Swarm attestation based on physical unclonable functions
Συμπλεγμένη πιστοποίηση βασισμένη σε φυσικά μη-κλωνοποιήσιμες συναρτήσεις

Master Thesis
Author
Ioannis, Siachos
Ιωάννης, Σιάχος
Date
2026-02View/ Open
Keywords
Swarm attestation ; Cryptography ; Physical unclonable functionAbstract
The proliferation of the Internet of Things (IoT) in critical infrastructure demands scalable and secure methods for verifying device integrity. Existing attestation mechanisms, however, often fail to meet these needs, facing limitations in scalability, imposing high computational costs on resource-constrained devices, lacking privacy for sensitive device attributes, and remaining vulnerable to quantum adversaries.
This thesis proposes a novel, hierarchical swarm attestation protocol designed to address these challenges. Built entirely from symmetric-key primitives, the scheme leverages Physical Unclonable Functions (PUFs) as hardware roots of trust, Winternitz One-Time Signatures (WOTS+) for post-quantum signing, and a nested Merkle tree structure for efficient aggregation and privacy. A principal contribution of this work is the achievement of attribute confidentiality, which allows a verifier to confirm that devices in a swarm adhere to a required policy without learning the actual state of any individual device.
The protocol also ensures scalability through highly efficient verification and provides traceability for identifying non-compliant devices. We provide a security analysis of these properties and evaluate the protocol's performance, analyzing both computational complexity and communication overhead in comparison to state-of-the-art schemes. The result is a practical and provably secure framework for managing trust in large-scale, constrained IoT environments where long-term security and data privacy are paramount.


