
18. Saad Khan et al., “A Comprehensive Review on Lightweight Cryptographic Mechanisms for Industrial Internet of Things Systems,” ACM Computing Surveys, vol. 58, no. 1, pp. 1-37, 2025.
    [CrossRef] [Google Scholar] [Publisher Link]