An Efficient Security Solution for IoT and Cloud

Security using Lattice-based Cryptography

Piyush Bagla Ravi Sharma Amit Kumar Mishra
Department of Computer Science & Department of Computer Science & Department of Computer Science &
Engineering, Engineering, Engineering,
National Institute of Technology, National Institute of Technology, Graphic Era Hill University,
Jalandhar, Punjab, (India) Jalandhar, Punjab, (India) Dehradun, (India)
2023 International Conference on Emerging Trends in Networks and Computer Communications (ETNCC) | 979-8-3503-1487-8/23/$31.00 ©2023 IEEE | DOI: 10.1109/ETNCC59188.2023.10284931

[email protected] [email protected] [email protected]

Ankur Dumka Neeraj Kumar Pandey

Neha Tripathi Department of Computer Science & Graphic Era (Deemed to be
Department of Computer Science & Engineering, Women Institute of University), Dehradun, (India)
Engineering, Graphic Era (Deemed to Technology, Dehradun [email protected]
be University), Dehradun, (India) [email protected]
[email protected]

Abstract- This study introduces lattice-based cryptography to Lattice-based encryption is one of the most promising
enhance security in IoT and cloud systems. It focuses on two candidates for post-quantum cryptography due to
fundamental challenges in lattice-based encryption. The paper
compares the advantages and disadvantages of lattice-based Lattice-based cryptography is covered in detail in the
encryption with traditional RSA and elliptic curve article [3], along with its uses, research areas, and potential
cryptography. Furthermore, it presents a novel approach called future applications. It begins by describing lattice-based
"Lattice-based secure data aggregation," specifically designed encryption, including its security features and operational
for IoT and cloud systems, ensuring confidentiality and integrity aspects. It also highlights some areas of interest for lattice-
during data aggregation. The paper covers various aspects, such based cryptography research, such as parameter selection, key
as data encryption, aggregation, decryption, and management schemes, efficient algorithms, and
implementation on resource-constrained devices. Performance implementations. Finally, it outlines some future scope for
and security evaluations compare the proposed algorithm with lattice-based cryptography in terms of post-quantum security
other data aggregation techniques, demonstrating its
effectiveness against attacks, computational efficiency, and low The article [5] proposes a novel way of speeding up lattice-
memory requirements. The paper also addresses the approach's based cryptography (LBC), a type of encryption resistant to
limitations and proposes potential areas for future research. quantum attacks. The authors use memristor crossbar arrays,
Overall, the proposed lattice-based cryptography offers a devices that perform matrix-vector multiplications (MVMs) in
promising solution for privacy and security-sensitive IoT and parallel with low power consumption. They focus on SABER,
cloud systems, making it a viable option for widespread an LBC scheme that uses MVMs extensively, and show that
adoption. it can be accelerated by up to 10x with crossbars compared to
traditional systems.
Keywords— Lattice-based, cryptography, cloud, IoT.
The article [6] proposes a new scheme for secure and
I. INTRODUCTION private communication in 5G-enabled vehicular networks
(VNs), which connect vehicles and infrastructure. The method
As more sensitive data is stored and transmitted over these
is based on lattice cryptography, a type of post-quantum
networks, traditional cryptographic schemes like RSA and
cryptography that can resist attacks from quantum computers.
ECC may no longer be sufficient to protect against advanced
The scheme uses a lightweight key exchange protocol and a
attacks. Lattice-based cryptography has emerged as a
signature algorithm to authenticate vehicles and protect their
promising alternative, offering strong security guarantees and
identities. The authors claim that their scheme has better
efficient implementations for constrained and cloud
performance and security than existing schemes.
computing. In n-dimensional space, a lattice is a mathematical
structure that can be visualized as a point grid. Lattice-based The system enables a user to provide a proxy server
cryptography bases its cryptographic primitives on the decryption right and permits the proxy server to conduct
complexity of particular lattice problems. keyword searches on the user's behalf over encrypted data. In
addition to supporting fuzzy and multi-keyword searches, the
Finally, lattice-based schemes provide efficient
approach also mon assumptions. The authors compare their
implementations that are easily parallelizable, making them
plan to others and demonstrate that it performs better in
ideal for cloud computing environments.
computing and communication expenses.
II. LITERATURE REVIEW The model assigns security labels to users and data objects
One of these challenges and the cloud environment from based on sensitivity levels and prevents unauthorized access
quantum attacks that could break existing cryptographic or leakage. The paper also presents a prototype model
schemes. implementation using Amazon Web Services (AWS) and
evaluates its performance and security.
Post-quantum cryptography is a branch of cryptography that
aims to develop secure algorithms to resist quantum attacks. The paper also proposes an efficient electronic medical
records (EMR) management model that uses blockchain and
cloud storage [10].

979-8-3503-1487-8/23/$31.00 ©2023 IEEE

Authorized licensed use limited to: VIT University- Chennai Campus. Downloaded on February 24,2025 at 06:44:20 UTC from IEEE Xplore. Restrictions apply.
 Another significant contribution is by Microsoft. This
software library developed by Microsoft Research implements
ring learning with errors (R-LWE) based cryptographic
algorithms for post-quantum security [11]. The library
contains arithmetic functions for operations in power-of-2
cyclotomic rings, offers at least 128 bits of classical and
quantum security, and guards against timing and cache-timing
attacks [12].

III. LATTICE-BASED CRYPTOGRAPHY WORKING

Figure 1 shows how lattice-based cryptography works
might look something like this:

Fig.2. Working of Lattice Trapdoor

Figure 3 shows how a lattice trapdoor works. A trapdoor

is a special basis vector that allows one to find short vectors in
a lattice easily. The trapdoor can be used to generate public
keys for encryption or signatures.

Fig.1. Example of 2-dimensional Lattice

This is an example of a two-dimensional lattice. The points

are called lattice points, and the shortest distance between any
two adjacent points is called the lattice basis. The basis vectors
can generate any other point in the lattice by linear
combinations.
In lattice-based cryptography, messages are encoded and
decoded using operations on lattices. For example, one way to
encrypt a message is to add some noise (a small random
vector) to a point on the lattice and send it to the receiver. The
receiver can use their secret key (a special basis vector) to find Fig.3. Homomorphic Encryption Scheme
the closest point on the lattice and subtract it from the noisy
point to recover the message. This is called Learning with Figure 4 shows how a fully homomorphic encryption
Errors (LWE) encryption [^4^][3] [^2^][4]. scheme works. Arbitrary calculations can be performed using
an utterly homomorphic encryption technique without initially
decrypting the data. The scheme uses a bootstrapping
Figure 2 shows how LWE encryption works. The sender technique that reduces the noise level of encrypted data after
chooses a random point on the lattice (s) and adds some noise each operation.
(e). The receiver uses their secret key (a) to find the closest
point on the lattice (as) and subtracts it from the noisy point
(c) to get the message (m).

83
Authorized licensed use limited to: VIT University- Chennai Campus. Downloaded on February 24,2025 at 06:44:20 UTC from IEEE Xplore. Restrictions apply.
 Fig.4. Encryption Scheme of Lattice
security guarantees against attacks while allowing for efficient
IV. PROPOSED ALGORITHM computations. Finally, the scheme is well-suited for resource-
The proposed scheme uses a ring-based lattice, a type of lattice constrained devices, as it can be implemented with relatively
structure particularly well-suited for homomorphic low computational complexity and memory requirements.
encryption. The scheme involves several steps: There are following steps for the execution of proposed
algorithm need to be follow:
This product is then added to another random polynomial
with small coefficients to create the ciphertext. Input:
3. Homomorphic Operations: Homomorphic operations • A set of n IoT devices D = {d1, d2, ..., dn} that sense data
can be performed on the encrypted data. In this scheme, the and transmit to a cloud server.
homomorphic operation is multiplication. The encrypted data • A public parameter q is a prime number representing the
is multiplied by another encrypted data to create a new modulus for the lattice-based encryption scheme.
encrypted result.
• A public key pk and a private key sk, generated by a key
4. Decryption: The encrypted result can be decrypted generation algorithm using a lattice-based encryption scheme.
using the secret key to obtain the result.
Output:
This homomorphic encryption scheme offers several
advantages for IoT and cloud security applications. First, it • An aggregated value of the sensed data from all IoT
allows computations to be performed on encrypted data, devices.
which helps to protect the privacy and security of sensitive
data. Additionally, using a ring-based lattice provides strong

84
Authorized licensed use limited to: VIT University- Chennai Campus. Downloaded on February 24,2025 at 06:44:20 UTC from IEEE Xplore. Restrictions apply.
Steps:
1. Each IoT device di generates a random polynomial f(x)
in the ring R_q[x]/(x^n+1) and encrypts its sensed data xi as
ciphertext ci using the public key pk, as follows:
ci = Enc_pk(xi + f(xi))
2. Each IoT device di sends its encrypted data ci to the
cloud server.
3. The cloud server collects all the encrypted data ci and
decrypts each ciphertext ci using its private key sk, as follows:
xi + f(xi) = Dec_sk(ci)
4. The cloud server computes the aggregated value y as the
sum of all the decrypted data:
y = Σ(xi + f(xi)), for all di in D
5. The cloud server encrypts the aggregated value y as a
ciphertext cy using the public key pk, as follows:
cy = Enc_pk(y)
6. The cloud server sends the encrypted aggregated value
cy to all IoT devices.
7. Each IoT device di decrypts the aggregated value cy
using its private key sk, as follows:
y = Dec_sk(cy)
8. Each IoT device di computes its contribution to the
overall data aggregation as follows:
z = xi - y/n
9. Each IoT device di encrypts its contribution z as a
ciphertext cz using the public key pk, as follows:
cz = Enc_pk(z)
10. Each IoT device di sends its encrypted contribution cz
to the cloud server.
11. The cloud server collects all the encrypted
contributions cz and decrypts each ciphertext cz using its
private key sk, as follows: z = Dec_sk(cz)
12. The cloud server computes the final aggregated value
as the sum of all the decrypted contributions:
w = Σz, for all di in D
13. The cloud server sends the final aggregated value w to
all IoT devices.

Fig.5. Algorithm Flowchart

This algorithm uses a lattice-based encryption scheme to
ensure the privacy of the sensed data and the aggregated value.
It also provides the integrity and authenticity of the data by

85
Authorized licensed use limited to: VIT University- Chennai Campus. Downloaded on February 24,2025 at 06:44:20 UTC from IEEE Xplore. Restrictions apply.
using a secure key exchange protocol between IoT devices secure computation and communication are essential.
and the cloud server. The algorithm can be implemented Nonetheless, RSA and ECC may continue to be favored for
efficiently on resource-constrained devices and can be used applications requiring rapid encryption and decryption.
for a wide range of IoT and cloud security applications. Lattice-based cryptography offers unique benefits for IoT and
• Originality: It is essential to mention that the algorithm cloud security applications, although each cryptographic
proposed here is not a new algorithm but rather an application approach has strengths and weaknesses. Lattice-based
of lattice-based cryptography to a specific problem in IoT and schemes offer robust security guarantees, efficient
cloud security. While the basic steps of the algorithm are implementations, and resistance to quantum attacks, making
similar to those in other secure data aggregation schemes, the them ideal for resource-constrained devices and distributed
use of lattice-based encryption and the specific steps taken to computing environments. However, when selecting a
ensure privacy, integrity, and authenticity set this algorithm cryptographic approach, it is essential to consider the specific
apart from others. requirements of each application carefully.
• Advantages: One of the key advantages of this algorithm In IoT and cloud security, where devices are frequently
is its use of lattice-based encryption, which provides strong resource-constrained, and computational resources are
security guarantees and resistance to quantum attacks. In limited, efficiency is crucial. Lattice-based schemes are well-
addition, the algorithm is efficient and can be implemented on suited to such environments due to their efficient
resource-constrained devices, making it well-suited for IoT implementations.
applications. Using a secure key exchange protocol also Typically, the cost of computing inner products between
ensures that the data is transmitted securely and that the cloud vectors in the lattice determines the computational
server can verify the authenticity of the IoT devices. complexity of lattice-based schemes. The time complexity of
the fastest known algorithms for solving the SVP and LWE
• Implementation: While the algorithm is theoretically
problems is O(2(n/2)), where n is the dimension of the lattice.
sound, there may be challenges in implementing it in a real-
This compares favorably to other post-quantum cryptography
world setting. For example, selecting appropriate lattice
parameters and ensuring efficient encryption and decryption schemes, whose security parameters have exponential time
on resource-constrained devices may require careful complexity. In addition to efficient key generation and
optimization. In addition, the algorithm may need to be signature verification algorithms, lattice-based schemes are
adapted to specific IoT applications and communication suitable for real-world applications.
protocols. Memory requirements are another essential factor to consider
in environments with limited resources. For lattice-based
• Limitations: One limitation of this algorithm is that it schemes, key generation, encryption, and decryption require
assumes that all IoT devices are honest and transmit their data relatively modest amounts of memory. The BLISS signature
and contributions correctly. In reality, malicious devices may
scheme, for instance, requires only 1 kilobyte of memory for
attempt to disrupt the data aggregation process or leak
key generation and signature verification, making it suitable
sensitive information. Therefore, additional security measures
may be needed to detect and mitigate such attacks. for devices with limited memory resources.
In IoT and cloud security, where devices may need to
V. COMPARATIVE ANALYSIS WITH CRYPTOSYSTEM communicate over low-bandwidth networks, communication
For IoT and cloud security, lattice-based cryptography is not overhead is also an important factor to consider. Typically,
the only cryptographic technique used. lattice-based schemes have modest communication
overheads due to the small size of the public keys and
Lattice-based cryptography has several advantages over other
cryptosystems in terms of security. Lattice-based schemes signatures. For instance, the BLISS signature scheme
resist quantum attacks, whereas RSA and ECC are generates 520-bit signatures, making them suitable for
susceptible. In addition, lattice-based methods provide transmission over low-bandwidth networks.
provable security guarantees based on complex mathematical Lattice-based schemes are ideally suited for IoT and cloud
security applications because their overall efficiency is one of
problems, including the SVP and LWE problems. Although
their key strengths. They are ideal for resource-constrained
RSA and ECC also rely on mathematical issues, their security
is not as well understood. devices and distributed computing environments due to their
IoT and cloud security applications must also take efficiency low computational complexity, modest memory
into account. Schemes based on lattices provide efficient requirements, and small communication overheads.
implementations with low computational complexity,
VI. CONCLUSION
memory requirements, and communication overhead. RSA
Lattice-based cryptography has emerged as a promising
and ECC, in comparison, can be computationally expensive,
particularly for large key sizes. Symmetric-key cryptography alternative to traditional cryptosystems for securing IoT and
can be effective, but it requires the secure distribution of cloud computing environments. Lattice-based encryption,
secret keys, which can be difficult in IoT and cloud signature schemes, and cryptographic protocols like a key
environments. exchange and homomorphic encryption offer many
advantages, including resistance to quantum attacks, efficient
The suitability for IoT and cloud security applications also
depends on the application-specific requirements. Due to its implementations, and strong security guarantees. These
efficient implementations and resistance to quantum attacks, schemes have shown great potential for a wide range of IoT
lattice-based cryptography is well-suited for devices with and cloud security applications. However, several challenges
limited resources. Moreover, lattice-based schemes are still need to be addressed to fully realize the potential of
advantageous in distributed computing environments where lattice-based cryptography, including designing efficient

86
Authorized licensed use limited to: VIT University- Chennai Campus. Downloaded on February 24,2025 at 06:44:20 UTC from IEEE Xplore. Restrictions apply.
schemes, developing standardized protocols, and managing [4] Tao, X., Qiang, Y., Wang, P., & Wang, Y. (2023). LMIBE:
Lattice-Based Matchmaking Identity-Based Encryption for
implementation challenges on resource-constrained devices. Internet of Things. IEEE Access.
As research and development in this area continue, lattice- [5] Singh, S., Fan, X., Prasad, A. K., Jia, L., Nag, A.,
based cryptography is expected to play an increasingly Balasubramonian, R., ... & Shi, E. (2023). XCRYPT:
important role in securing IoT and cloud computing Accelerating Lattice Based Cryptography with Memristor
Crossbar Arrays. arXiv preprint arXiv:2302.00095.
environments. [6] Al-Mekhlafi, Z. G., Al-Shareeda, M. A., Manickam, S.,
While lattice-based cryptography offers many advantages for Mohammed, B. A., & Qtaish, A. (2023). Lattice-Based
IoT and cloud security, several challenges still need to be Lightweight Quantum Resistant Scheme in 5G-Enabled
addressed. One main challenge is designing efficient lattice- Vehicular Networks. Mathematics, 11(2), 399.
[7] Zhang, X., Tang, Y., Wang, H., Xu, C., Miao, Y., & Cheng, H.
based schemes that can provide strong security guarantees. (2019). Lattice-based proxy-oriented identity-based encryption
While lattice-based schemes resist certain types of attacks, with keyword search for cloud storage. Information Sciences,
much research is still needed to ensure their security in 494, 193-207.
[8] N. K. Pandey, M. Diwakar, A. Shankar, P. Singh, M. R. Khosravi,
practical settings.
V. Kumar “Energy Efficiency Strategy for Big Data in Cloud
Another challenge is in developing efficient implementations Environment using Deep Reinforcement Learning” Mobile
of lattice-based schemes for resource-constrained devices. Information Systems Hindawi Publication, 15 pages, August
While lattice-based schemes are efficient in theory, their 2022 https://doi.org/10.1155/2022/8716132
practical implementation on IoT devices can be challenging [9] Liu, L., Wang, S., He, B., & Zhang, D. (2019). A keyword-
due to their limited processing power and memory. searchable ABE scheme from lattice in cloud storage
environment. Ieee Access, 7, 109038-109053.
Finally, there is a need for standardized lattice-based [10] N. K. Pandey, K. Kumar, G. Saini, A. K. Mishra “Security Issues
cryptographic protocols that can be easily implemented and and Challenges in Cloud of Things-Based Applications for
deployed across different IoT and cloud computing Industrial Automation” Annals of Operations Research 2023.
environments. This will require collaboration between https://doi.org/10.1007/s10479-023-05285-7.
researchers, industry, and standards organizations to ensure [11] A. K. Mishra, M. Wazid, D. P. Singh, A. K. Das, S. Roy and S.
Shetty, "ACKS-IA: An Access Control and Key Agreement
that these protocols are interoperable and meet different Scheme for Securing Industry 4.0 Applications," in IEEE
applications' security and efficiency requirements. Transactions on Network Science and Engineering, doi:
10.1109/TNSE.2023.3296329.
REFERENCES [12] A. K. Mishra, M. Wazid, D. P. Singh, A. K. Das, J. Singh, and A.
V. Vasilakos, “Secure Blockchain-Enabled Authentication Key
[1] Seyhan, K., Nguyen, T. N., Akleylek, S., & Cengiz, K. (2022). Management Framework with Big Data Analytics for Drones in
Lattice-based cryptosystems for the security of resource- Networks Beyond 5G Applications,” Drones, vol. 7, no. 8, p. 508,
constrained IoT devices in post-quantum world: a survey. Cluster Aug. 2023, doi: https://doi.org/ 10.3390/ drones 7080508.
Computing, 25(3), 1729-1748.
[2] Chaudhary, R., Aujla, G. S., Kumar, N., & Zeadally, S. (2018).
Lattice-based public key cryptosystem for internet of things
environment: Challenges and solutions. IEEE Internet of Things
Journal, 6(3), 4897-4909.
[3] Pradhan, P. K., Rakshit, S., & Datta, S. (2019, March). Lattice
based cryptography: Its applications, areas of interest & future
scope. In 2019 3rd International Conference on Computing
Methodologies and Communication (ICCMC) (pp. 988-993).
IEEE.

87
Authorized licensed use limited to: VIT University- Chennai Campus. Downloaded on February 24,2025 at 06:44:20 UTC from IEEE Xplore. Restrictions apply.