Comparative Analysis of AES-GCM and ChaCha20-Poly1305 in IoT Data Encryption Based on ESP32
Abstract
Internet of Things (IoT) devices have become integral to modern applications, yet their resource constraints pose significant challenges for implementing robust security measures. While AES-GCM and ChaCha20-Poly1305 are widely recognized Authenticated Encryption with Associated Data algorithms, their comparative performance on resource-limited microcontrollers like ESP32 remains underexplored, particularly regarding execution time, memory usage, power consumption, and throughput. This research aims to conduct a comprehensive performance analysis of both algorithms for securing IoT data transmission on ESP32-WROOM-32D microcontrollers. The study implements both algorithms using Arduino IDE 2.3.6, leveraging ESP32's hardware acceleration for AES-GCM and optimized software implementation for ChaCha20-Poly1305. Performance evaluation encompasses various payload sizes (16, 64, and 256 bytes) with precise measurements of execution time using micros() function, memory usage via ESP.getFreeHeap(), and power consumption through shunt resistor analysis. The results reveal distinct performance characteristics between the two algorithms across all evaluated metrics, providing valuable comparative insights for IoT developers to select optimal cryptographic solutions based on specific application requirements and resource constraints, thereby enhancing security implementation on embedded systems.
The Authors submitting a manuscript do so on the understanding that if accepted for publication, copyright of the article shall be assigned to Jurnal Teknologi Informasi dan Terapan (J-TIT) and Department of Information Technology, Politeknik Negeri Jember as publisher of the journal. Copyright encompasses rights to reproduce and deliver the article in all form and media, including reprints, photographs, microfilms, and any other similar reproductions, as well as translations. Authors should sign a copyright transfer agreement when they have approved the final proofs sent by Jurnal Teknologi Informasi dan Terapan (J-TIT) prior to the publication. The copyright transfer agreement can be download here .
Jurnal Teknologi Informasi dan Terapan (J-TIT) and Department of Information Technology, Politeknik Negeri Jember and the Editors make every effort to ensure that no wrong or misleading data, opinions or statements be published in the journal. In any way, the contents of the articles and advertisements published in Jurnal Teknologi Informasi dan Terapan (J-TIT) are the sole responsibility of their respective authors and advertisers.
Users of this website will be licensed to use materials from this website following the Creative Commons Attribution 4.0 International License. No fees charged. Please use the materials accordingly.

This work is licensed under a Creative Commons Attribution-Share A like 4.0 International License
You are free to:
- Share — copy and redistribute the material in any medium or format
- Adapt — remix, transform, and build upon the material for any purpose, even commercially.
- The licensor cannot revoke these freedoms as long as you follow the license terms.





