Bidirectional TLS Handshake Caching for Constrained Industrial IoT Scenarios

• URL: http://arxiv.org/abs/2508.03321v1
• Date: Tue, 05 Aug 2025 11:00:41 GMT
• Title: Bidirectional TLS Handshake Caching for Constrained Industrial IoT Scenarios
• Abstract summary: BiTHaC realizes bidirectional TLS handshake caching by exploiting that significant parts of repeated TLS handshakes, especially certificates, are static.<n>We show that we can reduce the bandwidth consumption of TLS handshakes by up to 61.1% and the computational overhead by up to 8.5%, while incurring only well-manageable memory overhead and preserving the strict security guarantees of TLS.
• Score: 2.479074862022315
• License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/
• Abstract: While TLS has become the de-facto standard for end-to-end security, its use to secure critical communication in evolving industrial IoT scenarios is severely limited by prevalent resource constraints of devices and networks. Most notably, the TLS handshake to establish secure connections incurs significant bandwidth and processing overhead that often cannot be handled in constrained environments. To alleviate this situation, we present BiTHaC which realizes bidirectional TLS handshake caching by exploiting that significant parts of repeated TLS handshakes, especially certificates, are static. Thus, redundant information neither needs to be transmitted nor corresponding computations performed, saving valuable bandwidth and processing resources. By implementing BiTHaC for wolfSSL, we show that we can reduce the bandwidth consumption of TLS handshakes by up to 61.1% and the computational overhead by up to 8.5%, while incurring only well-manageable memory overhead and preserving the strict security guarantees of TLS.

Related papers

• QUIC-TRIP: A Triple-Redundant Journey Toward Secure Substation Communications [1.9906945320988176]
  This paper introduces QUIC-TRIP, a transparent security methodology for low-latency IP-based industrial communications.<n>We evaluate the resilience of QUIC-TRIP multipath communication under DoS flooding by securing R-GOOSE communications.
  arXiv  Detail & Related papers  (2026-07-29T01:28:36Z)
• Thou Shall Not Pass: Gatekeeping Outbound TLS Connections [0.0]
  We analyze more than 50 million TLS handshakes over a two-week period at our research institution, Fondazione Bruno Kessler.<n>Servers are adopting the latest TLS advancements much faster than official guidelines can be updated to provide directives for them.<n>We present TLSGatekeeper, a real-time, network-based tool that transparently monitors handshakes, analyzes server parameters, and reports non-compliant connections.
  arXiv  Detail & Related papers  (2026-05-29T08:53:24Z)
• Blockchain-Enabled Routing for Zero-Trust Low-Altitude Intelligent Networks [77.17664010626726]
  We focus on the routing with multiple UAV clusters in low-altitude intelligent networks (LAINs)<n>To minimize the damage caused by potential threats, we present the zero-trust architecture with the software-defined perimeter and blockchain techniques.<n>We show that the proposed framework reduces the average E2E delay by 59% and improves the TSR by 29% on average compared to benchmarks.
  arXiv  Detail & Related papers  (2026-02-27T04:30:35Z)
• Multi-Agent-Driven Cognitive Secure Communications in Satellite-Terrestrial Networks [58.70163955407538]
  Malicious eavesdroppers pose a serious threat to private information via satellite-terrestrial networks (STNs)<n>We propose a cognitive secure communication framework driven by multiple agents that coordinates spectrum scheduling and protection through real-time sensing.<n>We exploit generative adversarial networks to produce adversarial matrices, and employ learning-aided power control to set real and adversarial signal powers for protection layer.
  arXiv  Detail & Related papers  (2026-01-06T10:30:41Z)
• Federated Learning-Enabled Hybrid Language Models for Communication-Efficient Token Transmission [87.68447072141402]
  Hybrid Language Models (HLMs) combine the low-latency efficiency of Small Language Models (SLMs) on edge devices with the high accuracy of Large Language Models (LLMs) on centralized servers.<n>We propose FedHLM, a communication-efficient HLM framework that integrates uncertainty-aware inference with Federated Learning (FL)
  arXiv  Detail & Related papers  (2025-06-30T02:56:11Z)
• PLS-Assisted Offloading for Edge Computing-Enabled Post-Quantum Security in Resource-Constrained Devices [13.649969611527746]
  Post-quantum cryptography (PQC) standards have become imperative for resource-constrained devices (RCDs) in the Internet of Things (IoT)<n>We propose an edge computing-enabled PQC framework that leverages a physical-layer security (PLS)-assisted offloading strategy.<n>Our framework integrates two PLS techniques: offloading RCDs employ wiretap coding to secure data transmission, while non-offloading RCDs serve as friendly jammers by broadcasting artificial noise.
  arXiv  Detail & Related papers  (2025-04-13T05:14:17Z)
• Fundamental Limits of Hierarchical Secure Aggregation with Cyclic User Association [93.46811590752814]
  Hierarchical secure aggregation is motivated by federated learning (FL)<n>In this paper, we consider HSA with a cyclic association pattern where each user is connected to $B$ consecutive relays.<n>We propose an efficient aggregation scheme which includes a message design for the inputs inspired by gradient coding.
  arXiv  Detail & Related papers  (2025-03-06T15:53:37Z)
• Adaptive Optimization of TLS Overhead for Wireless Communication in Critical Infrastructure [2.479074862022315]
  TLS introduces significant overhead for resource-constrained devices and networks prevalent in critical infrastructure. We propose to leverage the degrees of freedom in configuring TLS to dynamically adapt algorithms, parameters, and other settings.
  arXiv  Detail & Related papers  (2024-11-04T10:48:38Z)
• An Efficient TLS 1.3 Handshake Protocol with VC Certificate Type [0.0]
  The paper presents a step forward in the design and implementation of a Transport Layer Security (TLS) handshake protocol.<n>It enables the use of Verifiable Credential (VC) while maintaining full compliance with RFC-8446 and preserving all the security features of TLS 1.3.<n>Results pave the way for the adoption of Self-Sovereign Identity in large-scale Internet of Things (IoT) systems.
  arXiv  Detail & Related papers  (2024-07-17T13:18:16Z)
• Physical Layer Deception with Non-Orthogonal Multiplexing [52.11755709248891]
  We propose a novel framework of physical layer deception (PLD) to actively counteract wiretapping attempts.<n>PLD combines PLS with deception technologies to actively counteract wiretapping attempts.<n>We prove the validity of the PLD framework with in-depth analyses and demonstrate its superiority over conventional PLS approaches.
  arXiv  Detail & Related papers  (2024-06-30T16:17:39Z)
• On the Integration of Self-Sovereign Identity with TLS 1.3 Handshake to Build Trust in IoT Systems [0.0]
  Self-Sovereign Identity (SSI) is a decentralised option that reduces the need for human intervention. This paper contributes to the adoption of SSI in large-scale IoT systems by addressing, for the first time, the extension of the original TLS 1.3 handshake.
  arXiv  Detail & Related papers  (2023-11-01T09:22:31Z)
• Guaranteed Dynamic Scheduling of Ultra-Reliable Low-Latency Traffic via Conformal Prediction [72.59079526765487]
  The dynamic scheduling of ultra-reliable and low-latency traffic (URLLC) in the uplink can significantly enhance the efficiency of coexisting services. The main challenge is posed by the uncertainty in the process of URLLC packet generation. We introduce a novel scheduler for URLLC packets that provides formal guarantees on reliability and latency irrespective of the quality of the URLLC traffic predictor.
  arXiv  Detail & Related papers  (2023-02-15T14:09:55Z)
• Communication-Efficient Split Learning Based on Analog Communication and Over the Air Aggregation [48.150466900765316]
  Split-learning (SL) has recently gained popularity due to its inherent privacy-preserving capabilities and ability to enable collaborative inference for devices with limited computational power. Standard SL algorithms assume an ideal underlying digital communication system and ignore the problem of scarce communication bandwidth. We propose a novel SL framework to solve the remote inference problem that introduces an additional layer at the agent side and constrains the choices of the weights and the biases to ensure over the air aggregation.
  arXiv  Detail & Related papers  (2021-06-02T07:49:41Z)
• Machine Learning Interpretability Meets TLS Fingerprinting [5.179808182296037]
  We propose a framework to systematically find the most vulnerable information fields in a network protocol. focusing on the transport layer security (TLS) protocol, we perform different machine-learning-based fingerprinting attacks on the collected data. By employing the interpretation techniques developed in the machine learning community and applying our framework, we find the most vulnerable information fields in the TLS protocol.
  arXiv  Detail & Related papers  (2020-11-12T10:37:45Z)
• Interference Distribution Prediction for Link Adaptation in Ultra-Reliable Low-Latency Communications [71.0558149440701]
  Link adaptation (LA) is considered to be one of the bottlenecks to realize URLLC. In this paper, we focus on predicting the signal to interference plus noise ratio at the user to enhance the LA. We show that exploiting time correlation of the interference is an important enabler of URLLC.
  arXiv  Detail & Related papers  (2020-07-01T07:59:35Z)

This list is automatically generated from the titles and abstracts of the papers in this site.

This site does not guarantee the quality of this site (including all information) and is not responsible for any consequences.