Information Elements Clause Samples

Information Elements. In the mean time, Public Key Cryptography (PKC) - a fundamental building block in most KMPs - has become viable also on constrained devices. Indeed, we are now at a point in time where Elliptic Curve Cryptography (ECC) is not only affordable on today’s ever more powerful and (memory) capable constrained devices [7], [16], but it is even cheap and natively introduced in the latest generation of IIoT devices [14]. Such technological evolution is bringing us to a point where the primary concern is not anymore the computationally efficient support of ECC, but rather stems in how to use such primitives for building airtime-efficient authentication and key management protocols. Indeed, most of the proposed PKC- based handshakes [15] suffer from a significant shortcoming in terms of number and size of the messages exchanged [18]. In particular, transmission of long messages containing conventional X.509 certificates [12] yields a sizeable airtime consumption, whose major consequences are i) a significant latency in the authentication protocol when run over a typical low-rate communication channel, and ii) a significant power consumption, being airtime a major power drain component. Contribution. Based on these premises, the contribution of this letter is threefold. First, our proposed approach is among the first to concretely integrate and experimentally evaluate “implicit” Elliptic Curve Qu-Vanstone (ECQV) certificates [1] within an authentication and key agreement protocol devised for IIoT devices and scenarios. While in our former work [18] performance were affected by a software implementation of the ECC primitives, this work shows that the viability of such technique is greatly improved by the native (e.g., hardware) and efficient support of ECC over modern IIoT de- vices. Second, our novel proposed KMP relies on an ordinary and widely established “fixed” Elliptic Curve ▇▇▇▇▇▇-▇▇▇▇▇▇▇ (ECDH) exchange [6], which provides authentication without any explicit signature, as well as ephemeral key derivation (and very fast re-keying, when necessary). This is obtained by exchanging per-session nonces and by securing the ex- change using a minimized number of messages (two per each direction, i.e., four in total). Finally, experimental performance results over both single-hop and multi-hop networks show significant improvements in terms of maximal airtime savings (up to 86,7%) with respect to a traditional approach relying on an ECDH exchange with public coefficients...