Diffie-Hellman Key Exchange Algorithm Research Articles

Advancing Security in Lightweight S-WBSN for E-Healthcare

Wireless body sensor networks (WBSNs) are a critical component of e-healthcare, enabling continuous monitoring of vital signs and other health parameters. However, the limited capacity of WBSNs poses a significant challenge to securing data transmission. A novel architecture for Secure Wireless Body Sensor Networks (S-WBSN) has been introduced, focusing on efficiency and robust security. The S-WBSN architecture employs a combination of the OTP-Q stream block cipher and the Diffie-Hellman key exchange algorithm to ensure secure data transmission and mutual authentication between critical components. The OTP-Q algorithm encrypts data obtained from WBSN sensors, while the Diffie-Hellman algorithm establishes a secure communication channel between the WBSN, Local Processing Center (LPC), and Data Server. This innovative approach effectively meets essential security requirements, including mutual authentication and privacy preservation. It also demonstrates notable efficiency, consuming fewer CPU cycles than existing state-of-the-art security approaches. Comparative analysis showcases reduced processing time for encryption and decryption, making the S-WBSN architecture an attractive solution for e-healthcare data monitoring security. In summary, the S-WBSN architecture significantly enhances the security posture of e-healthcare data transfer, prioritizing efficiency, and robust protection. It sets itself apart from contemporary healthcare data monitoring security methodologies by delivering a comprehensive solution that addresses the unique challenges of WBSNs.

Enhancing security in Wireless Body Area Networks (WBANs) with ECC-based Diffie-Hellman Key Exchange algorithm (ECDH).

Wireless Body Area Networks (WBANs) are integral to modern healthcare systems, providing continuous health monitoring and real-time data transmission. The sensitivity of medical data being transmitted makes security a significant concern in WBANs. This study explores the application of the Elliptic Curve Cryptography (ECC)-based Diffie-Hellman Key Exchange (ECDH) algorithm to enhance security within WBANs. The study investigates the suitability of ECC for this context and evaluates the performance and security implications of implementing ECDH in WBANs. The findings reveal that ECDH provides a robust and computationally efficient solution for secure key exchange in WBANs, addressing inherent vulnerabilities. The adoption of ECC-based ECDH is poised to bolster data confidentiality and integrity in WBANs, promoting trust and widespread use of these networks in healthcare applications. This research contributes to the growing body of knowledge regarding security measures in WBANs and opens new avenues for the secure transmission of sensitive medical information.

Physically Unclonable Holographic Encryption and Anticounterfeiting Based on the Light Propagation of Complex Medium and Fluorescent Labels.

Physically unclonable function (PUF) methods have high security, but their wide application is limited by complex encoding, large database, advanced external characterization equipment, and complicated comparative authentication. Therefore, we creatively propose the physically unclonable holographic encryption and anticounterfeiting based on the light propagation of complex medium and fluorescent labels. As far as we know, this is the first holographic encryption and anticounterfeiting method with a fluorescence physically unclonable property. The proposed method reduces the above requirements of traditional PUF methods and significantly reduces the cost. The angle-multiplexed PUF fluorescent label is the physical secret key. The information is encrypted as computer-generated holograms (CGH). Many physical parameters in the system are used as the parameter secret keys. The Diffie-Hellman key exchange algorithm is improved to transfer parameter secret keys. A variety of complex medium hologram generation methods are proposed and compared. The effectiveness, security, and robustness of the method are studied and analyzed. Finally, a graphical user interface (GUI) is designed for the convenience of users. The advantages of this method include lower PUF encoding complexity, effective reduction of the database size, lower requirements for characterization equipment, and direct use of decrypted information without complicated comparative authentication to reduce misjudgment. It is believed that the method proposed in this paper will pave the way for the popularization and application of PUF-based anticounterfeiting and encryption methods.

OTP-Q encryption and Diffie-Hellman mutual authentication for e-healthcare data based on lightweight S-WBSN framework.

Protection of wireless technology-enabled e-healthcare data transfer over constrained devices of body sensor networks using lightweight security mechanisms is the demand of health sector nowadays. A new secure wireless body sensor network architecture (S-WBSN) with reduced CPU cycles and computational cost is proposed. S-WBSN uses OTP-Q (One-Time Pad-Quasi) and Diffie-Hellman key exchange algorithms for encryption and mutual authentication, respectively. To ensure mutual authentication among <WBSN, Local Processing Center (LPC)> and <WBSN, Data Server> components, the Diffie-Hellman key exchange algorithm is used. Using the S-WBSN architecture, security requirements such as mutual authentication, and privacy preservation thwarting security attacks are perfectly met comparing other security-based research works on healthcare data monitoring. The one-time pad-based quasi-group algorithm is a stream block cipher that operates on the data observed from the sensors of the WBSN. Before transmitting encrypted data, authentication is to be established. The proposed system methodology proves to be efficient and consumes fewer CPU cycles. The encryption and decryption processing times are comparatively less than the state-of-the-art approaches.

A Privacy-Preserving Scheme for Medical Diagnosis Records Based on Encrypted Image Steganography

Healthcare diagnosis records are essential as they establish perpetual reports on the health of patients. These records are in nature meant to be kept confidential. It is for this reason that medical data should be secured before transmission. Steganography and cryptography are old concepts used to secure communications. Steganography is hiding data into a carrier, for instance, images, videos, texts, and files. It seeks to hide the existence of communications. Cryptography is communication in deciphering secret writings or ciphers. In our privacy-preserving scheme for healthcare records, a hybrid approach is used to ensure the maximum multi-level security of medical records before transmission. The proposed system utilizes AES-128 which is a symmetric key encryption algorithm to scramble the data. As compared to asymmetric key encryption, symmetric key encryption is faster as only one key is used for both encryption and decryption. To resolve the problem of key distribution that plagues symmetric cryptosystems, the proposed system makes use of the Diffie-Hellman key exchange algorithm for key agreement. In this way, the encryption essentials are securely exchanged before the actual transmission of the date. To ensure efficient and optimal steganography throughput, the Least significant bit (LSB) which involves the hiding of information in the most repetitive bits of each pixel of an image was implemented for steganography. The technique was chosen because the level of distortion made to the image is low hence the image quality change is minimal. As such, the resultant robust system, is highly impeccable, utilises efficient compression, and has improved capacity which are all desirable features for securing medical health records.

ELLIPTIC CURVE CRYPTOGRAPHY AND ITS PRACTICAL APPLICATION

Elliptic curves are one of the most promising tools for constructing modern cryptographic algorithms. The security of elliptic curve cryptography is based on the complexity of solving the discrete logarithm problem in the group of points of the elliptic curve over a finite field. Elliptic curve cryptography enables two parties communicating over public channel using elliptic curve encryption and signing algorithms. Elliptic curves allow to achieve the same level of security with small key sizes than other asymmetric cryptographic algorithms. The article describes the mathematical apparatus of elliptic curves used for cryptographic purposes, the basic operations in the group of points of elliptic curves, such as addition of points, doubling of a point, and scalar multiplication of a point by a number are given. The steps and principles of the Diffie-Hellman key exchange algorithm (ECDH) and the digital signature scheme (ECDSA) on elliptic curves are considered. An overview of standards establishing recommendations and requirements for the use of elliptic curves in cryptographic systems is provided. The advantages of elliptic curve cryptography compared to traditional asymmetric algorithms, such as smaller key sizes, computational speed, and efficient use of resources, are analyzed. Potential threats and vulnerabilities of cryptographic algorithms based on elliptic curves are discussed. The main practical application areas of cryptographic algorithms on elliptic curves, including network security, cryptocurrency operations, message exchange, the Internet of Things, and government institutions are investigated. Examples of popular standardized curves (Curve25519, Curve448, secp256k1) that have been tested and recommended by specialized organizations such as NIST are given.

MACO-DHKE Based Secure Data Transmission in MANETs

Mobile ad hoc networks (MANETs) are the self-sufficient nodes with their unique characteristics, such as open wireless mediums and self-motivated topology, which suffers from security weaknesses. Due to the complexity of the MANET security architecture, it is difficult to detect and prevent security issues in the wired networks. Hence, this paper proposes a secure and QoS-aware data transmission in the MANET that improves the efficiency of the transmission. The optimal route, which is the shortest possible path, is chosen using the modified ant colony optimization algorithm (MACO algorithm) and the secure transmission in MANET is ensured using the Diffie-Hellman key-exchange algorithm (DHKE strategy). The key exchange method is used to improve the security of the transmission of the MANET. This paper shows a high transmission rate on a secure path with a higher PDR and throughput.

A Comprehensive Survey on Lightweight Asymmetric Key Cryptographic Algorithm for Resource Constrained Devices

Elliptic Curve Cryptography, being a popular lightweight asymmetric key cryptographic algorithm that is widely adapted to meet high security requirement of resource constrained devices, were surveyed in this work. Further, ECC-based ElGamal cryptosystem, Elliptic Curve Digital Signature Algorithm, and Elliptic Curve Diffie Hellman Key Exchange Algorithm have been comprehensively reviewed with its characteristics and preferred applications. In addition, few related work are analyzed and suggestions for suitable target applications were provided. Moreover, ECC being a popular asymmetric key cryptographic technique is reported to be modeled using Vivado tool for various target implementation on FPGA devices. Techniques that enhances throughput, area, and computation time that caters for IoT applications were also reviewed. Design implementations on the advanced FPGA boards for IoT device/similar applications were also analyzed and compared.

A Secure and Cost-Effective Platform for Employee Management System Using Lightweight Standalone Framework Over Diffie Hellman’s Key Exchange Algorithm

Aim: Cloud computing has become one of the most popular storage and computing technologies. The aim of this paper is to provide a secure and cost effective platform for the employee management system. Materials and Methods: This study contains a total of 2 groups, the Diffie Hellman key exchange algorithm is analyzed in the group 1 (434 samples), and the advanced encryption standard is analyzed in the group 2 (434 samples). The accuracy and efficiency of each of the models are compared. Result: This paper is to improve the efficiency of the algorithm used in the employee management system. The proposed model appears to be efficient and faster than the existing algorithm and the mean accuracy of detection is ±1SD. Conclusion: The final outcome of the existing system, Diffie Hellman’s algorithm is compared with the outcome of the advanced encryption standard algorithm, and the proposed model proved to be having higher efficiency (1.2 times faster) than the existing model.

DEroute: trust-aware data routing protocol based on encryption and fuzzy concept for MANET secure communication in Iot

ABSTRACT The Internet of Things in smart environments interrelates with Mobile Ad‐hoc Network and Wireless Sensor Network, which becomes more attractive and efficiently flourishing. Moreover, Mobile Ad‐hoc Network is applied in various fields including intelligent transportation, emergency communications after disaster, and Internet of Things. The incorporation of Internet of Things and Mobile Ad‐hoc Network become a rising theory for enabling opportunistic communication in Internet of Things. The security provisioning for secure communication is still the major challenge in Mobile Ad‐hoc Network – Internet of Things. Thus, in this paper, the DEroute algorithm is developed for secure communication Internet of Things structure, where Internet of Things nodes are located in mobile ad-hoc manner. In order to avoid the route list modification, nodes’ address is encrypted based on generated secret keys by Diffie–Hellman key-exchange algorithm. The fuzzy system with trust parameters, like historical, indirect and direct trust factors are considered for the identification of secure nodes. The bi-filtering process is also performed for filtering important nodes. Thus, the developed DEroute model achieved enhanced performance with respect to delay, packet delivery ratio and throughput of 0.1674 sec, 87.23% and 25.19 mbps, respectively.

A cloud-based buyer-seller watermarking protocol (CB-BSWP) using semi-trusted third party for copy deterrence and privacy preserving.

Nowadays, cloud computing provides a platform infrastructure for the secure dealing of digital data, but privacy and copy control are the two important issues in it over a network. Cloud data is available to the end user and requires enormous security and privacy techniques to protect the data. Moreover, the access control mechanism with encryption-based technique protects the digital rights for participants in a transaction, but they do not protect the media from being illegally redistributed and do not restrict an authorized user to reveal their secret information this is referred to as you can access but you cannot leak. This brought out a need for controlling copy deterrence and preserving the privacy of digital media over the internet. To overlook this, we proposed a cloud-based buyer-seller watermarking protocol (CB-BSWP) with the use of a semi-trusted third party for copy deterrence and privacy-preserving in the cloud environment. The suggested scheme uses 1) a privacy homomorphism cryptosystem with Diffie-Hellman key exchange algorithm to provide an encrypted domain for the secure exchange of digital media 2) adopt robust and fair watermarking techniques to ensure high imperceptibility and robustness for the watermarked images against attacks 3) two services of cloud Infrastructure as a service (IaaS) to support virtualized computing infrastructure and Watermarking as a service (WaaS) to execute the speedy process of watermarking, this process is supported by watermarking generation and signing phase (WGSP) and watermark extraction and verifying phase reported in 4th section. 4) cloud service provider (CSP) considered as a “semi-trusted” third party to reduce the burden from the trusted third party (TTP) server and provide storage for the encrypted digital media on cloud databases, this frees content owner from not having a separate storage infrastructure. The proposed scheme encrypts the digital content by using SHA-512 algorithm with key size 512-bits to ensure that it doesn’t affect computational time during the process of encryption. The suggested scheme addresses the problems of piracy tracing, anonymity, tamper resistance, non-framing, customer rights problem. The role of cloud is crucial because it reduces communication overhead, provides unlimited storage, supports the watermarking process and offers a solution for the secure distribution of end-to-end security of digital content over cloud. To check the performance of the suggested CB-BSWP protocol against common image processing attacks, we have conducted experiments in which the perceptual quality of watermarked digital media was found enhanced, resulting in a robust watermark.

Secure Transfer of Digital Evidence from the Crime Scene

The essential task in tracing the source of the theft is to secure the digital proof from the location where the data was misused. But, more significantly, the data evidence must be sent to the main server without being intercepted by a Man-in-the-Middle assault. Diffie-Hellman Key Exchange Algorithm is used to securely exchange cryptographic keys from the admin and investigator. Here different layers of security have been identified. The proposed method uses message digest, encryption and steganography to implement secure transfer of digital evidence from the crime scene.

FPGA implementation of hybrid asymmetric key-based digital signature and Diffie-Hellman key exchange algorithm for IoT application

A new RSA-based Diffie-Hellman key exchange with a digital signature algorithm has been proposed and implemented through FPGAs. In the proposed algorithm, the problem of man-in-the-middle attack is solved. The proposed algorithm is more useful in the case of the client and server-based interaction like in the case of wireless mobile internet (4G/LTE) usage by an individual and in the case of bank transactions that are made by the individuals. Security, resistance to side attacks and collisions, larger key size, and non-factorisation of the prime numbers are the advantages of the RSA which is used in the proposed algorithm. Synthesis and implementation of the encrypted block have been compared and analysed on Spartan-3, Spartan-6e, Virtex-4 and Spartan-6 FPGA boards. Complete security is achieved using digital signature and previous problems of the traditional algorithm.

FPGA Implementation of Hybrid Asymmetric key based Digital Signature and Diffie-Hellman Key Exchange Algorithm for IoT Application

FPGA Implementation of Hybrid Asymmetric key based Digital Signature and Diffie-Hellman Key Exchange Algorithm for IoT Application

Design and Implementation of an Encryption Unit to Enhance Satellite Communication Security

Satellite projects consume very high resources in all of their phases (research, design, manufacturing, testing and launching), they also extend for significant amount of time, and hence satellites must be protected against intrusion and data perception. Over the past years, satellite security has been overlooked except for military satellites because satellite intrusions were inconceivable as they far away from earth, but recently commercial satellite manufacturers realized the importance of satellite security because satellite intrusion became not an impossible task. In this paper, we present the design and implementation of encryption unit to secure satellite communication system by ciphering tele-commands using advanced encryption algorithm (AES) with random key generation, Diffie-Hellman key exchange algorithm and Hash-based message authentication code (HMAC) digital signature algorithm.

Research on psychological stress intervention of college students based on Diffie-hellman key exchange algorithm

At present, the mental health of college students has also become an important issue that urgently needs attention under the influence of the surrounding environment. It is coupled with the grim employment situation after graduation and the students’ psychological burden is becoming more and heavier. This paper based on Diffie-Hellman key exchange algorithm studied the effect of psychological stress intervention. First, the Diffie-Hellman key exchange algorithm was analyzed, and then the Diffie-Hellman prediction model was established according to the psychological pressure of college students. Secondly, the simulation test was conducted to compare the simulated results with the original data. The conclusion of the data fitting of the network model training set, verification set and test set were good and the error was very small. Finally, the detailed application of the algorithm and the model were described.

Secure Device-to-Device communications for 5G enabled Internet of Things applications

Smart cities are developed to optimize operations across the city such as waste and traffic management, water supply management, criminal tracking, and pollution monitoring, etc. Smart cities are formed by the interconnection of various Internet of Things (IoT) devices for collecting the data from objects and humans to perform necessary actions. But the challenge lies in the exchange of enormous information in real-time to drive smart city applications. Therefore, smart city applications make use of Device-to-Device (D2D) communications which provides higher bandwidth and lower latency in message exchanges. D2D communications do not need any infrastructure for communication and hence are cost and time effective. However, this advantage becomes a threat as no third party is involved to verify the authenticity of the devices before exchange of real information. Consequently, a reliable authentication mechanism is required to address the security issues in WiFi (wireless fidelity) Direct communication. In this paper, we propose a secure and lightweight mutual authentication and key agreement protocol for WiFi Direct. The principle of the protocol is based upon a commit/open pair and Diffie Hellman key exchange algorithm. It is observed from the simulations that the proposed protocol successfully authenticates the D2D devices in the WiFi Direct environment. Investigation through formal security analysis revealed the strong resistivity of the proposed protocol against the prominent attacks in the WiFi Direct environment. The comparative analysis demonstrates the reliability of the suggested protocol over the traditional one. The proposed protocol eliminates the occurrence of the denial of service (DoS) and man-in-the-middle (MITM) attacks in the discovery and key agreement phase, respectively. The proposed protocol can be easily integrated into the devices enabled with WiFi Direct and can offer a wide security package.

МЕТОД ПІДВИЩЕННЯ ЕФЕКТИВНОСТІ ПРОТОКОЛУ РОЗПОДІЛЕННЯ КЛЮЧІВ БЕЗПЕЧНОЇ ІР-ТЕЛЕФОНІЇ НА ОСНОВІ АЛГОРИТМУ ДІФФІ – ХЕЛМАНА

The paper proposes a method to improve the efficiency of the secure IP-telephony key distribution protocol based on the Diffie-Hellman algorithm, which differs from the existing method for detecting an illegitimate subscriber by introducing an automated software and hardware verification of the authentication string. If several communication channels are used in this case, an appropriate check will reveal an illegitimate subscriber. Solves the following tasks: makes it possible to identify an active illegitimate correspondent using voice synthesis software; to identify an active illegitimate correspondent of IP - protocols in the communication channels of Internet telephony in the absence of previously distributed secret key information between the correspondents of the trusted center. The results of the study allow us to indicate that the most well-known IP-protocols for the distribution of general secret information need to be improved in two directions: increasing the information security of IP-telephony and improving the main indicators of IP-protocols of Internet networks. The most dangerous attack is a meeting-in-the-middle attack on IP protocols for the distribution of shared secret information. The task of forming general secret information in the context of a "meeting in the middle" attack of an illegitimate correspondent's invasion is relevant at the present stage. One of the methods to improve the security of the IP protocol for the formation of general secret information is to monitor and prohibit the execution of an attack of the "meeting in the middle" type due to the use of several parallel independent channels of communication sessions in the Internet IP - telephony networks. Knowing the vulnerability and the level of protection of the object for which it is necessary to carry out protection, an active illegitimate correspondent can perform a combination of attacks that can lead to gaining unauthorized access to the object's data. 87 A method for identifying an active illegitimate IP subscriber is proposed - protocols for the distribution of shared secret information based on the Diffie-Hellman key exchange algorithm, the feature of the method is the use of several open communication channels. Provides a decrease in the likelihood of a successful "meeting in the middle" attack by an active illegitimate subscriber, as well as the presence of a mechanism for identifying an active attacker in the communication channel in the absence of previously distributed shared secret information. The method imposes restrictions on the communication channels used, in the sense that the communication channels must be independent.

Privacy-Aware Secure Anonymous Communication Protocol in CPSS Cloud Computing

Cloud computing has emerged as a promising paradigm for the Internet of Things (IoT) and Cyber-Physical-Social Systems (CPSS). However, the problem of how to ensure the security of data transmission and data storage in CPSS is a key issue to address. We need to protect the confidentiality and privacy of users’ data and users’ identity during the transmission and storage process in CPSS. In order to avoid users’ personal information leakage from IoT devices during the process of data processing and transmitting, we propose a certificateless encryption scheme, and conduct a security analysis under the assumption of Computational Diffie-Hellman(CDH) Problem. Furthermore, based on the proposed cryptography mechanism, we achieve a novel anonymous communication protocol to protect the identity privacy of communicating units in CPSS. In the new protocol, an anonymous communication link establishment method and an anonymous communication packet encapsulation format are proposed. The Diffie-Hellman key exchange algorithm is used to construct the anonymous keys distribution method in the new link establishment method. And in the new onion routing packet encapsulation format, the session data are firstly separated from the authentication data to decrease the number of cryptography operations. That is, by using the new onion routing packet we greatly reduces the encryption operations and promotes the forwarding efficiency of anonymous messages, implementing the privacy, security and efficiency in anonymous communication in cyber-physical-social systems.

An Improved Diffie-Hellman Protocol Security Using Video Entropy

The Diffie-Hellman is a key exchange protocol to provide a way to transfer shared secret keys between two parties, although those parties might never have communicated together. This paper suggested a new way to transfer keys through public or non-secure channels depending on the sent video files over the channel and then extract keys. The proposed method of key generation depends on the video file content by using the entropy value of the video frames. The proposed system solves the weaknesses in the Diffie-Hellman key exchange algorithm, which is MIMA (Man-in-the-Middle attack) and DLA( Discrete logarithm attack). When the method used high definition videos with a vast amount of data, the keys generated with a large number up to 500 per frame, and each number value reaches more than 1000 to be used or switched when needed. The method also provides some difficulty in guessing the keys from the transmitted video and the reason for the development and emergence of many communication programs Viber, WhatsApp, and other programs, enabling to use the proposed method in these programs.