Advanced Encryption Standard Research Articles

Cryptanalysis on Reduced-Round 3D and Saturnin

Abstract 3D is an Advanced Encryption Standard (AES)-like cipher employed 3D structure proposed in 2008. The main innovation of 3D is the multi-dimensional state, generalizing the design of Rijndael and allowing block sizes beyond the 256-bit boundary. Saturnin, a lightweight block cipher has been selected as a second-round candidate in the National Institute of Standards and Technology standardization for lightweight cryptography. It also employs a 3D structure and provides high security against quantum and classic attacks. The exchange-equivalence attacks proposed by Bardeh and Rønjom consider how quadruples of plaintexts confirm distinguishable properties for AES. It is similar to the principle of yoyo attack, but it can find a longer number of rounds of distinguisher. In this paper, we investigate the exchange-equivalence attack on 3D and yoyo attack on Saturnin. Our new results turn out to be the first secret-key chosen plaintext distinguisher for 10-round 3D. The complexity of the distinguisher is about $2^{364.2}$ in terms of data, memory and computational complexity. For Saturnin, we propose the first six-super-round impossible differential yoyo attack, which is suitable for the two-S-layer version. Compared with the previous impossible differential attacks in the design report of Saturnin, the attacks presented here are the best in terms of the complexity under the chosen-plaintext scenario.

A Scheduling Genetic Algorithm For Real-Time Data Freshness And Cloud Data Security Over Keywords Searching

Cloud storage services allow customers to ingress data stored from any device at any time. The growth of the Internet helps the number of users who need to access online databases without a deep understanding of the schema or query. The languages have risen dramatically, allowing users to search secured data and retrieve desired data from cloud storage using keywords. On the other hand, there are fundamental difficulties such as security, which must be provided to secure user'spersonal information. A hybrid scheduling genetic algorithm (SGA) is proposed in this research. SGA technique enhances the security level and provides data freshness. For evaluation and comparison, parameters such as execution time throughputs are used. According to experimental results, the proposed technique ensures the security of user data from unauthorized parties. Furthermore, SGA is strong and more effective when compared to a set of parameters to the existing algorithm like Data Encryption Standard (DES), Blowfish, and AdvancedEncryption Standard (AES).

Algebraic methods for generating optimal s-blocks

The paper presents a review of algebraic methods for generating cryptographic S-boxes. In this paper, we consider methods for generating S-boxes based on the use of polynomial transformations (linear, quadratic, cubic), fractional linear transformations, and other special types of algebraic transformations. A number of examples of generating S-boxes using quasigroups and other algebraic structures are also given. The considered methods for generating S-boxes make it possible to obtain new S-boxes that have the necessary cryptographic properties that are the same or even better than those of the S-box built for the Rijndael algorithm.

IoT-Based Motorbike Ambulance: Secure and Efficient Transportation

The predilection for 5G telemedicine networks has piqued the interest of industry researchers and academics. The most significant barrier to global telemedicine adoption is to achieve a secure and efficient transport of patients, which has two critical responsibilities. The first is to get the patient to the nearest hospital as quickly as possible, and the second is to keep the connection secure while traveling to the hospital. As a result, a new network scheme has been suggested to expand the medical delivery system, which is an agile network scheme to securely redirect ambulance motorbikes to the nearest hospital in emergency cases. This research provides a secured and efficient telemedicine transport strategy compatible with the vehicle social network (VSN). The proposed telemedicine method should find the best ambulance motorbike route for getting patients to the hospital as quickly as possible. This approach also enables the secure exchange of information between ambulance motorbikes and hospitals. Ant colony optimization (ACO) is utilized as a SWARM technique to expand the capabilities of 5G-wireless mesh networks to determine the best path. To secure communication, the secure socket layer (SSL), which is boosted once by the advanced encryption standard (AES), has achieved a new suggested scheme as a cybersecurity approach. According to the performance evaluation, this approach will determine the optimal route for motorbike ambulances. Additionally, this technique establishes a secure connection between ambulance motorbikes and the hospital. The study enhances telemedicine transportation.

Hybrid Encryption Algorithm for Sensitive Information of College Physical Fitness in Cloud Storage Environment

In order to improve the security of college sports fitness sensitive information, this paper proposes a hybrid encryption algorithm for college sports fitness sensitive information in cloud storage environment. Build an analysis model of influencing factors of cloud storage environment to identify the risk value of sensitive information; Using Bloom filter data structure to eliminate redundant data of sensitive information; The transmission channel model of sensitive information and the security coding model of sensitive information are constructed. Combined with the fuzzy differential information fusion method, the complete key of sensitive information under the symmetric encryption protocol is obtained to realize the key optimization design. Through AES encryption and decryption algorithm, the anti encryption control and structural reorganization of college sports fitness sensitive information, and the iterative convergence control of hybrid encryption, so as to realize the hybrid encryption of college sports fitness sensitive information. The encryption time of the design algorithm under different attribute numbers is always kept below 0.2S, the maximum encryption time under different number of software packages is only 0.5 s, and the encryption accuracy can reach 1, which proves that the design algorithm has certain application value.

Enabling PIM-based AES encryption for online video streaming

Encryption of streaming video is becoming critical to the success of commercial enterprise and to consumers alike. To meet copyright and privacy requirements, encrypting video data on-the-fly during transmission is necessary. In this work we employ Advanced Encryption Standard (AES) due to its security and flexibility. However, it is compute and memory-intensive. Increasing the number of concurrent streamers only exacerbates the problem. To ameliorate this situation, we propose a Processing-In Memory (PIM) architecture AESPIM to offload AES encryption computation to the memory side. Based on our experimental results, AES performance can be improved up to 42% with compared with the traditional CPU based implementation by significantly reducing data movement and increased memory bandwidth. We further study the data-level and user-level parallelism of the video streaming environment in our base design AESPIM architecture, and propose an advanced design based on user-level parallelism to achieve additional 34% performance improvement. Furthermore, we implement a QoS-aware scheduler to solve its potential workload imbalance bottleneck. Based on evaluation results, performance can be further optimized by up to 6% on average.

A Trusted Security Key Management Server in LoRaWAN: Modelling and Analysis

The traditional Long-Range Wide-Area Network (LoRaWAN) uses an Advanced Encryption Standard (AES) 128 bit symmetric key to secure entities and data against several attacks. However, due to the existence of heterogeneous applications, designing a globally accepted and resilient LoRaWAN security model is challenging. Although several security models to maximize the security efficiency in LoRaWAN exist using the trusted key server to securely manage the keys, designing an optimum LoRaWAN security model is yet to be fully realized. Therefore, in this paper, we proposed two LoRaWAN security algorithms, A and B, for a trusted key management server (TKMS) to securely manage and distribute the keys amongst the entities. Algorithm B is an enhanced version of Algorithm A, which utilizes the security shortcomings of Algorithm A. We employed two formal analysis methods in the modelling, results analysis, and verification. The Scyther security verification tool was used for algorithm modelling and analysis against all possible attacks, while BAN logic was used to prove the logical correctness of the proposed algorithms. The results indicate that BAN logic feasibly proves the model logic correctness and the security claims employed in Scyther are reliable metrics for assessing the algorithms’ security efficiency. The security claims proved that the security algorithm is more secure and reliable as no attacks were detected across all entities in the enhanced-Algorithm B, unlike in Algorithm A. Moreover, the application of hashing minimizes computation cost and time for authentication and message integrity as compared to symmetric and asymmetric encryption. However, the proposed algorithm is yet to be verified as completely lightweight.

New Key-Dependent S-Box Generation Algorithm on AES

Aims: Cryptography means 'hidden secrets'. The primary purpose of cryptography is to protect networks and data over a wireless communication channel. The cryptographic approach secures the data of a network from any internal or external attacks. Background: There are several kinds of cryptographic techniques, such as Data Encryption Standard (DES), RSA (Rivest- Shamir- Adleman), Advanced Encryption Standard (AES), Blowfish, Twofish, etc. Out of these algorithms, AES shows wide acceptance for its superiority in providing confidentiality to secret information. Another cause for extensive acceptance is that AES is simple, convenient to implement, has a low charge, and higher security. Several changes have been proposed to modify AES by cryptographers and researchers all around the world. Objective: This research paper offers a new key-dependent s-box generation algorithm for AES. Methods: A list of irreducible polynomials of degree 8 is used to generate the s-box depending on the secret key to provide more invulnerable ciphertext in comparison to standard AES. This design of this proposed model is easy and convenient to implement than different dynamic s-box technology algorithms. Results : The metrics chosen for overall performance evaluation are Frequency Distribution, Chi-square Test, Avalanche Effect, and Strict Avalanche Criterion. Conclusion: The proposed algorithm satisfies the desired property of these metrics and provides better security in contrast to standard AES.

A Highly Secure FPGA-Based Dual-Hiding Asynchronous-Logic AES Accelerator Against Side-Channel Attacks

Encryption in field-programmable gate array (FPGA) often provides a good security solution to protect data privacy in Internet-of-Things systems, but this security solution can be compromised by side-channel attacks (SCAs). In this article, we present an FPGA-based dual-hiding asynchronous-logic (async-logic) advanced encryption standard (AES) accelerator, which is highly resistant against SCAs and yet low area/energy overheads. The proposed AES accelerator achieves vertical (amplitude) SCA hiding via an area-efficient dual-rail mapping approach and a zero-value (ZV) compensated substitution-box (S-Box), while enhancing the horizontal (temporal) SCA hiding of async-logic operations via a timing-boundary-free input arrival-time randomizer and a skewed-delay controller. A comprehensive SCA evaluation is performed with 11 SCA models, and we show that our proposed design can offer a strong SCA resistance with measurement-to-disclosure (MTD) of >20 million traces. To our best knowledge, our design is the most secure AES design evaluated with the largest number of traces in FPGA. To compare the design overheads for security, we quantify the figure of merit as normalized (Area <inline-formula xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink"> <tex-math notation="LaTeX">$\times $ </tex-math></inline-formula> Energy/MTD(All) <inline-formula xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink"> <tex-math notation="LaTeX">$\times 10^{6}$ </tex-math></inline-formula> ). The figure of merit of our proposed design is <inline-formula xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink"> <tex-math notation="LaTeX">$403\times $ </tex-math></inline-formula> smaller than the benchmark dual-rail synchronous-logic design and <inline-formula xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink"> <tex-math notation="LaTeX">$95\times $ </tex-math></inline-formula> smaller than a reported async-logic design.

Enhance Facial Biometric Template Security using Advance Encryption Standard with Least Significant Bit

Security of data has been a major issue for many years which has lead to several challenges; loss of data and also allure hackers to where data are been stored. Biometric system to some extend has helped in combating these security issues, the major issues with the biometric system is how to properly secure the template been generated from hackers and unauthorized users. In this paper we combine cryptography and steganography to enhance security of biometric templates using the advance encryption standard (AES) and the least significant bit (LSB) technique to encrypt these templates and secure it from hackers, Cryptography and Steganography are the two widely employed techniques for securing and hiding data. The center of attention of this paper is the potency of combining cryptography and stenography techniques to improve the security of biometric templates.

Using Non-Autonomous Chaotic Clocks to Drive CPA-Resistant AES Cryptographic Chips

In this brief, we provide further evidence on the robustness of the chaotic clocking technique for driving a Correlation Power Analysis (CPA) resistant cryptographic chip running the Advanced Encryption Standard (AES). In particular, we explore the use of non-autonomous chaotic oscillators to improve the chip’s timing and power performance. We show that using this type of oscillator significantly reduces the performance degradation associated with switching from a normal periodic clock to a chaotic clock while remaining robust against side channel attacks. Simulations and experimental results using a Field Programmable Gate Array (FPGA) prototype are reported as a proof of concept.

Review on Cryptography and Network Security Zero Knowledge Technique in Blockchain Technology

A huge amount of data has been generated every day across the world by organizations with the emergence of the World Wide Web, social networks, along with e-commerce applications. To safeguard the network along with data transmission that occurs over a wireless network, cryptography along with network security (NS) is utilized. In data transmission over a wireless untrustworthy network, securing data is a major concern. Providing security to the wireless sensor networks is highly significant; NS provides security not only to the end system but also to all over the network system. Consequently, NS, cryptography, present progress in NS, linear cryptanalysis (LC), together with differential cryptanalysis (DC) are explicated in this work. The outcomes of the encryption time (ET) versus file size for data encryption standard (DES), advanced encryption standard (AES), 3DES, Rivest-Shamir-Adleman (RSA), blowfish, and the decryption time (DT) versus file size for RSA, AES, modified RSA (MRSA), and nth degree truncated polynomial ring units (NTRU) are also evaluated in this paper.

Power to Pulse Width Modulation Sensor for Remote Power Analysis Attacks

Field-programmable gate arrays (FPGAs) deployed on commercial cloud services are increasingly gaining popularity due to the cost and compute benefits offered by them. Recent studies have discovered security threats than can be launched remotely on FPGAs that share the logic fabric between trusted and untrusted parties, posing a danger to designs deployed on cloud FPGAs. With remote power analysis (RPA) attacks, an attacker aims to deduce secret information present on a remote FPGA by deploying an on-chip sensor on the FPGA logic fabric. Information captured with the on-chip sensor is transferred off the chip for analysis and existing on-chip sensors demand a significant amount of bandwidth for this task as a result of their wider output bit width. However, attackers are often left with the only option of using a covert communication channel and the bandwidth of such channels is generally limited. This paper proposes a novel area-efficient on-chip power sensor named PPWM that integrates a logic design outputting a pulse whose width is modulated by the power consumption of the FPGA. This pulse is used to clear a flip-flop selectively and asynchronously, and the single-bit output of the flip-flop is used to perform an RPA attack. This paper demonstrates the possibility of successfully recovering a 128-bit Advanced Encryption Standard (AES) key within 16,000 power traces while consuming just 25% of the bandwidth when compared to the state of the art. Moreover, this paper assesses the threat posed by the proposed PPWM to remote FPGAs including those that are deployed on cloud services.

An Adaptive Enhanced Technique for Locked Target Detection and Data Transmission over Internet of Healthcare Things

The incredible advancements in data transmission technology have opened up more potentials for data security than ever before. Numerous methods for data protection have been developed during the previous decades, including steganography and cryptography. The security and integrity of medical data have emerged as major barriers for healthcare service systems as the Internet of Things has evolved dramatically in the healthcare business. Communication between two devices securely is a difficult problem. Numerous cryptographic algorithms are already available, including data encryption standard (DES), Rivest–Shamir–Adleman (RSA), and advanced encryption standard (AES). In this paper, we present a hybrid security model for the protection of diagnostic text data contained in medical photographs. The proposed model is built by combining a proposed hybrid encryption system with either a 2D Discrete Wavelet Transform 1 Level (2D-DWT-1L) or a 2D Discrete Wavelet Transform 2 Level (2D-DWT-2L) steganography technique. The suggested model encrypts secret data and hides them using 2D-DWT-3L. As text covers, color and grayscale images are employed. The suggested system’s performance was tested using PSNR, SSIM, MSE, and Correlation. Associated to state-of-the-art approaches, the proposed model masked personal patient data with high capacity, imperceptibility and minimum deterioration in the received stego-image. We use MATLAB to build the proposed mechanism, and measures such as throughput and execution time are used to assess performance.

Solving User Priority in Cloud Computing Using Enhanced Optimization Algorithm in Workflow Scheduling.

Cloud computing is a procedure of stockpiling as well as retrieval of data or computer services over the Internet that allows all its users to remotely access the data centers. Cloud computing provides all required services to the users, but every platform has its share of pros and cons, and another major problem in the cloud is task scheduling or workflow scheduling. Multiple factors are becoming a challenge for scheduling in cloud computing namely the heterogeneity of resources, tasks, and user priority. User priority has been encountered as the most challenging problem during the last decade as the number of users is increasing worldwide. This issue has been resolved by an advanced encryption standard (AES) algorithm, which decreases the response time and execution delay of the user-request. There are multifarious tasks, for instance, deploying the data on the cloud, that will be executed according to first come first serve (FCFS) and not on the payment basis, which provides an ease to the users. These investigated techniques are 30.21%, 25.20%, 25.30%, 30.25%, 24.26%, and 36.9 8% improved in comparison with the traditional FFOA, DE, ABC, PSO, GA, and ETC, respectively. Moreover, during iteration number 5, this approach is 15.20%, 20.22%, 30.56%, 26.30%, and 36.23% improved than that of the traditional techniques FFOA, DE, ABC, PSO, GA, and ETC, respectively. This investigated method is more efficient and applicable in certain arenas where user priority is the primary concern and can offer all the required services to the users without any interruption.

A Novel High-Speed Data Encryption Scheme for Internet of Medical Things Using Modified Elliptic Curve Diffie–Hellman and Advance Encryption Standard

The security of data in an IoT network is of utmost importance. The medical IoT devices need to implement the security protocols in the devices to safeguard the crucial information. This paper proposes a novel high-speed data encryption scheme using elliptic curve cryptography (ECC) for key generation, key length reduction, Diffie–Hellman key exchange, SHA-256 and advance encryption standard (AES). The proposed hybrid data encryption scheme begins with elliptic curve key generation. Each authorized user in the broadcast range generated a private key using ECC. The proposed key reduction algorithm reduces the size of the secret key generated. This key is exchanged efficiently between the broadcast members using Diffie–Hellman key exchange. Each user then generates their final encryption keys. These keys are encoded using SHA-256 algorithm for further security. These keys are then used to encrypt the data using AES algorithm and sent to the cloud. The intended receivers can check the identity of the sender and decrypt the data using their own keys. The proposed method also includes user identity authentication. The origin of the message is verified to authenticate the sender of the message. This implementation is apt for home automation applications where data collected by medical devices like Fitbit and watches need to be shared among multiple users. The proposed method is at par in providing security to the data in much less time. The throughput, key generation time, key length, encryption time, decryption time and memory usage, Avalanche effect are efficient in comparison to existing methods.

Forensic investigation of Cisco WebEx desktop client, web, and Android smartphone applications.

Digital forensic analysis of videoconferencing applications has received considerable attention recently, owing to the wider adoption and diffusion of such applications following the recent COVID-19 pandemic. In this contribution, we present a detailed forensic analysis of Cisco WebEx which is among the top three videoconferencing applications available today. More precisely, we present the results of the forensic investigation of Cisco WebEx desktop client, web, and Android smartphone applications. We focus on three digital forensic areas, namely memory, disk space, and network forensics. From the extracted artifacts, it is evident that valuable user data can be retrieved from different data localities. These include user credentials, emails, user IDs, profile photos, chat messages, shared media, meeting information including meeting passwords, contacts, Advanced Encryption Standard (AES) keys, keyword searches, timestamps, and call logs. We develop a memory parsing tool for Cisco WebEx based on the extracted artifacts. Additionally, we identify anti-forensic artifacts such as deleted chat messages. Although network communications are encrypted, we successfully retrieve useful artifacts such as IPs of server domains and host devices along with message/event timestamps.

DITES: A Lightweight and Flexible Dual-Core Isolated Trusted Execution SoC Based on RISC-V.

A Trusted Execution Environment (TEE) is an efficient way to secure information. To obtain higher efficiency, the building of a dual-core system-on-chip (SoC) with TEE security capabilities is the hottest topic. However, TEE SoCs currently commonly use complex processor cores such as Rocket, resulting in high resource usage. More importantly, the cryptographic unit lacks flexibility and ignores secure communication in dual cores. To address the above problems, we propose DITES, a dual-core TEE SoC based on a Reduced Instruction Set Computer-V (RISC-V). At first, we designed a fully isolated multi-level bus architecture based on a lightweight RISC-V processor with an integrated crypto core supporting Secure Hashing Algorithm-1 (SHA1), Advanced Encryption Standard (AES), and Rivest–Shamir–Adleman (RSA), among which RSA can be configured to five key lengths. Then, we designed a secure boot based on Chain-of-Trust (CoT). Furthermore, we propose a hierarchical access policy to improve the security of inter-core communication. Finally, DITES is deployed on a Kintex 7 Field-Programmable-Gate-Array (FPGA) with a power consumption of 0.297 W, synthesized using TSMC 90 nm. From the results, the acceleration ratios of SHA1 and RSA1024 decryption/encryption can reach 75 and 1331/1493, respectively. Compared to exiting TEE SoCs, DITES has lower resource consumption, higher flexibility, and better security.

5G Digital Twin: A Study of Enabling Technologies

5G networks require dynamic network monitoring and advanced security solutions. This work performs the essential steps to implement a basic 5G digital twin (DT) in a warehouse scenario. This study provides a paradigm of end-to-end connection and encryption to internet of things (IoT) devices. Network function virtualization (NFV) technologies are crucial to connecting and encrypting IoT devices. Innovative logistical scenarios are undergoing constant changes in logistics, and higher deployment of IoT devices in logistic scenarios, such as warehouses, demands better communication capabilities. The simulation tools enable digital twin network implementation in planning. Altair Feko (WinProp) simulates the radio behavior of a typical warehouse framework. The radio behavior can be exported as a radio simulation dataset file. This dataset file represents the virtual network’s payload. GNS3, an open-source network simulator, performs data payload transmission among clients to servers using custom NFV components. By transmitting data from client to server, we achieved end-to-end communication. Additionally, custom NFV components enable advanced encryption standard (AES) adoption. In summary, this work analyzes the round-trip time (RTT) and throughput of the payload data packages, in which two data packages, encrypted and non-encrypted, are observed.

An ANOVA Method to Rapidly Assess Information Leakage Near Cryptographic Modules

A measurement method based on the analysis of variance <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">F</i> -statistic is presented to rapidly evaluate cryptographic modules’ vulnerability to fine-grained EM side-channel analysis (SCA) attacks. The proposed method assumes that evaluators can control the device under test to set carefully chosen inputs to computations of interest and to repeat measurements as many times as needed. It identifies optimal measurement configurations—that minimize the marginal cost for repeated attacks to extract the data of interest—in three stages. In the first two stages, the variances in observed fields are analyzed using specially designed test cases and low <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">F-</i> value measurement configurations susceptible to noise are eliminated. In the third stage, the data of interest are extracted via a correlation-analysis attack using the remaining, high <italic xmlns:mml="http://www.w3.org/1998/Math/MathML" xmlns:xlink="http://www.w3.org/1999/xlink">F-</i> value, configurations. The method is used to evaluate nine Advanced Encryption Standard (AES) implementations, seven of which were hardened against EM SCA attacks. The test cases for the first two stages are constructed by generating extreme AES encryption keys and input plaintexts. The least/most effective countermeasures are found to increase the marginal cost of EM SCA attacks by ∼1.1×/>30×; the proposed method could evaluate the vulnerabilities of hardened AES modules using ∼1.5–37× fewer measurements than alternatives.