Electronic Theses and Dissertation

Mekanisme autentikasi berbasis Public Key Infrastructure (PKI) dengan sertifikat X.509 memiliki keterbatasan berupa ketergantungan pada Certificate Authority (CA) terpusat dan overhead pengelolaan sertifikat yang kurang sesuai untuk perangkat Internet of Things (IoT) resource-constrained. Self-Sovereign Identity (SSI) menawarkan pendekatan identitas terdesentralisasi, namun implementasinya pada IoT umumnya masih berada di lapisan aplikasi dan belum banyak diintegrasikan langsung ke dalam handshake Transport Layer Security (TLS) 1.3. Oleh karena itu, penelitian ini bertujuan untuk mengimplementasikan mekanisme autentikasi SSI-TLS pada perangkat IoT resource-constrained ESP32 DevKit V1 dan mengukur kinerja serta mengevaluasi kelayakan autentikasi SSI-TLS dibandingkan mTLS berbasis sertifikat X.509. Implementasi dilakukan dengan memodifikasi library wolfSSL v5.8.4 agar mendukung autentikasi menggunakan Verifiable Credential (VC), DID:key, algoritma Ed25519, dan ekstensi Raw Public Key (RPK). Pengujian dilakukan pada dua ESP32 DevKit V1 menggunakan tiga skenario, yaitu mTLS X.509 dengan library wolfSSL original, mTLS X.509 dengan library termodifikasi, dan SSI-TLS dengan library termodifikasi. Setiap skenario dijalankan sebanyak 1,000 handshake dan dievaluasi berdasarkan latensi handshake, penggunaan CPU, memori heap, penggunaan flash dan RAM statis, serta beban data jaringan. Hasil menunjukkan SSI-TLS menghasilkan latensi handshake rata-rata 5,058.44 ms, sekitar 2.8 kali lebih cepat dibandingkan kedua skenario mTLS, serta mengurangi beban data jaringan hingga sekitar 55%. Meskipun Utilisasi CPU tercatat lebih tinggi (76,57% berbanding 56%), waktu komputasi aktifnya lebih efisien dan tidak terjadi peningkatan penggunaan flash maupun RAM secara signifikan. Hasil penelitian menunjukkan bahwa integrasi SSI ke dalam handshake TLS 1.3 layak diterapkan pada perangkat IoT resource-constrained dan memberikan efisiensi komunikasi dibandingkan mTLS berbasis PKI.

Public Key Infrastructure (PKI)-based authentication using X.509 certificates has several limitations, including reliance on a centralized Certificate Authority (CA) and certificate management overhead that is less suitable for resource-constrained Internet of Things (IoT) devices. Self-Sovereign Identity (SSI) offers a decentralized identity approach; however, its implementation in IoT environments is generally limited to the application layer and has rarely been integrated directly into the Transport Layer Security (TLS) 1.3 handshake. Therefore, this study aims to implement an SSI-TLS authentication mechanism on the resource-constrained ESP32 DevKit V1 platform and to measure its performance as well as evaluate its feasibility in comparison with X.509 certificate-based mutual TLS (mTLS). The implementation was carried out by modifying the wolfSSL v5.8.4 library to support authentication using Verifiable Credentials (VCs), DID, the Ed25519 algorithm, and the Raw Public Key (RPK) extension. Experiments were conducted using two ESP32 DevKit V1 boards under three scenarios: X.509-based mTLS with the original wolfSSL library, X.509-based mTLS with the modified library, and SSI-TLS with the modified library. Each scenario was executed for 1,000 handshake sessions and evaluated in terms of handshake latency, CPU utilization, heap memory usage, flash and static RAM usage, and network data overhead. The results show that SSI-TLS achieves an average handshake latency of 5,058.44 ms, approximately 2.8 times faster than both mTLS scenarios, while reducing network data overhead by approximately 55% without increasing flash or static RAM usage. These findings demonstrate that integrating SSI directly into the TLS 1.3 handshake is feasible for resource-constrained IoT devices and provides more efficient communication than PKI-based mTLS.