Analyzing the energy consumption of security protocols

ABSTRACT

Security is critical to a wide range of wireless data applications and services. While several security mechanisms and protocols have been developed in the context of the wired Internet, many new challenges arise due to the unique characteristics of battery powered embedded systems. In this work, we focus on an important constraint of such devices -- battery life -- and examine how it is impacted by the use of security protocols.We present a comprehensive analysis of the energy requirements of a wide range of cryptographic algorithms that are used as building blocks in security protocols. Furthermore, we study the energy consumption requirements of the most popular transport-layer security protocol SSL (Secure Sockets Layer). To our knowledge, this is the first comprehensive analysis of the energy requirements of SSL. For our studies, we have developed a measurement-based experimental testbed that consists of an iPAQ PDA connected to a wireless LAN and running Linux, a PC-based data acquisition system for real-time current measurement, the OpenSSL implementation of the SSL protocol, and parametrizable SSL client and server test programs. We investigate the impact of various parameters at the protocol level (such as cipher suites, authentication mechanisms, and transaction sizes, etc.) and the cryptographic algorithm level (cipher modes, strength) on overall energy consumption for secure data transactions.Based on our results, we discuss various opportunities for realizing energy-efficient implementations of security protocols. We believe such investigations to be an important first step towards addressing the challenges of energy efficient security for battery-constrained systems.

REFERENCES

• 1: U. S. Department of Commerce, The Emerging Digital Economy II. http://www.esa.doc.gov/508/esa/TheEmergingDigitalEconomyII.htm, 1999.
• 2: W. W. W. Consortium, The World Wide Web Security FAQ. http://www.w3.org/Security/faq/www-security-faq.html, 1998.
• 3: William Stallings, Cryptography and network security (2nd ed.): principles and practice, Prentice-Hall, Inc., Upper Saddle River, NJ, 1998
• 4: Bruce Schneier, Applied cryptography (2nd ed.): protocols, algorithms, and source code in C, John Wiley & Sons, Inc., New York, NY, 1995
• 5: LAN MAN Standards Committee of the IEEE Computer Society. Wireless LAN Medium Access Control (MAC) and Physical Layer (PHY) Specification: IEEE standard 802.11, 1990.
• 6: IPSec Working Group. http://www.ietf.org/html.charters/ipsec-charter.html.
• 7: SSL 3.0 Specification. http://wp.netscape.com/eng/ssl3/.
• 8: Wireless Application Protocol 2.0 - Technical White Paper. WAP Forum (http://www.wapforum.org/), Jan. 2002.
• 9: Compaq Ipaq Pocket PC. http://h20022.www2.hp.com, 2002.
• 10: D. W. Carman, P. S. Kruus, and B. J. Matt, Constraints and Approaches for Distributed Sensor Security. Network Associates Labs Tech. Rep. 00-010, 2000.
• 11: James Goodman , Anantha Chandrakasan , Abram P. Dancy, Design and implementation of a scalable encryption processor with embedded variable DC/DC converter, Proceedings of the 36th ACM/IEEE conference on Design automation, p.855-860, June 21-25, 1999, New Orleans, Louisiana, United States [doi>10.1145/309847.310087]
• 12: Zhijie Shi , Ruby B. Lee, Bit Permutation Instructions for Accelerating Software Cryptography, Proceedings of the IEEE International Conference on Application-Specific Systems, Architectures, and Processors, p.138, July 10-12, 2000
• 13: Jerome Burke , John McDonald , Todd Austin, Architectural support for fast symmetric-key cryptography, Proceedings of the ninth international conference on Architectural support for programming languages and operating systems, p.178-189, November 2000, Cambridge, Massachusetts, United States
• 14: N. Potlapally, S. Ravi, A. Raghunathan, and G. Lakshminarayana, "Optimizing public-key encryption for wireless clients," in Proc. IEEE Int. Conf. Communications, pp. 1050--1056, May 2002.
• 15: Srivaths Ravi , Anand Raghunathan , Nachiketh Potlapally , Murugan Sankaradass, System design methodologies for a wireless security processing platform, Proceedings of the 39th conference on Design automation, June 10-14, 2002, New Orleans, Louisiana, USA [doi>10.1145/513918.514113]
• 16: Neil Daswani , Dan Boneh, Experimenting with Electronic Commerce on the PalmPilot, Proceedings of the Third International Conference on Financial Cryptography, p.1-16, February 01, 1999
• 17: William Freeman , Ethan Miller, An Experimental Analysis of Cryptographic Overhead in Performance-Critical Systems, Proceedings of the 7th International Symposium on Modeling, Analysis and Simulation of Computer and Telecommunication Systems, p.348, March 24-28, 1999
• 18: Sandra Kay Miller, Facing the Challenge of Wireless Security, Computer, v.34 n.7, p.16-18, July 2001 [doi>10.1109/2.933495]
• 19: G. Apostolopoulos, V. Peris, P. Pradhan, and D. Saha, "Securing electronic commerce: Reducing the SSL overhead," IEEE Network, pp. 8--16, July 2000.
• 20: D. Wong , H. Fuentes , A. Chan, The Performance Measurement of Cryptographic Primitives on Palm Devices, Proceedings of the 17th Annual Computer Security Applications Conference, p.92, December 10-14, 2001
• 21: Srivaths Ravi , Anand Raghunathan , Nachiketh Potlapally, Securing wireless data: system architecture challenges, Proceedings of the 15th international symposium on System Synthesis, October 02-04, 2002, Kyoto, Japan [doi>10.1145/581199.581243]
• 22: A. Hodjat and I. Verbauwhede, "The energy cost of secrets in ad-hoc networks," in Proc. IEEE CAS Wkshp. Wireless Communication and Networking, Sept. 2002.
• 23: Markus Jakobsson , David Pointcheval, Mutual Authentication for Low-Power Mobile Devices, Proceedings of the 5th International Conference on Financial Cryptography, p.178-195, February 19-22, 2002
• 24: D. S. Wong and A. H. Chan, "Mutual authentication and key exchange for low power wireless communications," in Proc. IEEE MILCOM Conf., pp. 39--43, Oct. 2001.
• 25: Y. W. Law, S. Dulman, S. Etalle, and P. J. M. Havinga, Assessing Security-Critical Energy-Efficient Sensor Networks. Univ. of Twente, The Netherlands, Tech. Rep. TR-CTIT-02-18, July 2002.
• 26: R. Karri and P. Mishra, "Minimizing energy consumption of secure wireless session with QoS constraints," in Proc. Int. Conf. Communications, pp. 2053--2057, May 2002.
• 27: OpenSSL Project. http://www.openssl.org.
• 28: Familiar Project. http://familiar.handhelds.org.
• 29: National Instruments Corp. http://www.ni.com.
• 30: Vipul Gupta , Sumit Gupta , Sheueling Chang , Douglas Stebila, Performance analysis of elliptic curve cryptography for SSL, Proceedings of the 3rd ACM workshop on Wireless security, p.87-94, September 28-28, 2002, Atlanta, GA, USA [doi>10.1145/570681.570691]
• 31: Y. L. Yin, "The RC5 encryption algorithm: Two years on," RSA Laboratories' Cryptobytes, vol. winter, pp. 14--15, 1997.

INDEX TERMS

Primary Classification:
  E. Data
  E.3 DATA ENCRYPTION

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)
      C.2.1 Network Architecture and Design
          Subjects: Wireless communication
  C.4 PERFORMANCE OF SYSTEMS
      Subjects: Measurement techniques

  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection

General Terms:
Security

Keywords:
3DES, AES, DES, DSA, Diffie-Hellman, ECC, RSA, SSL, cryptographic algorithms, embedded system, energy analysis, handheld, low-power, security, security protocols