Diamond: End-to-End Forward-secure and Compact Authenticated Encryption for Internet of Things
Saif E. Nouma, Gokhan Mumcu, Attila A. Yavuz

TL;DR
Diamond is a novel, secure, and efficient authenticated encryption framework tailored for resource-limited IoT devices, offering forward-security, compact tags, and optimized performance for high-throughput telemetry.
Contribution
It introduces Diamond, the first FAAE framework with lightweight key evolution, offline-online optimization, and multiple performance-tier instantiations, enhancing security and efficiency for IoT.
Findings
Reduces offline preprocessing by up to 47%.
Achieves up to tenfold reduction in end-to-end latency.
Outperforms baseline FAAE variants and NIST lightweight AE candidates.
Abstract
Resource-constrained Internet of Things (IoT) devices, from medical implants to small drones, must transmit sensitive telemetry under adversarial wireless channels while operating under stringent computing and energy budgets. Authenticated Encryption (AE) is essential to ensure confidentiality, integrity, and authenticity. However, existing lightweight AE standards lack forward-security guarantees, compact tag aggregation, and offline-online (OO) optimizations required for modern high-throughput IoT pipelines. We introduce Diamond , the first provably secure Forward-secure and Aggregate Authenticated Encryption (FAAE) framework that extends and generalizes prior FAAE constructions through a lightweight key evolution mechanism, an OOoptimized computation pipeline, and a set of performance-tier instantiations. Diamond substantially reduces amortized offline preprocessing (up to 47%) and…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
