Search Results (3)

The explosive growth of the Internet of Things (IoT) has brought an array of resource-constrained devices to domains such as smart homes, industrial automation, and healthcare, raising substantial cybersecurity challenges. Lightweight wireless protocols, such as Thread, Zigbee, and Z-Wave, are integral to IoT connectivity, but the degree to which their embedded cryptographic mechanisms satisfy formal cybersecurity certification schemes remains underexplored. This work draws primarily on recent peer-reviewed publications and major conference proceedings to rigorously evaluate Thread, Zigbee, and Z-Wave against the Common Criteria (CC) Functional Requirements for Cryptography (FCS) as specified in CC:2022 and the EU cybersecurity certification scheme on Common Criteria (EUCC). The assessment focuses on essential CC cryptographic components, including key generation (FCS_CKM.1), secure key distribution (FCS_CKM.2), agreement protocols (FCS_CKM_EXT.7), cryptographic operations (FCS_COP.1), and random bit generators (FCS_RBG.1). The analysis reveals that Thread demonstrates the strongest alignment with CC requirements by leveraging Advanced Encryption Standard—Counter with CBC-MAC mode (AES-CCM) authenticated encryption and Elliptic Curve Diffie-Hellman (ECDH)-based key exchange within a decentralized trust framework. Zigbee matches this cryptographic strength at the primitive level, but its dependency on a centralized Trust Center for key management complicates full compliance with key lifecycle and distribution controls. Z-Wave, especially through its S2 Security framework, improves by incorporating authenticated ECDH exchanges, though proprietary constraints and limited protocol transparency remain obstacles to independent assurance. This comparative study concludes that while all three protocols provide a baseline of robust cryptographic security, only Thread currently aligns with CC and EUCC certification schemes. Zigbee and Z-Wave will require additional protocol hardening and enhancement of cryptographic key lifecycle management to achieve comparable assurance levels. Ensuring conformance with formal cybersecurity standards is imperative for building trust and resilience across critical IoT infrastructures. Full article

The intelligentization and connectedness of vehicles make vehicle cybersecurity an important research topic. In-vehicle key management is a critical function in vehicle cybersecurity countermeasures. After describing previous research on vehicle key management and the development trend of vehicle network architecture, a key management scheme for in-vehicle multi-layer electronic control units (ECUs) is proposed. The scheme is based on authenticated key exchange protocol 2 (AKEP2) and on-the-air (OTA) technology. Then, the key storage and trusted key usage based on secure hardware are analyzed and studied. Moreover, the AES Counter with CBC-MAC (AES-CCM) algorithm, which uses fewer keys, is introduced to in-vehicle secure communication. The simulation analysis for the proposed OTA-based key update protocol verifies the protocol’s security. The validity of the hardware-based trusted key usage environment and the feasibility of the AES-CCM algorithm for the CAN FD bus are proven with corresponding experiments. Full article

Because of the ubiquity of Internet of Things (IoT) devices, the power consumption and security of IoT systems have become very important issues. Advanced Encryption Standard (AES) is a block cipher algorithm is commonly used in IoT devices. In this paper, the power consumption and cryptographic calculation requirement for different payload lengths and AES encryption types are analyzed. These types include software-based AES-CB, hardware-based AES-ECB (Electronic Codebook Mode), and hardware-based AES-CCM (Counter with CBC-MAC Mode). The calculation requirement and power consumption for these AES encryption types are measured on the Texas Instruments LAUNCHXL-CC1310 platform. The experimental results show that the hardware-based AES performs better than the software-based AES in terms of power consumption and calculation cycle requirements. In addition, in terms of AES mode selection, the AES-CCM-MIC64 mode may be a better choice if the IoT device is considering security, encryption calculation requirement, and low power consumption at the same time. However, if the IoT device is pursuing lower power and the payload length is generally less than 16 bytes, then AES-ECB could be considered. Full article