Integrating LightSaber KEM into CoJP for Quantum-Resistant Key Distribution in 6TiSCH Networks

Hakan Aydın

doi:10.31466/kfbd.1832635

TR EN

6TiSCH Ağlarında Kuantum Dayanıklı Anahtar Dağıtımı için LightSaber KEM'in CoJP'ye Entegre Edilmesi

Öz

Bu çalışma, 6TiSCH ağlarında kullanılan CoJP’e, kafes tabanlı bir Anahtar Kapsülleme Mekanizması olan LightSaber’in entegre edilmesi yoluyla kuantum-dirençli bir geliştirme sunmaktadır. Önerilen yaklaşım, cihaz ağa katılım sürecinde bağlantı katmanı oturum anahtarı (K2) dağıtımı için geleneksel olarak kullanılan mevcut PSK tabanlı kimlik doğrulama prosedürünü koruyarak kuantum-dirençli bir alternatifle değiştirmektedir. Özellikle, KEM aracılığıyla elde edilen paylaşılan gizli değer, bağlam-temelli bir anahtar türetme süreci ile birleştirilerek IEEE 802.15.4 AES-CCM için gerekli olan 128-bit K2anahtarı güvenli biçimde üretilmektedir. LightSaber, modüler bir kriptografik bileşen olarak Contiki-NG işletim sistemine taşınmış ve endüstriyel araştırmalarda kullanılan ARM Cortex-M3 tabanlı bir IIoT test platformu olan Mahmote donanımı üzerinde doğrulanmıştır. Entegrasyon, gerçekçi IIoT dağıtım koşullarını yansıtan 30 düğümlü bir topoloji kullanılarak Cooja simülasyon ortamında değerlendirilmiştir. Hesaplama gecikmesi ve bellek kullanımı gibi performans metrikleri analiz edilmiştir. Elde edilen sonuçlar, LightSaber’in kısıtlı kaynaklara sahip ortamlarda işlem ve bellek yükü açısından belirgin bir ek maliyet getirdiğini ve bu nedenle ağa dahil olma sürecinde TSCH zaman dilimi süresinin geçici olarak uzatılmasını gerektirdiğini göstermektedir. Bununla birlikte, önerilen yaklaşım, gömülü platformların operasyonel kısıtlarını ihlal etmeden bağlantı katmanı oturum anahtarının kuantum-dirençli biçimde dağıtılmasını sağlamaktadır. Bu bulgular, kaynak kısıtlı endüstriyel IoT sistemlerinde kuantum-sonrası kriptografinin uygulanabilirliğine ilişkin hem potansiyeli hem de pratik zorlukları ortaya koymaktadır.

Anahtar Kelimeler

6TiSCH, Kuantum sonrası kriptografi, Anahtar dağıtımı, Anahtar kapsülleme mekanizması, LightSaber

Integrating LightSaber KEM into CoJP for Quantum-Resistant Key Distribution in 6TiSCH Networks

Öz

This paper presents a post-quantum–resistant enhancement to the Constrained Join Protocol used in 6TiSCH networks by integrating LightSaber, a lattice-based Key Encapsulation Mechanism (KEM). The proposed approach replaces the PSK-based transport mechanism for distributing the link-layer session key (K2) traditionally used during the device bootstrapping phase with a quantum-resistant alternative, while preserving the existing PSK-based authentication procedure. Specifically, a KEM-established shared secret is combined with a context-bound key derivation process to securely generate the 128-bit K2 required by the IEEE 802.15.4 AES-CCM engine. LightSaber is ported and adapted to the Contiki-NG operating system as a modular cryptographic component and validated on the Mahmote hardware platform, which represents an ARM Cortex-M3 IIoT testbed used in industrial research. The integration is evaluated via Cooja simulations using a 30-node topology that reflects realistic IIoT deployment conditions. Performance metrics, including computational latency and memory usage, are analyzed. The results indicate that while LightSaber introduces notable processing and memory overhead, requiring temporary TSCH slot-duration extension in constrained environments, its adoption provides quantum-resistant distribution of the operational link-layer session key without violating the operational constraints of embedded platforms. These findings highlight both the promise and the practical challenges of implementing post-quantum cryptography in resource-constrained industrial IoT systems.

Anahtar Kelimeler

6TiSCH, Post-quantum cryptography, Key distribution, Key encapsulation mechanism, LightSaber

Etik Beyan

Yazar bu çalışmanın Araştırma ve Yayın Etiğine uygun olduğunu beyan eder.

Teşekkür

Yazarlar, bu çalışma boyunca verdikleri destek için Mavi Alp Bilişim Teknolojileri'ne içten teşekkürlerini sunarlar. Endüstriyel IoT donanım tasarımı alanındaki uzmanlıkları ve protokol geliştirmeye katkıları, kısıtlı 6TiSCH ağlarında kuantum sonrası mekanizmaların deneysel değerlendirmesini büyük ölçüde kolaylaştıran değerli bilgiler sağlamıştır. Yazarlar ayrıca, bu çalışmanın kalitesini ve titizliğini önemli ölçüde artıran rehberliği, yapıcı geri bildirimleri ve paha biçilmez akademik desteği için Doç. Dr. Sedat GÖRMÜŞ'e derin şükranlarını sunarlar. Yazarlar ayrıca, LightSaber-CoJP entegrasyonunun uygulama ve test aşamalarındaki teknik yardımları ve değerli katkıları için Deniz TUNÇ'a teşekkürlerini sunarlar.

Kaynakça

Abdulgadir, A., Mohajerani, K., Dang, V. B., Kaps, J.-P., & Gaj, K. (2021). A lightweight implementation of Saber resistant against side-channel attacks. Progress in Cryptology—INDOCRYPT 2021. https://par.nsf.gov/biblio/10359185
Alfriehat, N., Anbar, M., Aladaileh, M., Hasbullah, I., Shurbaji, T. A., Karuppayah, S., & Almomani, A. (2024). RPL-based attack detection approaches in IoT networks: Review and taxonomy. Artificial Intelligence Review, 57(9), 248. https://doi.org/10.1007/s10462-023-10563-9
Attaran, M. (2023). The impact of 5G on the evolution of intelligent automation and industry digitization. Journal of Ambient Intelligence and Humanized Computing, 14(5), 5977–5993. https://doi.org/10.1007/s12652-022-04244-8
Aydin, H., Aydin, B., & Gormus, S. (2024). Lightweight three-factor sensor and user authentication for RPL-based 6TiSCH networks. IEEE Sensors Journal, 24(17), 28196-28209. https://doi.org/10.1109/JSEN.2024.3430515
Aydin, H., Aydin, B., & Gormus, S. (2025). HaKAN-6T: Hybrid algorithm for DIS attack detection and mitigation using CoJP in RPL-based 6TiSCH networks. Computers and Electrical Engineering, 124, 110362. https://doi.org/10.1016/j.compeleceng.2025.110362
Bandaru, M., Mathe, S. E., & Wattanapanich, C. (2024). Evaluation of hardware and software implementations for NIST finalist and fourth-round post-quantum cryptography KEMs. Computers and Electrical Engineering, 120, 109826. https://doi.org/10.1016/j.compeleceng.2024.109826
Beirendonck, M. V., D’Anvers, J.-P., Karmakar, A., Balasch, J., & Verbauwhede, I. (2021). A side-channel-resistant implementation of SABER. Journal of Emerging Technologies in Computing Systems, 17(2), https://doi.org/10.1145/3429983
Bernstein, D. J., & Lange, T. (2017). Post-quantum cryptography. Nature, 549(7671), 188–194. https://doi.org/10.1038/nature23461
Beullens, W., D’Anvers, J.-P., Hülsing, A. T., Lange, T., Panny, L., de Saint Guilhem, C., & Smart, N. P. (2021). Post-quantum cryptography: Current state and quantum mitigation. ENISA.
Castiglione, A., Esposito, J. G., Loia, V., Nappi, C., Pero, C., & Polsinelli, M. (2024). Integrating post-quantum cryptography and blockchain to secure low-cost IoT devices. IEEE Transactions on Industrial Informatics, 1–10. https://doi.org/10.1109/TII.2024.3485796

Chataut, R., Phoummalayvane, A., & Akl, R. (2023). Unleashing the power of IoT: A comprehensive review of IoT applications and future prospects in healthcare, agriculture, smart homes, smart cities, and industry 4.0. Sensors, 23(16), 7194. https://doi.org/10.3390/s23167194
Dam, D.-T., Tran, T.-H., Hoang, V.-P., Pham, C.-K., & Hoang, T.-T. (2023). A survey of post-quantum cryptography: Start of a new race. Cryptography, 7(3), 40. https://doi.org/10.3390/cryptography7030040
Dang, V. B., Mohajerani, K., & Gaj, K. (2023). High-speed hardware architectures and FPGA benchmarking of CRYSTALS-Kyber, NTRU, and Saber. IEEE Transactions on Computers, 72(2), 306–320. https://doi.org/10.1109/TC.2022.3222954
Ducas, L., Kiltz, E., Lepoint, T., Lyubashevsky, V., Schwabe, P., Seiler, G., & Stehlé, D. (2018). CRYSTALS-Dilithium: A lattice-based digital signature scheme. IACR Transactions on Cryptographic Hardware and Embedded Systems, 2018(1), 238–268. https://doi.org/10.13154/tches.v2018.i1.238-268
Dunkels, A., Grönvall, B., & Voigt, T. (2004). Contiki: A lightweight and flexible operating system for tiny networked sensors. In 29th IEEE International Conference on Local Computer Networks, (pp. 455–462). FL, USA.
Finnie, N., Osterlind, F., Dunkels, A., Eriksson, J., & Voigt, T. (2006). Cross-level sensor network simulation with COOJA. In Proceedings of the 31st IEEE Conference on Local Computer Networks (pp. 641–648). IEEE.
Gormus, S., Aydin, H., & Aydin, B. (2025). Towards reliable and secure metering: Implementing OSCORE over 6TiSCH for smart grid advanced metering infrastructure systems. Sustainable Energy, Grids and Networks, 43, 101892. https://doi.org/10.1016/j.segan.2025.101892
Hafeez, M. A., Lee, W.-K., Karmakar, A., & Hwang, S. O. (2024). Efficient TMVP-based polynomial convolution on GPU for post-quantum cryptography targeting IoT applications. IEEE Internet of Things Journal, 11(13), 23428–23443. https://doi.org/10.1109/JIOT.2024.3384507
He, P., Tu, Y., Koç, C. K., & Xie, J. (2023). Hardware-implemented lightweight accelerator for large integer polynomial multiplication. IEEE Computer Architecture Letters, 22(1), 57–60. https://doi.org/10.1109/LCA.2023.3274931
Imran, M., Aikata, A., Roy, S. S., & Pagliarini, S. (2024). High-speed design of post-quantum cryptography with optimized hashing and multiplication. IEEE Transactions on Circuits and Systems II: Express Briefs, 71(2), 847–851. https://doi.org/10.1109/TCSII.2023.3273821
Jawad, F., Nordin, R., Gharghan, S. K., Jawad, L., & Ismail, M. (2019). Energy-efficient wireless sensor networks for precision agriculture: A review. Sensors, 18(8), 2668. https://doi.org/10.3390/s18082668
Jimale, M. A., Z’aba, M. R., Kiah, M. L. B. M., Idris, M. Y. I., Jamil, N., Mohamad, M. S., & Rohmad, M. S. (2022). Authenticated encryption schemes: A systematic review. IEEE Access, 10, 14739–14766. https://doi.org/10.1109/ACCESS.2022.3147201
Jin, Z., Shen, S., & Zhao, Y. (2022). Compact and flexible KEM from ideal lattice. IEEE Transactions on Information Theory, 68(6), 3829–3840. https://doi.org/10.1109/TIT.2022.3148586
Kannwischer, M. J., Schwabe, P., Stebila, D., & Wiggers, T. (2022). Improving software quality in cryptography standardization projects. In 2022 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW), (pp. 19–30). Genoa, Italy, https://doi.org/10.1109/EuroSPW55150.2022.00010
Kherbache, M., Sobirov, O., Maimour, M., Rondeau, E., & Benyahia, A. (2023). Decentralized TSCH scheduling protocols and heterogeneous traffic: Overview and performance evaluation. Internet of Things, 22, 100696. https://doi.org/10.1016/j.iot.2023.100696
Kumari, S., Singh, M., Singh, R., & Tewari, H. (2022). Post-quantum cryptography techniques for secure communication in resource-constrained IoT devices: A comprehensive survey. Software: Practice and Experience, 52(10), 2047–2076.
Kumar, M. (2022). Post-quantum cryptography algorithm’s standardization and performance analysis. Array, 15, 100242. https://doi.org/10.1016/j.array.2022.100242
Lange, T., & Steinwandt, R. (2018). Post-Quantum Cryptography: PQCrypto 2018 Proceedings (Vol. 10786). Springer.
Mahdi, L. H., & Abdullah, A. (2025). Fortifying future IoT security: A comprehensive review on lightweight post-quantum cryptography. Engineering, Technology & Applied Science Research, 15(2), 21812–21821. https://doi.org/10.48084/etasr.10141
Mavroeidis, V., Vishi, K., Zych, M. D., & Jøsang, A. (2018). The impact of quantum computing on present cryptography. arXiv preprint arXiv:1804.00200. Retrieved from https://arxiv.org/abs/1804.00200
Mehić, M., Michalek, L., Dervisevic, E., Burdiak, P., Plakalovic, M., Rozhon, J., Mahovac, N., Richter, F., Kaljic, E., Lauterbach, F., Njemcevic, P., Maric, A., Hamza, M., Fazio, P., & Voznak, M. (2024). Quantum cryptography in 5G networks: A comprehensive overview. IEEE Communications Surveys & Tutorials, 26(1), 302–346. https://doi.org/10.1109/COMST.2023.3309051
Nannipieri, P., Di Matteo, S., Zulberti, L., Albicocchi, F., Saponara, S., & Fanucci, L. (2021). A RISC-V post-quantum cryptography instruction set extension for number theoretic transform to speed-up CRYSTALS algorithms. IEEE Access, 9, 150798–150808. https://doi.org/10.1109/ACCESS.2021.3126208
Regev, O. (2009). On lattices, learning with errors, random linear codes, and cryptography. Journal of the ACM, 56(6), Article 34. https://doi.org/10.1145/1568318.1568324
Ribeiro, L. A. D. S., Lima, J. P. da S., de Queiroz, R. J. G. B., Chagas, A. B., Junior, J. R. R., Quintino, J. P., Silva, F. Q. B. da, & Santos, A. L. M. (2024). SABER post-quantum key encapsulation mechanism (KEM): Evaluating performance in ARM and x64 architectures. Journal of Cryptographic Engineering, 14(1), 35–41. https://doi.org/10.1007/s13389-023-00337-x
Rivest, R. L., Shamir, A., & Adleman, L. (1978). A method for obtaining digital signatures and public-key cryptosystems. Communications of the ACM, 21(2), 120–126. https://doi.org/10.1145/359340.359342
Sarker, A., Mozaffari Kermani, M., & Azarderakhsh, R. (2022). Efficient error detection architectures for postquantum signature Falcon’s sampler and KEM SABER. IEEE Transactions on Very Large Scale Integration (VLSI) Systems, 30(6), 794–802. https://doi.org/10.1109/TVLSI.2022.3156479
Señor Sánchez, J. (2024). Analysis and evaluation of the impact of post-quantum cryptography at the edge of IoT (Doctoral dissertation, Universidad Politécnica de Madrid). https://doi.org/10.20868/UPM.thesis.81443
Señor, J., Portilla, J., & Portela-García, M. (2024). Performance analysis of postquantum cryptographic schemes for securing large-scale wireless sensor networks. IEEE Transactions on Industrial Informatics, 20(10), 12339–12349. https://doi.org/10.1109/TII.2024.3423315
Seyhan, K., Akleylek, S., & Dursun, A. F. (2024). Password authenticated key exchange-based on Kyber for mobile devices. PeerJ Computer Science, 10, e1960. https://doi.org/10.7717/peerj-cs.1960
Sikeridis, D., Kampanakis, P., & Devetsikiotis, M. (2020). Post-quantum authentication in TLS 1.3: A performance study. Cryptology ePrint Archive, Paper 2020/071. https://doi.org/10.14722/ndss.2020.24203
Sim, B.-Y., Kwon, J., Lee, J., Kim, I.-J., Lee, T.-H., Han, J., Yoon, H., Cho, J., & Han, D.-G. (2020). Single-trace attacks on message encoding in lattice-based KEMs. IEEE Access, 8, 183175–183191. https://doi.org/10.1109/ACCESS.2020.3029521
Suo, J., Wang, L., Yang, S., Zheng, W., & Zhang, J. (2020). Quantum algorithms for typical hard problems: A perspective of cryptanalysis. Quantum Information Processing, 19, 1–26. https://doi.org/10.1007/s11128-020-02620-8
Tan, T. G., Szalachowski, P., & Zhou, J. (2022). Challenges of post-quantum digital signing in real-world applications: A survey. International Journal of Information Security, 21(4), 937–952. https://doi.org/10.1007/s10207-021-00599-3
Thubert, P. (2021). An architecture for IPv6 over the time-slotted channel hopping mode of IEEE 802.15.4 (6TiSCH) (RFC 9030). RFC Editor. https://doi.org/10.17487/RFC9030
Tu, Y., Bai, S., Xiong, J., & Xie, J. (2025). SCOPE: Schoolbook-originated novel polynomial multiplication accelerators for NTRU-based PQC. IEEE Transactions on Very Large Scale Integration (VLSI) Systems, 33(2), 408–420. https://doi.org/10.1109/TVLSI.2024.3458872
Wang, X., Xu, G., & Yu, Y. (2023). Lattice-based cryptography: A survey. Chinese Annals of Mathematics, Series B, 44(6), 945–960. https://doi.org/10.1007/s11401-023-00384-0
Zhang, J., Huang, J., Liu, Z., & Roy, S. S. (2022). Time-memory trade-offs for Saber+ on memory-constrained RISC-V platform. IEEE Transactions on Computers, 71(11), 2996–3007. https://doi.org/10.1109/TC.2022.3143441
Zhang, Y., Huang, H., Huang, Q., & Han, Y. (2024). 6TiSCH IIoT network: A review. Computer Networks, 110759. https://doi.org/10.1016/j.comnet.2024.110759
Zheng, W., Zhang, H., Zhang, Y., Wen, Y., Lv, J., Ni, L., & Li, Z. (2023). Hardware design and implementation of a lightweight Saber algorithm based on DRC method. Electronics, 12(11), 2525. https://doi.org/10.3390/electronics12112525
Zhu, Y., Zhu, M., Yang, B., Zhu, W., Deng, C., Chen, C., Wei, S., & Liu, L. (2021). LWRpro: An energy-efficient configurable crypto-processor for Module-LWR. IEEE Transactions on Circuits and Systems I: Regular Papers, 68(3), 1146–1159. https://doi.org/10.1109/TCSI.2020.3048395

Ayrıntılar

Birincil Dil

İngilizce

Konular

Bilgisayar Yazılımı

Bölüm

Araştırma Makalesi

Yazarlar

Hakan Aydın ^*
0000-0002-4057-3693
Türkiye

Yayımlanma Tarihi

26 Mart 2026

Gönderilme Tarihi

29 Kasım 2025

Kabul Tarihi

22 Şubat 2026

Yayımlandığı Sayı

Yıl 2026 Cilt: 16 Sayı: 2

DOI

https://doi.org/10.31466/kfbd.1832635

IZ

https://izlik.org/JA87NS22EH

APA

Aydın, H. (2026). Integrating LightSaber KEM into CoJP for Quantum-Resistant Key Distribution in 6TiSCH Networks. Karadeniz Fen Bilimleri Dergisi, 16(2), 527-557. https://doi.org/10.31466/kfbd.1832635

AMA

1.Aydın H. Integrating LightSaber KEM into CoJP for Quantum-Resistant Key Distribution in 6TiSCH Networks. KFBD. 2026;16(2):527-557. doi:10.31466/kfbd.1832635

Chicago

Aydın, Hakan. 2026. “Integrating LightSaber KEM into CoJP for Quantum-Resistant Key Distribution in 6TiSCH Networks”. Karadeniz Fen Bilimleri Dergisi 16 (2): 527-57. https://doi.org/10.31466/kfbd.1832635.

EndNote

Aydın H (01 Mart 2026) Integrating LightSaber KEM into CoJP for Quantum-Resistant Key Distribution in 6TiSCH Networks. Karadeniz Fen Bilimleri Dergisi 16 2 527–557.

IEEE

[1]H. Aydın, “Integrating LightSaber KEM into CoJP for Quantum-Resistant Key Distribution in 6TiSCH Networks”, KFBD, c. 16, sy 2, ss. 527–557, Mar. 2026, doi: 10.31466/kfbd.1832635.

ISNAD

Aydın, Hakan. “Integrating LightSaber KEM into CoJP for Quantum-Resistant Key Distribution in 6TiSCH Networks”. Karadeniz Fen Bilimleri Dergisi 16/2 (01 Mart 2026): 527-557. https://doi.org/10.31466/kfbd.1832635.

JAMA

1.Aydın H. Integrating LightSaber KEM into CoJP for Quantum-Resistant Key Distribution in 6TiSCH Networks. KFBD. 2026;16:527–557.

MLA

Aydın, Hakan. “Integrating LightSaber KEM into CoJP for Quantum-Resistant Key Distribution in 6TiSCH Networks”. Karadeniz Fen Bilimleri Dergisi, c. 16, sy 2, Mart 2026, ss. 527-5, doi:10.31466/kfbd.1832635.

Vancouver

1.Hakan Aydın. Integrating LightSaber KEM into CoJP for Quantum-Resistant Key Distribution in 6TiSCH Networks. KFBD. 01 Mart 2026;16(2):527-5. doi:10.31466/kfbd.1832635

Karadeniz Fen Bilimleri Dergisinde yayınlanan makaleler Creative Commons Attribution-NonCommercial 4.0 International kapsamında lisanslanmıştır.

6TiSCH Ağlarında Kuantum Dayanıklı Anahtar Dağıtımı için LightSaber KEM'in CoJP'ye Entegre Edilmesi

Öz

Anahtar Kelimeler

Integrating LightSaber KEM into CoJP for Quantum-Resistant Key Distribution in 6TiSCH Networks

Öz

Anahtar Kelimeler

Etik Beyan

Teşekkür

Kaynakça

Ayrıntılar

Birincil Dil

Konular

Bölüm

Yazarlar

Yayımlanma Tarihi

Gönderilme Tarihi

Kabul Tarihi

Yayımlandığı Sayı

DOI

IZ

Kaynak Göster