Design, Architecture and Performance Evaluation of the Wireless Transport Layer Security

Abstract

Communication protocols for wireless networks have specified security layers, with high-level encryption strength. The dedicated to security layer of Wireless Application Protocol (WAP), is the Wireless Transport Layer Security (WTLS). In this paper, an efficient architecture for the hardware implementation of WTLS is proposed. The introduced system supports bulk encryption, authentication and data integrity. The proposed architecture operates alternatively for a set of ciphers, IDEA, DES, RSA, D.H., SHA-1 and MD5. It is based on two reconfigurable design units: the Reconfigurable Authentication Unit and the Reconfigurable Integrity Unit. These units operate alternatively for different ciphers and achieve to allocate minimized resources, at the same time. The introduced security system has been implemented in an FPGA device. The supported ciphers performance is compared with previously published works, and it has been proven superior to them, in most of the cases. The system's synthesis results prove that the proposed architecture is a flexible and powerful solution for WTLS integration of today's and future wireless networks. The system can be applied to wireless communications servers and mobile devices also. Finally, the proposed architecture can be used as a powerful security engine, in WAP communication networks, with special security demands.

On Security Management: Improving Energy Efficiency, Decreasing Negative Environmental Impact, and Reducing Financial Costs for Data Centers

“…to the overestimation of security measures, which causes an unreasonable increase in the system load [24,25]. System's performance is especially important in environments with limited resources, including wireless sensor networks and mobile devices.…”

“…The latest results show [24,25] that in many cases the best way is to determine the required level of protection and then adjust security measures. (Among the means to meet these challenges one can indicate the security metrics [27].)…”

Cryptographic hardware & embedded systems for communications

“…Until nowadays different hash functions have been adopted by wireless communications protocols and for networking data transmission: RIPEMD, SHA-1, SHA-2, TIGER, etc, coming to the forthcoming SHA-3 standard, by the end of the year [10][11][12][13][14][15].…”

“…67 2017 2171 MD5 [11] 70 1653 442 SHA-1 [12] 70 1653 551 SHA-2 [13] 83 1060 291 BLAKE [14] 52 116,48 3017 HAVAL [15] 75 196 1708…”

A Low-Power and High Throughput Reconfigurable Data Integrity Unit for Software Radio

“…The four Data Transformation Rounds are similar, but its one performs a different operation. MA components indicate modulo addition 232, while the shifters components define left shift rotations of the input data block [7]. The Data Transformation Round I operation is based on a Nonlinear Function i transformation of the three of BIn, CIn, and DIn, inputs.…”