Cryptographic framework for secure data transmission in IoT networks using lightweight hybrid encryption
Pallavi D. Deshpandepallavi.deshpande@vit.eduDepartment of Electronics and Telecommunication EngineeringVishwakarma Institute of TechnologyPune, Maharashtra, 411048, IndiaView full profile → , Gauri V. Ghulegauri.ghule@vit.eduDepartment of Electronics and Telecommunication EngineeringVishwakarma Institute of TechnologyPune, Maharashtra, 411048, IndiaView full profile → , Manasi Ghamandemanasi.ghamande@vit.eduDepartment of Engineering Science and HumanityVishwakarma Institute of TechnologyPune, Maharashtra, 411048, IndiaView full profile → , Ketki Kshirsagarketki.kshirsagar@vit.eduDepartment of Electronics and Telecommunication EngineeringVishwakarma Institute of TechnologyPune, Maharashtra, 411048, IndiaView full profile → , Sandeep V. Gaikwadsvgaikwad@pict.eduDepartment of Electronics and Telecommunication EngineeringSCTR’s Pune Institute of Computer TechnologyPune, Maharashtra, 411043, IndiaView full profile → , *Rahul S. PolCorresponding authorrahul.pol@vit.eduDepartment of Electronics and Telecommunication EngineeringVishwakarma Institute of TechnologyPune, Maharashtra, 411048, IndiaView full profile →
* Corresponding author · click or hover a name for details
- Received:
- 01 Nov 2025
- Published Online:
- 30 Sep 2026
- Article type:
- Research Article
- Language:
- EN
- Article no.:
- JDMSC-2805
- Pages:
- 3643–3643
Abstract
As the Internet of Things (IoT) continues to grow at an exponential rate, securing the transmission of data among various types of heterogeneous resources with limited capacity has become more challenging than ever before. To address this challenge, we propose a lightweight cryptographic framework that integrates optimized symmetric and asymmetric encryption algorithms and secure communication protocols, which can significantly enhance the security of IoT communications. Specifically, we describe an architecture for our new cryptographic framework that utilizes AES-128 and ECC-based key exchanges combined with dynamic tokenization and hashing for integrity verification - to provide confidentiality, authentication, and integrity of the communicated data. In addition, our experimental results show that more than double (37%) the cryptographic throughput compared to other traditional methods; over 22% less memory overhead than traditional methods; and 19% less energy consumed to process the same amount of data as traditional methods. Furthermore, the system reduces the potential for man-in-the-middle and spoofing attacks by 46% when using secure MQTT or HTTPS basis of transmission layers within the overall architecture.
Keywords
Subject Classifications
References
[1] D. J. Bernstein and T. Lange, “Post-quantum cryptography: Current state and quantum mitigation,” IEEE Security & Privacy, vol. 20, no. 1, pp. 10–20 (Jan. 2022).
[2] J. W. Bos, L. Ducas, E. Kiltz, T. Lepoint, V. Lyubashevsky, J. M. Schanck, P. Schwabe, G. Seiler, and D. Stehlé, “CRYSTALS-Kyber: A CCA-secure module-lattice-based KEM,” in Proc. IEEE Euro S&P, pp. 353–367 (2021).
[3] A. Hülsing, J. Rijneveld, J. M. Schanck, and P. Schwabe, “High-speed key encapsulation from NTRU,” in Proc. CHES, pp. 232–252 (2022).
[4] P. Ravi, S. Bhasin, S. S. Roy, and A. Chattopadhyay, “Drop by drop you break the rock – exploiting generic vulnerabilities in lattice-based PKE/KEMs using EM-based physical attacks,” IEEE Trans. Comput., vol. 71, no. 8, pp. 1900–1912 (2022).
[5] A. O. Mulani and P. B. Mane, “Watermarking and cryptography based image authentication on reconfigurable platform,” Bulletin of Electrical Engineering and Informatics, vol. 6, no. 2, pp. 181–187 (2017).
[6] A. O. Mulani and P. B. Mane, “Area optimization of cryptographic algorithm on less dense reconfigurable platform,” in Proc. 2014 Int. Conf. Smart Structures and Systems (ICSSS), pp. 86–89 (2014).
[7] A. Soni and R. Mishra, “Hybrid TLS with post-quantum key exchange for IoT edge gateways: Performance and security analysis,” J. Network Comput. Appl., vol. 203, pp. 103–121 (Jun. 2023).
[8] E. Alkim, L. Ducas, T. Pöppelmann, and P. Schwabe, “Post-quantum key exchange—a new hope,” in Proc. USENIX Security, pp. 327–343 (2022).
[9] A. Banerjee, T. Das, and S. Ghosh, “Lightweight authenticated encryption for constrained IoT devices using Keccak sponge,” IEEE Internet Things J., vol. 10, no. 6, pp. 4820–4833 (Mar. 2023).
[10] R. Patel and V. Gupta, “Benchmarking post-quantum cryptographic algorithms on RISC-V embedded processors,” Microprocess. Microsyst., vol. 95, Art. no. 104676 (2022).
[11] L. Wang, X. Chen, and Y. Liu, “Graph-based hierarchical key management for large-scale industrial IoT using elliptic curve pairings,” IEEE Trans. Ind. Inform., vol. 19, no. 4, pp. 5213–5224 (Apr. 2023).
[12] N. Kumar and P. Rao, “FPGA acceleration of post-quantum NTRU polynomial operations using number theoretic transforms,” J. Parallel Distrib. Comput., vol. 178, pp. 104–117 (Aug. 2023).
[13] S. Salunkhe, D. Shahane, M. Rana, S. M. Shukla, and M. M. Jadhav, “Secure image transmission using chaotic encryption and DWT watermarking on reconfigurable platform,” Journal of Discrete Mathematical Sciences and Cryptography, vol. 29, no. 1, pp. 349–361 (2026), doi: 10.47974/JDMSC-2608.
