US standardisation body is exploring lightweight encryption for IoT devices.

As explained in a recently published draft report, the US National Institute of Standards and Technology is exploring the use of lightweight cryptography for ‘resource-constrained devices’, such as Internet of Things devices and other embedded systems, RFID devices, and sensor networks. According to NIST, the shift from desktop computers to smaller devices ‘brings a wide range of new security and privacy concerns’. As conventional cryptographic algorithms do not perform well on small devices, given their limited resources, more suitable solutions need to be used. In this context, NIST has initiated a project on lightweight cryptography, with the aim to learn more about the solution, and develop a strategy for the standardisation of lightweight cryptographic algorithms.The Institute’s plan for such standardisation work is described in the report.