An FPGA‐based reconfigurable IPSec AH core with efficient implementation of SHA‐3 for high speed IoT applications. Issue 16 (7th July 2016)

• Record Type: Journal Article
• Authors: Rao, Muzaffar; Newe, Thomas; Grout, Ian; Mathur, Avijit
• Is Part Of: Security and communication networks. Volume 9:Issue 16(2016)
• Page Start: 3282
• Page End: 3295
• Publication Date: 2016-07-07
• Subjects: FPGA -- SHA‐3 -- IPSec -- AH -- IoT -- VPN; Computer networks -- Security measures -- Periodicals; Computer security -- Periodicals; Cryptography -- Periodicals; 005.805
• DOI: 10.1002/sec.1533
• Languages: English
• ISSNs: 1939-0114

Abstract

Abstract: The need for securing data across the Internet has become a fundamental issue over the last decade. The Internet protocol security (IPSec) standard has been developed as one solution to the problem of end‐to‐end secure communications. IPSec implementation is computationally intensive and can significantly limit the performance of high‐speed networks. To overcome this speed issue, hardware implementations of IPSec offer the best solution. This work presents a field programmable gate array‐based reconfigurable IPSec authentication header (AH) core. AH is one of the two main IPSec protocols, namely, AH and encapsulating security payload, and it supports both transport and tunnel modes of operations. For the AH protocol, a newly selected cryptographic hash function called secure hash algorithm‐3 (SHA‐3) is implemented and used in this work. SHA‐3 is implemented using a unique two‐phase implementation approach that combines all the steps of SHA‐3. The resultant equations, after combining the SHA‐3 steps, are implemented as a proposed high‐speed architecture, which results in data throughput in the gigabits per second range. The AH core proposed here outperforms other published techniques and is capable of supporting IPv4 datagrams for both modes of operation (transport and tunnel) and also can be used to provide security services for Internet of things applications that require high data throughput speeds. Copyright © 2016 John Wiley & Sons, Ltd. Abstract : This work proposed a field programmable gate array‐based Internet protocol security authentication header core using a unique implementation of the secure hash algorithm‐3. The proposed Internet protocol security authentication header core is capable of supporting IPv4 datagrams for both modes of operations (transport and tunnel). This core can also be used to provide security services for the Internet of things applications that required high data throughput.