Optimizing TLS/SSL for IoT Devices: Performance Enhancements and Security Considerations
Mohammed Ibrahim El-Hajj, Lalande Lucas Lev Michel · 2024
The Internet of Things (IoT) necessitates robust communication protocols to safeguard consumer privacy. However, due to their limited computational resources, IoT devices often face challenges with the overhead and energy consumption associated with Transport Layer Security (TLS) and Secure Socket Layer (SSL). This study investigates the optimization of TLS/SSL for IoT environments by fine-tuning parameters such as cipher suites, transport protocols, and handshake mechanisms, including session resumption and Pre-Shared Key (PSK). Key focus areas include the application of low-complexity cryptographic functions like Elliptic Curve Cryptography (ECC) and the evaluation of transport protocols (TCP vs. UDP). The research evaluates the effects of these optimizations on connection speed, throughput, and energy efficiency, while also conducting a security analysis to uncover vulnerabilities, including TLS downgrade and Man-In-The-Middle (MITM) attacks. By providing a comparative analysis of TLS and DTLS performance and security, this comprehensive study offers insights into the trade-offs between security and performance, aiming to determine effective optimization strategies for IoT devices.