###### Abstract  
Personal data security is a cybersecurity trend that has captured the world's attention. Governments, practitioners and academics are jointly building personal data security in various communication systems, including IoT. The protocol that is widely used in IoT implementation is MQTT. By default, MQTT does not provide data security features in the form of data encryption. Therefore, this research was carried out on the design of Secure End-to-End Encryption MQTT with Block Cipher-Based Lightweight Cryptography. The protocol is designed by utilizing the Galantucci secret sharing scheme and a lightweight cryptographic algorithm based on a block cipher. The algorithms used include AES-128 GCM mode, GIFT-COFB, Romulus N1, and Tiny JAMBU. We tested the Secure End-to-End for MQTT protocol on the ARM M4 and ESP8266 processors. Our testing results on NodeMCU board, Tiny JAMBU have an average encryption time of 313 \(\upmu\)s and an average decryption time of 327 \(\upmu\)s. AES-128 GCM mode has an average encryption time of 572 \(\upmu\)s and an average decryption time of 584 \(\upmu\)s. GIFT-COFB has an average encryption time of 1094 \(\upmu\)s and an average decryption time of 1110 \(\upmu\)s. Meanwhile, Romulus N1 has an average encryption time of 2157 \(\upmu\)s and an average decryption time of 2180 \(\upmu\)s. On STM32L4 discovery, Tiny JAMBU had average encryption of 82 \(\upmu\)s and an average decryption time of 85 \(\upmu\)s. AES-128 GCM mode has an average encryption time of 163 \(\upmu\)s and an average decryption time of 164 \(\upmu\)s. GIFT-COFB has an average decryption time of 164 \(\upmu\)s and an average decryption time of 165 \(\upmu\)s. Meanwhile, Romulus N1 has an average encryption time of 605 \(\upmu\)s and an average decryption time of 607 \(\upmu\)s. Our experiment shows that the fastest performance is produced by Tiny JAMBU, followed by AES-128 Mode GCM, GIFT-COFB and Romulus N1. MQTT; block cipher; lightweight cryptography; secret sharing; IoT +
Footnote †: journal: Applied  
accordance with applicable regulations [8]. This information security need must be met in the IoT communication protocol. The communication protocol that is widely used in IoT implementations is MQTT [11]. By default, this protocol is not equipped with a data security system, so a security mechanism is needed for the protocol [12]. MQTT security can be achieved in the network [13], transport [14], and application [15]. Security at the user data layer can be achieved by encrypting the payload. In this research, a security design for the MQTT protocol is carried out using a Secure End-to-End Encryption MQTT with Block Cipher-Based Lightweight Cryptography. The use of end-to-end encryption is expected to be a data security solution at the application layer even though it uses an untrusted infrastructure. Research related to MQTT security includes MQTT security at the application layer with the LBLOK, AES-128, PRESENT, Trivium, and Grain algorithms [16]. In addition, there is research on MQTT/MQTT-SN security with the ChaCha20-Poly1305 algorithm with AEAD mode [17] and MQTT security with a key delegation system for end-to-end encryption communication [18]. Each protocol is an MQTT security solution at the application layer. In this study, Secure End-to-End Encryption on the MQTT protocol with Block Cipher-based Lightweight Cryptography was designed and implemented using the Galantucci secret sharing mechanism [19]. This secret sharing scheme is designed using multiple XOR operations, which are suitable for low-power IoT devices. The Secure End-to-End Encryption MQTT protocol design uses a lightweight cryptographic algorithm based on a block cipher, namely GIFT-COFB [20], Romulus [21; 22], and Tiny JAMBU [23]. This scheme has several advantages:  
1. Secure End-to-End Encryption on the MQTT protocol with Block Cipher-based Lightweight Cryptography can be used for low power devices;
2. This scheme provides convenience in key communication management by using the advantages of Galantucci secret sharing;
3.