# On The Fly Diffie Hellman for IoT

## TL;DR

This paper proposes an on-the-fly Diffie-Hellman key exchange protocol using OTP for IoT devices with limited capabilities, enhancing security in unsecured wireless environments without relying on external trusted servers.

## Contribution

It introduces a novel Diffie-Hellman based protocol tailored for low-capability IoT devices, enabling secure key exchange within smart environments without external trusted servers.

## Key findings

- Protocol is secure against replay and DoS attacks
- Enables secure communication with minimal computational requirements
- Reduces reliance on external trusted third parties

## Abstract

The Internet of Things (IoT) is a fast growing field of devices being added to an interconnected environment in an abstract heterogeneous array of servers and other devices, called smart environments, ranging from private local (home) environments to nation-wide infrastructures, often accessible via unsecured wireless communications and information technologies, hence, massively open to attacks. In this paper we address some of issues that arise when connecting smart devices endowed with low computational capabilities to a home gateway via unsecured wireless communication channels, by using a One Time Pad (OTP) protocol based upon an On-the-fly Diffie-Hellman Key Exchange. Our assumptions are that only a user and the gateway have enough processing power to perform - say - secured RSA encrypted communication, hence relaxing the need for a trusted secure server outside the domain and that the protocol should at least be secure for a range of known attacks, as replay or DoS attacks.