{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,15]],"date-time":"2026-09-15T15:41:58Z","timestamp":1789486918959,"version":"build-2803163510"},"reference-count":48,"publisher":"MDPI AG","issue":"18","license":[{"start":{"date-parts":[[2026,9,15]],"date-time":"2026-09-15T00:00:00Z","timestamp":1789430400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>This paper provides the design and simulation of a lightweight cryptographic protocol on smart house IoT devices using ChaCha20 and Ascon-AEAD128. The protocol, implemented in Python 3.14.6 and tested on a virtual ESP32 platform using Wokwi and CloudAMQP, uses stream cipher encryption with authenticated message tagging to provide confidentiality and integrity. Two conditions, normal and tampered transmission, were experimented to confirm tag validation and successful decryption. Findings affirmed sound detection of tampering and unauthorized access prevention, proving usefulness of current AEAD ciphers on limited devices. The protocol highlights cryptographic systems that prioritize computationally efficiency and robustness, which is essential in smart homes that have limited power and memory. The hybrid design provides confidentiality and authenticity using a minimal overhead by utilizing ChaCha20 to provide lightweight encryption and Ascon-AEAD128 as authentication. The resilience to the replay and modification attacks was demonstrated in experiments based on message queues and injected packet modifications simulating real-world conditions. Even though benchmarking of hardware was not carried out, the simulated values reveal stability and flexibility to use in low-power systems. This article emphasizes the necessity of authenticated encryption as default, which is consistent with the NIST standards and reflects the appropriateness of Ascon to new IoT security requirements. It also creates a reconfigurable structure that can be used in other highly constrained systems, such as healthcare monitoring and industrial IoT. The main contribution is the gap between theoretical cryptography and practical IoT security provided by the practical prototype. Further development will include tests on physical ESP32 modules and fine performance profiling, yet already, the current implementation proves a scalable, secure model of smart home IoT. Finally, this research demonstrates that the demand of reliable and low-power-based communication in resource constrained networks can be met efficiently without sacrificing device performance by means of lightweight cryptography. In addition to the cryptographic protocol design, this study integrates a machine learning-based intrusion detection layer trained on the Edge-IIoTset dataset, in which Logistic Regression, Decision Tree, Random Forest, and Gradient Boosting classifiers are evaluated to complement the encryption\u2013authentication framework with anomaly-aware monitoring of network traffic.<\/jats:p>","DOI":"10.3390\/s26185847","type":"journal-article","created":{"date-parts":[[2026,9,15]],"date-time":"2026-09-15T13:33:42Z","timestamp":1789479222000},"page":"5847","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Lightweight Secure Protocols for Low-Powered IoT Devices: Modern Ciphers, Authentication, and Machine Learning-Based Intrusion Detection"],"prefix":"10.3390","volume":"26","author":[{"given":"Dimah","family":"Alsobaie","sequence":"first","affiliation":[{"name":"Department of Software Engineering, College of Engineering, Alfaisal University, Riyadh 11533, Saudi Arabia"}],"role":[{"vocabulary":"crossref","role":"author"},{"role":"formal-analysis","vocabulary":"credit"},{"role":"investigation","vocabulary":"credit"},{"role":"resources","vocabulary":"credit"},{"role":"data-curation","vocabulary":"credit"},{"role":"writing-original-draft","vocabulary":"credit"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6939-6929","authenticated-orcid":false,"given":"Umair","family":"Khan","sequence":"additional","affiliation":[{"name":"Department of Software Engineering, College of Engineering, Alfaisal University, Riyadh 11533, Saudi Arabia"}],"role":[{"vocabulary":"crossref","role":"author"},{"role":"writing-review-editing","vocabulary":"credit"},{"role":"visualization","vocabulary":"credit"},{"role":"supervision","vocabulary":"credit"},{"role":"project-administration","vocabulary":"credit"},{"role":"funding-acquisition","vocabulary":"credit"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6921-8812","authenticated-orcid":false,"given":"Waleed","family":"Alsabhan","sequence":"additional","affiliation":[{"name":"Department of Software Engineering, College of Engineering, Alfaisal University, Riyadh 11533, Saudi Arabia"}],"role":[{"vocabulary":"crossref","role":"author"},{"role":"conceptualization","vocabulary":"credit"},{"role":"methodology","vocabulary":"credit"},{"role":"software","vocabulary":"credit"},{"role":"validation","vocabulary":"credit"}]}],"member":"1968","published-online":{"date-parts":[[2026,9,15]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"102644","DOI":"10.1016\/j.technovation.2022.102644","article-title":"How the Internet of Things reshapes the organization of innovation and entrepreneurship","volume":"118","author":"Clarysse","year":"2022","journal-title":"Technovation"},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Allioui, H., and Mourdi, Y. (2023). Exploring the Full Potentials of IoT for Better Financial Growth and Stability: A Comprehensive Survey. Sensors, 23.","DOI":"10.3390\/s23198015"},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Rahman, M.M., Mahbub, F., Tasnim, R., and Saleheen, R.U. (2024). IOT Architecture and its Integration with Mechatronics. Mechatronics: Fundamentals and Applications, Springer.","DOI":"10.1007\/978-981-97-7117-2"},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"De Nicola, A., and Villani, M.L. (2021). Smart City Ontologies and Their Applications: A Systematic Literature Review. Sustainability, 13.","DOI":"10.3390\/su13105578"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Vardakis, G., Hatzivasilis, G., Koutsaki, E., and Papadakis, N. (2024). Review of Smart-Home Security Using the Internet of Things. Electronics, 13.","DOI":"10.3390\/electronics13163343"},{"key":"ref_6","unstructured":"Nguyen, T.A. (2025). Chapter 11\u2014Role of digital twin and blockchain in logistics and supply chain management. Digital Twin and Blockchain for Sensor Networks in Smart Cities, Elsevier."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"100252","DOI":"10.1016\/j.treng.2024.100252","article-title":"Intelligent transportation systems for sustainable smart cities","volume":"16","author":"Elassy","year":"2024","journal-title":"Transp. Eng."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"2449","DOI":"10.1007\/s10586-021-03423-z","article-title":"A survey on internet of energy security: Related fields, challenges, threats and emerging technologies","volume":"25","author":"Mogadem","year":"2022","journal-title":"Clust. Comput."},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Aslan, \u00d6., Aktu\u011f, S.S., Ozkan-Okay, M., Yilmaz, A.A., and Akin, E. (2023). A Comprehensive Review of Cyber Security Vulnerabilities, Threats, Attacks, and Solutions. Electronics, 12.","DOI":"10.3390\/electronics12061333"},{"key":"ref_10","doi-asserted-by":"crossref","unstructured":"Riggs, H., Tufail, S., Parvez, I., Tariq, M., Khan, M.A., Amir, A., Vuda, K.V., and Sarwat, A.I. (2023). Impact, Vulnerabilities, and Mitigation Strategies for Cyber-Secure Critical Infrastructure. Sensors, 23.","DOI":"10.3390\/s23084060"},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"53","DOI":"10.1007\/s10207-024-00951-8","article-title":"On the adoption and deployment of secure and privacy-preserving IIoT in smart manufacturing: A comprehensive guide with recent advances","volume":"24","author":"Abdullahi","year":"2025","journal-title":"Int. J. Inf. Secur."},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Jaime, F.J., Mu\u00f1oz, A., Rodr\u00edguez-G\u00f3mez, F., and Jerez-Calero, A. (2023). Strengthening Privacy and Data Security in Biomedical Microelectromechanical Systems by IoT Communication Security and Protection in Smart Healthcare. Sensors, 23.","DOI":"10.3390\/s23218944"},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Pereira, F., Correia, R., Pinho, P., Lopes, S.I., and Carvalho, N.B. (2020). Challenges in Resource-Constrained IoT Devices: Energy and Communication as Critical Success Factors for Future IoT Deployment. Sensors, 20.","DOI":"10.3390\/s20226420"},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"7525","DOI":"10.1109\/JIOT.2023.3341875","article-title":"Encryption as a Service for IoT: Opportunities, Challenges, and Solutions","volume":"11","author":"Javadpour","year":"2024","journal-title":"IEEE Internet Things J."},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"4448","DOI":"10.1109\/JIOT.2018.2881425","article-title":"Signature Gateway: Offloading Signature Generation to IoT Gateway Accelerated by GPU","volume":"6","author":"Chang","year":"2019","journal-title":"IEEE Internet Things J."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"29341","DOI":"10.1109\/ACCESS.2025.3539929","article-title":"Microcontroller-Driven Battery Management in Hybrid Energy Systems: A Systematic Review of Applications, Control Strategies, and Emerging Trends","volume":"13","author":"Malele","year":"2025","journal-title":"IEEE Access"},{"key":"ref_17","doi-asserted-by":"crossref","unstructured":"Almutairi, M., and Sheldon, F.T. (2025). IoT\u2013Cloud Integration Security: A Survey of Challenges, Solutions, and Directions. Electronics, 14.","DOI":"10.3390\/electronics14071394"},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"1625","DOI":"10.1007\/s12652-017-0494-4","article-title":"Advanced lightweight encryption algorithms for IoT devices: Survey, challenges and solutions","volume":"15","author":"Singh","year":"2024","journal-title":"J. Ambient Intell. Humaniz. Comput."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"55258","DOI":"10.1109\/ACCESS.2025.3554739","article-title":"The Role of Artificial Intelligence in Boosting Cybersecurity and Trusted Embedded Systems Performance: A Systematic Review on Current and Future Trends","volume":"13","author":"Oun","year":"2025","journal-title":"IEEE Access"},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Rani, S., Sah, D.K., and Gianini, G. (2023). Attribute-Based Encryption Schemes for Next Generation Wireless IoT Networks: A Comprehensive Survey. Sensors, 23.","DOI":"10.3390\/s23135921"},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"48945","DOI":"10.1109\/ACCESS.2023.3275757","article-title":"Microarchitectural Side-Channel Threats, Weaknesses and Mitigations: A Systematic Mapping Study","volume":"11","author":"Javeed","year":"2023","journal-title":"IEEE Access"},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Winarno, A., and Sari, R.F. (2022). A Novel Secure End-to-End IoT Communication Scheme Using Lightweight Cryptography Based on Block Cipher. Appl. Sci., 12.","DOI":"10.3390\/app12178817"},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"1760","DOI":"10.1038\/s41598-024-84713-5","article-title":"Intelligent two-phase dual authentication framework for Internet of Medical Things","volume":"15","author":"Asif","year":"2025","journal-title":"Sci. Rep."},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Ramalingam, S., Gan, H., Epiphaniou, G., and Mistretta, E. (2020). A Holistic Systems Security Approach Featuring Thin Secure Elements for Resilient IoT Deployments. Sensors, 20.","DOI":"10.3390\/s20185252"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"104937","DOI":"10.1109\/ACCESS.2025.3578891","article-title":"Survey of Navigational Perception Sensors\u2019 Security in Autonomous Vehicles","volume":"13","author":"Solanki","year":"2025","journal-title":"IEEE Access"},{"key":"ref_26","unstructured":"Saxena, S., and Pradhan, A.K. (2022). Lightweight Cryptographic Techniques and Protocols for IoT. Internet of Things: Security and Privacy in Cyberspace, Springer."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"60539","DOI":"10.1109\/ACCESS.2020.2983117","article-title":"Lightweight Authenticated-Encryption Scheme for Internet of Things Based on Publish-Subscribe Communication","volume":"8","author":"Diro","year":"2020","journal-title":"IEEE Access"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"132808","DOI":"10.1109\/ACCESS.2020.3010302","article-title":"Robust and Lightweight Key Exchange (LKE) Protocol for Industry 4.0","volume":"8","author":"Gaba","year":"2020","journal-title":"IEEE Access"},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"100093","DOI":"10.1016\/j.iot.2019.100093","article-title":"Secure and lightweight communication in heterogeneous IoT environments","volume":"14","author":"Siddiqui","year":"2021","journal-title":"Internet Things"},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Choudhary, K., Gaba, G.S., Butun, I., and Kumar, P. (2020). MAKE-IT\u2014A Lightweight Mutual Authentication and Key Exchange Protocol for Industrial Internet of Things. Sensors, 20.","DOI":"10.3390\/s20185166"},{"key":"ref_31","first-page":"967","article-title":"LightWeight energy-efficient Block Cipher based on DNA cryptography to secure data in internet of medical things devices","volume":"16","author":"Zitouni","year":"2024","journal-title":"Int. J. Inf. Technol."},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"84","DOI":"10.1007\/s42979-024-03565-y","article-title":"A Novel Pyra-Cryptosystem Relying Secure Light-Weight Data Exchange, Peer-to-Peer Authentication, and Secure Communication Session Key Management Approach-Based Model for Internet of Things Network Security","volume":"6","author":"Attkan","year":"2025","journal-title":"SN Comput. Sci."},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"22489","DOI":"10.1109\/ACCESS.2025.3533611","article-title":"Lightweight AES Design for IoT Applications: Optimizations in FPGA and ASIC With DFA Countermeasure Strategies","volume":"13","author":"Ahmed","year":"2025","journal-title":"IEEE Access"},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"40147","DOI":"10.1007\/s11042-024-19203-x","article-title":"Hybrid lightweight encryption for IoT: Integrating chaotic key generators with Feistel and substitution-permutation networks for secure 3DV transmission","volume":"84","author":"Mesrega","year":"2025","journal-title":"Multimed. Tools Appl."},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"19","DOI":"10.1186\/s13635-025-00204-8","article-title":"A novel lightweight hybrid cryptographic framework for secure smart card operations","volume":"2025","author":"Singamaneni","year":"2025","journal-title":"EURASIP J. Inf. Secur."},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"G\u00fcnther, F., and Mukendi, M.I.T. (2023). Careful with MAc-then-SIGn: A Computational Analysis of the EDHOC Lightweight Authenticated Key Exchange Protocol. 2023 IEEE 8th European Symposium on Security and Privacy (EuroS&P), IEEE.","DOI":"10.1109\/EuroSP57164.2023.00051"},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"547","DOI":"10.1007\/s12652-020-02020-z","article-title":"Security protocol using elliptic curve cryptography algorithm for wireless sensor networks","volume":"12","author":"Qazi","year":"2021","journal-title":"J. Ambient Intell. Humaniz. Comput."},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"349","DOI":"10.1016\/bs.adcom.2025.03.001","article-title":"Chapter Fourteen\u2014Post-Quantum Lightweight Cryptography Algorithms and Approaches for IoT and Block Chain Security","volume":"Volume 138","author":"Raj","year":"2025","journal-title":"Advances in Computers"},{"key":"ref_39","doi-asserted-by":"crossref","first-page":"5983","DOI":"10.1109\/TVT.2022.3163960","article-title":"LBSV: Lightweight Blockchain Security Protocol for Secure Storage and Communication in SDN-Enabled IoV","volume":"71","author":"Vishwakarma","year":"2022","journal-title":"IEEE Trans. Veh. Technol."},{"key":"ref_40","doi-asserted-by":"crossref","unstructured":"Natarajan, D.R., Peddi, S., Valivarthi, D.T., Narla, S., Kethu, S.S., and Kurniadi, D. (2024). Secure User Authentication and Data Sharing for Mobile Cloud Computing Using BLAKE2 and Diffie\u2013Hellman Key Exchange. 2024 International Conference on Emerging Research in Computational Science (ICERCS), IEEE.","DOI":"10.1109\/ICERCS63125.2024.10895363"},{"key":"ref_41","doi-asserted-by":"crossref","unstructured":"Al-Dabbagh, R., Alkhatib, M., and Albalawi, T. (2025). Efficient Post-Quantum Cryptography Algorithms for Auto-Enrollment in Public Key Infrastructure. Electronics, 14.","DOI":"10.3390\/electronics14101980"},{"key":"ref_42","doi-asserted-by":"crossref","unstructured":"Mtetwa, N.S., Tarwireyi, P., Sibeko, C.N., Abu-Mahfouz, A., and Adigun, M. (2022). Blockchain-Based Security Model for LoRaWAN Firmware Updates. J. Sens. Actuator Netw., 11.","DOI":"10.3390\/jsan11010005"},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"2935","DOI":"10.1007\/s11277-023-10410-7","article-title":"Secure Key Management and Mutual Authentication Protocol for Wireless Sensor Network by Linking Edge Devices using Hybrid Approach","volume":"130","author":"Sharmila","year":"2023","journal-title":"Wirel. Pers. Commun."},{"key":"ref_44","doi-asserted-by":"crossref","first-page":"39430","DOI":"10.1109\/ACCESS.2024.3372388","article-title":"SHC: 8-bit Compact and Efficient S-Box Structure for Lightweight Cryptography","volume":"12","author":"Kumar","year":"2024","journal-title":"IEEE Access"},{"key":"ref_45","unstructured":"Ferrag, M. (2022). Edge-IIoTset cyber security dataset of IoT & IIoT. Kaggle, Available online: https:\/\/www.kaggle.com\/datasets\/mohamedamineferrag\/edgeiiotset-cyber-security-dataset-of-iot-iiot."},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"429","DOI":"10.1007\/s42452-021-04425-7","article-title":"An improved chacha algorithm for securing data on IoT devices","volume":"3","author":"Mahdi","year":"2021","journal-title":"SN Appl. Sci."},{"key":"ref_47","unstructured":"Rivero, J., Huynh, T.N.B., Smith-Evans, A., Thao, O., and Cheng, Y. (2021). Analyzing the Efficiency of Lightweight Symmetric Ciphers on IoT Devices, California State University Sacramento."},{"key":"ref_48","doi-asserted-by":"crossref","first-page":"2987","DOI":"10.1007\/s11276-024-03714-4","article-title":"Recent Lightweight cryptography (LWC) based security advances for resource-constrained IoT networks","volume":"30","author":"Pandey","year":"2024","journal-title":"Wirel. Netw."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/18\/5847\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,9,15]],"date-time":"2026-09-15T13:36:24Z","timestamp":1789479384000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/18\/5847"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,9,15]]},"references-count":48,"journal-issue":{"issue":"18","published-online":{"date-parts":[[2026,9]]}},"alternative-id":["s26185847"],"URL":"https:\/\/doi.org\/10.3390\/s26185847","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,9,15]]}}}