Chaining Mode Research Articles

Performance Evaluation of Security-Throughput Tradeoff with Channel Adaptive Encryption

With the ever increasing volume of information over wireless medium, security has assumed an important dimension. The security of transmitted data over a wireless channel aims at protecting the data from unauthorized intrusion. Wireless network security is achieved using cryptographic primitives. Some properties that give encryption mechanism their cryptographic strength also make them very sensitive to channel error as well. Therefore, security for data transmission over wireless channel results in throughput loss. Tradeoff between security and throughput is always a major concern in wireless networks. In this paper, a Link Adaptive Encryption scheme is evaluated that adapts to channel variations and enhances the security level of WLANs without making any compromise with the network performance. Numerical results obtained through simulation for link adaptive encryption scheme are compared with the fixed block length encryption technique operating in Cipher Block Chaining (CBC) mode of operation. Optimal block length is also computed, which is assumed to be the effective strength of the cipher. It has been observed that security attained with link adaptive scheme operating in CBC mode is a better solution for security and throughput tradeoff.

High Throughput– Resource Saving Hardware Implementation of AES-CCM for Robust Security Network

This paper presentsa new architecture andASICimplementation of high throughput of Counter with Cipher Block Chaining - Message Authentication Code(CCM) for robust security network such as gigabit wireless IEEE 802.11ac in case considering trade-off between throughput and resource saving. We propose a new architecture of AES-CCM core adopted in parallel which utilizes two separated AES forward cipher cores for MIC calculation in Counter (CTR) Mode and encryption or decryption data in Cipher Block Chaining (CBC) Mode. The implementation of AES-CCM core in Synopsys CMOS SAED90nm process achieves2.69Gbps of throughput at 264MHz clock frequency.The proposed architecture of AES-CCM corereduces latencyby one AES cycle in comparison with conventional architectures. In addition,the AES-CCM core supports bothgeneration-encapsulation and decryption-verifica-tionprocess with symmetrical data processing routine. We also introduce an implementation of reordering AES transformation method comes along with composite Sbox in order to gain maximal period of the composition and saving resources compared to original AES algorithm implementation.  . Index Terms-AES, AES-CCM, CCMP, WPA2, 802.11i, Security

A Self-Adaptive Parallel Encryption Algorithm Based on Discrete 2D-Logistic Map

A self-adaptive parallel encryption algorithm based on discrete 2D-Logistic map is developed according to the position scrambling and diffusion of multi-direction in variable space of spatial chaos. The binary sequences b1b2b3···bn are obtained according to the user key, in which the binary sequence 0 and 1 denote distribution mode of processors and the number of binary sequence n denotes cycle number. Then the pseudorandom 2D matrix is generated by 2D-Logistic map, and adaptive segmentation is applied in image matrix and pseudorandom matrix according to the value and the number of binary sequence. The parallel operation is used among blocks to improve efficiency and meet real-time demand in transmission processes. However, the pixel permutation is applied in partitioned matrix through ergodic matrix generated by pseudo-random matrix-block to decrease the correlation of adjacent pixels. Then the pixel substitution is used for fully diffusing through cipher block chaining mode until n cycles. The proposed algorithm can meet the three requirements of parallel operation in image encryption and the real-time requirement in transmission processes. The security is proved by theoretical analysis and simulation results.

A Joint Encryption/Watermarking System for Verifying the Reliability of Medical Images

In this paper, we propose a joint encryption/water-marking system for the purpose of protecting medical images. This system is based on an approach which combines a substitutive watermarking algorithm, the quantization index modulation, with an encryption algorithm: a stream cipher algorithm (e.g., the RC4) or a block cipher algorithm (e.g., the AES in cipher block chaining (CBC) mode of operation). Our objective is to give access to the outcomes of the image integrity and of its origin even though the image is stored encrypted. If watermarking and encryption are conducted jointly at the protection stage, watermark extraction and decryption can be applied independently. The security analysis of our scheme and experimental results achieved on 8-bit depth ultrasound images as well as on 16-bit encoded positron emission tomography images demonstrate the capability of our system to securely make available security attributes in both spatial and encrypted domains while minimizing image distortion. Furthermore, by making use of the AES block cipher in CBC mode, the proposed system is compliant with or transparent to the DICOM standard.

Passwords Management System using Blowfish Cryptographic Algorithm with Cipher Block Chaining Mode

Everyone has the security problem of private information and increase in demand of Internet use, creates security problems which results in loss of internet users passwords. There are too many users on the Internet; you might have found one user having more usernames and passwords, which contains user’s private information. It is difficult to remember all usernames and passwords and unsafe to write them on paper. Password security and data management is very difficult task. Security can be provided by cryptography and data management can be provided by password management system. To solve this problem, this paper explained a design and implementation of Passwords Management System, by which one can manage his usernames and passwords efficiently. Proposed Password Management System (PMS) is based on Blowfish Algorithm that operates on symmetric block cipher with 56-bytes key. The implementation of Password Management System (PMS) uses blowfish cryptographic algorithm in cipher block chaining mode (CBC) which provides high security. Implemented system deals with everything from the simple storage of user name and passwords to the management of password access across many users.

Audio Encryption in Hand sets

A novel method to encrypt audio(sound) stream of data by applying chaos is discussed. A pair of one-dimensional logistic maps is used for generating a chaotic sequence. The routine tests of encryption are performed and the results are observed. The proposed scheme is then implemented in real time on a mobile phone and the robustness of the idea is established. Index Terms — chaotic System, cipher-block chaining (CBC) mode , Mean squared error (MSE), Peak signal to noise ratio, cryptography, Audio encryption & Output Feedback Mode

Harden Single Packet Authentication (HSPA)

A new single packet authentication method HSPA is presented in this paper. HSPA works transparently for authenticating remote clients and in its design solved two main problems, resource starvation attack and the lack of association between the authentication process and establishing process. Authentication data of HSPA packet is maintained secure by encrypting it using Rijndael, in cipher block chaining (CBC) mode, with a block size of 192 bits and a key length of 192 bits. HSPA evaluation study, in accordance to processing overhead, buffering, and communication overhead, shows that HSPA overhead is marginal as compared to its improvements in authentication.

Design and Implementation of KASUMI Algorithm in ISMACryp Encryption for Video Content Protection in DVB-H Application

Three technologies can be used for content protection in DVB-H; IPSec, SRTP and ISMACryp. ISMA Encryption and Authentication is one of the three chosen technologies for service protection in DVB-H (Digital Video Broadcasting - Handheld), the TV system for portable handheld devices. This paper deals with modification in ISMACryp. The ISMACryp is encoded with MPEG-4 video and MPEG-4 AAC (advanced audio coding), while leaving all structural data as it is. Two modes of ISMACryp are available; the CTR mode (Counter type) and CBC mode (Cipher Block Chaining) mode. Both modes of ISMACryp is based on 128-bit AES algorithm. AES algorithms are more complex and require larger time with more clock cycles for execution. This paper is being first simulate and implement existing ISMACryp using 128-bit Rijndael algorithm and then modified it with KASUMI algorithm that will be provided lower number of clock pulses with lower execution time. The simulation is done in Matlab and implementation in TMS320C6713 DSP kit.

Expected car use reduction in response to structural travel demand management measures

Selecting the appropriate travel demand management (TDM) measures aiming to reduce the environmental problems associated with private transportation demands a thorough understanding of the behavioral consequences of different measures. In this scenario based study, the expected car use reduction in response to one push measure (i.e. raised tax on fossil fuel), one pull measure (i.e. improved public transport), and a combination of the two measures were analyzed. The aim was to compare the expected car use reduction in response to the different TDM measures, the car use reduction strategies used to achieve this reduction, and factors important for the expected car use reduction (i.e. background factors, internal motivational factors (general intention and personal norm), and perceived personal impact of the measure). In a two step between-subject design, a sample of car users first answered a pre-questionnaire and subsequently three groups of car users (N = 274) each evaluated one of the TDM measures. Results demonstrated that the combined measure led to larger expected car use reduction compared to the measures evaluated individually and the reduction was mainly expected to be made by means of trip chaining and changing travel mode. Moreover, internal motivational factors, such as personal norm or general intention, and the perceived impact of the measure, were found to be important for the expected car use reduction in response to the TDM measures.

A novel method for one-way hash function construction based on spatiotemporal chaos

A novel hash algorithm based on a spatiotemporal chaos is proposed. The original message is first padded with zeros if needed. Then it is divided into a number of blocks each contains 32 bytes. In the hashing process, each block is partitioned into eight 32-bit values and input into the spatiotemporal chaotic system. Then, after iterating the system for four times, the next block is processed by the same way. To enhance the confusion and diffusion effect, the cipher block chaining (CBC) mode is adopted in the algorithm. The hash value is obtained from the final state value of the spatiotemporal chaotic system. Theoretic analyses and numerical simulations both show that the proposed hash algorithm possesses good statistical properties, strong collision resistance and high efficiency, as required by practical keyed hash functions.

One-way hash function construction based on chaotic map network

A novel chaotic hash algorithm based on a network structure formed by 16 chaotic maps is proposed. The original message is first padded with zeros to make the length a multiple of four. Then it is divided into a number of blocks each contains 4 bytes. In the hashing process, the blocks are mixed together by the chaotic map network since the initial value and the control parameter of each tent map are dynamically determined by the output of its neighbors. To enhance the confusion and diffusion effect, the cipher block chaining (CBC) mode is adopted in the algorithm. Theoretic analyses and numerical simulations both show that the proposed hash algorithm possesses good statistical properties, strong collision resistance and high flexibility, as required by practical keyed hash functions.

Chaotic keyed hash function based on feedforward–feedback nonlinear digital filter

Abstract In this Letter, we firstly construct an n-dimensional chaotic dynamic system named feedforward–feedback nonlinear filter (FFNF), and then propose a novel chaotic keyed hash algorithm using FFNF. In hashing process, the original message is modulated into FFNF's chaotic trajectory by chaotic shift keying (CSK) mode, and the final hash value is obtained by the coarse-graining quantization of chaotic trajectory. To expedite the avalanche effect of hash algorithm, a cipher block chaining (CBC) mode is introduced. Theoretic analysis and numerical simulations show that the proposed hash algorithm satisfies the requirement of keyed hash function, and it is easy to implement by the filter structure.

Research on End-to-End Encryption of TETRA

The Terrestrial Trunked Radio ( TETRA) system uses end-to-end encryption in addition to the air interface encryption to provide enhanced security. The TETRA system uses a synchronization technique known as frame stealing to provide synchronization of end-to-end encrypted data. However, the frame stealing process degrades the quality of video. This paper proposes an end-to-end encryption system with the frame stealing technique for voice and frame insertion for video. A block cipher in the output feedback mode is used to implement the end-to-end key stream generator. Moreover. In the Short Data Service ( SDS) message encryption, a block cipher in the Cipher Block Chaining ( CBC) mode is used to calculate the cryptographically secure checksum, which is sufficient to certify the integrity.

One-way Hash function based on chaotic neural network

In this paper, a new one-way Hash function is proposed based on chaotic neural network. With the neural network with piecewise linear chaotic map as the output function, the key generation function based on spatiotemporal chaotic system are used to realized the data confusion and diffusion. By the cipher block chaining mode, the proposed method can produce 128-bit Hash value for plaintext with arbitrary length. Theoretical analysis and experimental results indicate that the proposed Hash function satisfies the demands in performance, such as being one-way, having initial value and key sensitivity, collision resistance and real-time applicability.

One-way Hash function construction based on the chaotic map with changeable-parameter

An algorithm for one-way Hash function construction based on the chaotic map with changeable-parameter is proposed in this paper. A piecewise linear chaotic map with changeable-parameter P is chosen, and cipher block chaining mode (CBC) is introduced to ensure that the parameter P in each iteration is dynamically decided by the last-time iteration value and the corresponding message bit in different positions. The final Hash value is obtained by means of the linear transform on the iteration sequence. Theoretical analysis and computer simulation indicate that our algorithm can satisfy all the performance requirements of Hash function in an efficient and flexible manner. It is practicable and reliable, with high potential to be adopted for E-commerce.

One-way Hash function construction based on the chaotic map with changeable-parameter

Abstract An algorithm for one-way Hash function construction based on the chaotic map with changeable-parameter is proposed in this paper. A piecewise linear chaotic map with changeable-parameter P is chosen, and cipher block chaining mode (CBC) is introduced to ensure that the parameter P in each iteration is dynamically decided by the last-time iteration value and the corresponding message bit in different positions. The final Hash value is obtained by means of the linear transform on the iteration sequence. Theoretical analysis and computer simulation indicate that our algorithm can satisfy all the performance requirements of Hash function in an efficient and flexible manner. It is practicable and reliable, with high potential to be adopted for E-commerce.

A 10-Gbps full-AES crypto design with a twisted BDD S-Box architecture

In this brief, we present a high-speed AES IP-core, which runs at 880 MHz on a 0.13-/spl mu/m CMOS standard cell library, and which achieves over 10-Gbps throughput in all encryption modes, including cipher block chaining (CBC) mode. Although the CBC mode is the most widely used and important, achieving such high throughput was difficult because pipelining and/or loop unrolling techniques cannot be applied. To reduce the propagation delays of the S-Box, the slowest function block, we developed a special circuit architecture that we call twisted-binary decision diagram (BDD), where the fanout of signals is distributed in the S-Box circuit. Our S-Box is 1.5 to 2 times faster than the conventional S-Box implementations. The T-Box algorithm, which merges the S-Box and another primitive function (MixColumns) into a single function, is also used for an additional speedup.

Low computational cost integrity for block ciphers

Encryption algorithms supply confidentiality to communications between parties. However, only under certain circumstances, encryption might also supply integrity validation. For those situations, where encryption algorithms do not supply any integrity protection, additional mechanisms must be implemented (hash functions, digital signature). In this way, many solutions have been proposed in the literature, which achieve confidentiallity and integrity checking (some of them also provide authentication), however these methods usually represent a relatively high computational cost. This paper presents a new encryption mode for block cipher algorithms, which is based on the Plaintext Cipher Block Chaining (from now on, PCBC) mode. Our new mode supplies, apart from confidentiality, fast integrity checking with a minimum computational cost. This makes it eminently suitable for ensuring data integrity in GIS systems and at the same time assuring some other GIS requirements.

SATCHMOREBID: SATCHMO(RE) with BIDirectional relevancy

SATCHMORE was introduced as a mechanism to integrate relevancy testing with the model-generation theorem prover SATCHMO. This made it possible to avoid invoking some clauses that appear in no refutation, which was a major drawback of the SATCHMO approach. SATCHMORE relevancy, however, is driven by the entire set of negative clauses and no distinction is accorded to the query negation. Under unfavorable circumstances, such as in the presence of large amounts of negative data, this can reduce the efficiency of SATCHMORE. In this paper we introduce a further refinement of SATCHMO called SATCHMOREBID: SATCHMORE with BIDirectional relevancy. SATCHMOREBID uses only the negation of the query for relevancy determination at the start. Other negative clauses are introduced on demand and only if a refutation is not possible using the current set of negative clauses. The search for the relevant negative clauses is performed in a forward chaining mode as opposed to relevancy propagation in SATCHMORE which is based on backward chaining. SATCHMOREBID is shown to be refutationally sound and complete. Experiments on a prototype SATCHMOREBID implementation point to its potential to enhance the efficiency of the query answering process in disjunctive databases.

Generic architecture and semiconductor intellectual property cores for advanced encryption standard cryptography

A generic architecture for implementing the advanced encryption standard (AES) encryption algorithm in silicon is proposed. This allows the instantiation of a wide range of chip specifications, with these taking the form of semiconductor intellectual property (IP) cores. Cores implemented from this architecture can perform both encryption and decryption and support four modes of operation: (i) electronic codebook mode; (ii) output feedback mode; (iii) cipher block chaining mode; and (iv) ciphertext feedback mode. Chip designs can also be generated to cover all three AES key lengths, namely 128 bits, 192 bits and 256 bits. On-the-fly generation of the round keys required during decryption is also possible. The general, flexible and multi-functional nature of the approach described contrasts with previous designs which, to date, have been focused on specific implementations. The presented ideas are demonstrated by implementation in FPGA technology. However, the architecture and IP cores derived from this are easily migratable to other silicon technologies including ASIC and PLD and are capable of covering a wide range of modern communication systems cryptographic requirements. Moreover, the designs produced have a gate count and throughput comparable with or better than the previous one-off solutions.