Cyber-security analysis and evaluation for smart home management solutions

Security in household automation is becoming an increasing concern as the physical intrusion detection systems become accessibile via digital devices. In this work, we approach the security issues present in the key derivation strategy employed by the widespread Z-Wave home automation protocol. In particular we propose a new key refreshment and IV derivation strategy to provide with both key material and initialization vectors the cryptographic primitives required by the Z-Wave security layer. The approach employs only symmetric ciphers and unforgeable hashes to this end obtaining an acceptable memory fingerprint and practical execution timings even on an extremely resource constrained platform such as the Z-Wave SoC transceiver.