An Enhanced Mutual Authentication Scheme Based on ECDH for IoT Devices Using ESP8266

As a revolutionary and profound technology, the Internet of Things (IoT) has the potential to fundamentally transform our society by simply connecting sensors and smart devices to the Internet. It is no doubt that the security of communications between smart devices is an important issue in IoT. In this paper, we deal with the security scheme for communications between ESP8266 modules, which can provide embedded Wi-Fi capabilities at a low cost. Based on an existed security scheme for ESP8266, we proposed an enhanced mutual authentication mechanism and ECDH-key agreement on curve25519. Compared with the existed schemes, security analysis and performance evaluation show that the new scheme can resist various communication attacks, saying modification attacks, replay attacks, and man-in-the-middle attacks.