rTLS: Secure and Efficient TLS Session Resumption for the Internet of Things

Area of Science:

• Computer Science
• Network Security

Background:

• Transport Layer Security (TLS) 1.3 offers a zero round-trip time (0-RTT) session resumption for reduced latency.
• The standard 0-RTT protocol is vulnerable to replay attacks, especially in Internet of Things (IoT) contexts.
• Previous work adapted 0-RTT for IoT, addressing bandwidth and replay vulnerabilities, but lacked formal security analysis.

Purpose of the Study:

• To provide a formal security analysis of the adapted 0-RTT protocol for IoT.
• To enhance the protocol's resilience and reduce implementation ambiguity.
• To offer more accurate performance estimates for the improved IoT security protocol.

Main Methods:

• Formal security analysis using the OFMC (Open Formal Methods Compiler) tool.
• Protocol adaptation to mitigate replay attacks and reduce bandwidth overhead.
• Performance estimation and protocol refinement for implementation clarity.

Main Results:

• The adapted 0-RTT protocol demonstrates enhanced security against replay attacks through formal verification.
• The protocol maintains reduced bandwidth overhead, suitable for IoT periodic transmissions.
• Adjustments were made to decrease implementation ambiguity and improve overall resilience.

Conclusions:

• The formally verified 0-RTT protocol is a robust and efficient security solution for IoT applications.
• The enhanced protocol balances security, performance, and implementation ease for resource-constrained devices.
• This work provides a strong foundation for secure and efficient IoT communication using TLS 1.3.