Diffie-Hellman Research Articles

A Secure and Cost-Effective Platform for Employee Management System Using Lightweight Standalone Framework Over Diffie Hellman’s Key Exchange Algorithm

Aim: Cloud computing has become one of the most popular storage and computing technologies. The aim of this paper is to provide a secure and cost effective platform for the employee management system. Materials and Methods: This study contains a total of 2 groups, the Diffie Hellman key exchange algorithm is analyzed in the group 1 (434 samples), and the advanced encryption standard is analyzed in the group 2 (434 samples). The accuracy and efficiency of each of the models are compared. Result: This paper is to improve the efficiency of the algorithm used in the employee management system. The proposed model appears to be efficient and faster than the existing algorithm and the mean accuracy of detection is ±1SD. Conclusion: The final outcome of the existing system, Diffie Hellman’s algorithm is compared with the outcome of the advanced encryption standard algorithm, and the proposed model proved to be having higher efficiency (1.2 times faster) than the existing model.

Secure Location-Aided Routing Protocols With Wi-Fi Direct For Vehicular Ad Hoc Networks

Secure routing protocols are proposed for the vehicular ad hoc networks. The protocolsintegrate the security authentication process with the Location-Aided Routing (LAR) protocol to supportWi-Fi Direct communications between the vehicles. The methods are robust against various security threats.The security authentication process adopts a modified Diffie-Hellman key agreement protocol. The Diffie-Hellman protocol is used with a short authentication string (SAS)-based key agreement over Wi-Fi Directout-of-band communication channels. It protects the communication from any man-in-the-middle securitythreats. In particular, the security process is integrated into two LAR routing schemes, i.e., the request-zoneLAR scheme and the distance-based LAR scheme.We conduct extensive simulations with different networkparameters such as the vehicular node density, the number of the malicious nodes, and the speed of thenodes. Simulation results show that the proposed routing protocols provide superior performance in securedata delivery and average total packet delay. Also, the secure distance-based LAR protocol outperforms thesecure request-zone LAR protocol.

Automating Group Management of Large-Scale IoT Botnets for Antitracking

With the popularity of Internet of Things (IoT) devices, IoT botnets like Mirai have been infecting as many devices as possible such as IP cameras and home routers. Because of the sheer volume and continual operation of many vulnerabilities (many users do not pay much attention to IoT update alerts and leave the configurations by default) of IoT devices, the population of an IoT botnet becomes increasingly tremendous. The growing population, though making a botnet powerful, results in an increased risk of exposure. Specifically, once a bot is captured, the command and control (C&C) channel may be cracked and then tracked, potentially rendering more bots being discovered. To solve this problem, this paper proposes an automated approach to group management of large-scale IoT bots. The basic idea of the proposed approach is to establish a reliable and unsuspicious social network-based C&C channel capable of automatically grouping bots, wherein a group of bots have a unique ID that is against cross-group tracking. The Diffie–Hellman key exchange method is leveraged for efficiently generating the unique group ID, thereby scaling up automatic bot grouping. We refer to the botnet proposed in this paper as a multichannel automatic grouping botnet (MCG botnet) and conduct verification experiments using social networks and more than 2,000 docker nodes. The experimental results show that the MCG botnet has the ability of automatic grouping and antitracking.

A SURVEY ON SYMMETRIC-KEY AND ASYMMETRIC- KEY ALGORITHMS BASED CRYPTOGRAPHY

Information security is extremely important in terms of maintaining the security of information (text, image, audio, video) and its confidentiality, and as a result of the massive expansion in the field of technology and communications, and the emergence of the role of the internet, and for rapid communication in the transmission of this information (text, image, audio, video) There was a need to secure this information from penetration and make it incomprehensible to people who are not authorized to access this information (text, image, audio, video). Where many algorithms and techniques have appeared to protect this information, namely: Cryptography algorithms, and Steganography techniques. Cryptography is one of the techniques of information security, which studies the secure communication between the sender and receiver of the message, which is the process of converting plain text into cipher text through the use of mathematical operations. In our research paper, a comparative study and analysis of symmetric key and key asymmetric encryption algorithms in terms of effectiveness, key size, time, complexity, functionality, attacks, and research on the most prominent recent technologies such as AES, BLOWFISH, RC2, RC4, CAST, SERPENT, TEA, E-DES, RSA, DIFFIE HELLMAN, and DSA are the safest. Compared to other technologies, faster encryption time, security, speed, and flexibility according to the results

DIMY: Enabling privacy-preserving contact tracing

The infection rate of COVID-19 and the rapid mutation ability of the virus has forced governments and health authorities to adopt lockdowns, increased testing, and contact tracing to reduce the virus’s spread. Digital contact tracing has become a supplement to the traditional manual contact tracing process. However, although several digital contact tracing apps are proposed and deployed, these have not been widely adopted due to apprehensions surrounding privacy and security. In this paper, we present a blockchain-based privacy-preserving contact tracing protocol,“Did I Meet You” (DIMY). The protocol provides full-lifecycle data privacy protection on the devices as well as the back-end servers to address most of the privacy concerns associated with existing protocols. We have employed Bloom filters to provide efficient privacy-preserving storage and have used the Diffie–Hellman key exchange for secret sharing among the participants. We show that DIMY provides resilience against many well-known attacks while introducing negligible overheads. DIMY’s footprint on the storage space of clients’ devices and back-end servers is also significantly lower than other similar state-of-the-art apps.

A cloud-based buyer-seller watermarking protocol (CB-BSWP) using semi-trusted third party for copy deterrence and privacy preserving.

Nowadays, cloud computing provides a platform infrastructure for the secure dealing of digital data, but privacy and copy control are the two important issues in it over a network. Cloud data is available to the end user and requires enormous security and privacy techniques to protect the data. Moreover, the access control mechanism with encryption-based technique protects the digital rights for participants in a transaction, but they do not protect the media from being illegally redistributed and do not restrict an authorized user to reveal their secret information this is referred to as you can access but you cannot leak. This brought out a need for controlling copy deterrence and preserving the privacy of digital media over the internet. To overlook this, we proposed a cloud-based buyer-seller watermarking protocol (CB-BSWP) with the use of a semi-trusted third party for copy deterrence and privacy-preserving in the cloud environment. The suggested scheme uses 1) a privacy homomorphism cryptosystem with Diffie-Hellman key exchange algorithm to provide an encrypted domain for the secure exchange of digital media 2) adopt robust and fair watermarking techniques to ensure high imperceptibility and robustness for the watermarked images against attacks 3) two services of cloud Infrastructure as a service (IaaS) to support virtualized computing infrastructure and Watermarking as a service (WaaS) to execute the speedy process of watermarking, this process is supported by watermarking generation and signing phase (WGSP) and watermark extraction and verifying phase reported in 4th section. 4) cloud service provider (CSP) considered as a “semi-trusted” third party to reduce the burden from the trusted third party (TTP) server and provide storage for the encrypted digital media on cloud databases, this frees content owner from not having a separate storage infrastructure. The proposed scheme encrypts the digital content by using SHA-512 algorithm with key size 512-bits to ensure that it doesn’t affect computational time during the process of encryption. The suggested scheme addresses the problems of piracy tracing, anonymity, tamper resistance, non-framing, customer rights problem. The role of cloud is crucial because it reduces communication overhead, provides unlimited storage, supports the watermarking process and offers a solution for the secure distribution of end-to-end security of digital content over cloud. To check the performance of the suggested CB-BSWP protocol against common image processing attacks, we have conducted experiments in which the perceptual quality of watermarked digital media was found enhanced, resulting in a robust watermark.

Quantum-Defended Blockchain-Assisted Data Authentication Protocol for Internet of Vehicles

The so-called Internet of Vehicle (IoV) systems will interconnect numerous vehicles to communicate significant information through an Internet of Things (IoT) enabled network. It has emerged as a promising system wherein various data authentication techniques have been introduced using clumsy certificate management and Diffie-Hellman (DH) assumption. However, in the presence of quantum cryptanalysis, DH-type problems could be solved in polynomial-time. In this paper, a novel certificateless data authentication protocol is designed, enabling security features in open wireless communication in the IoV. The proposed protocol resists a quantum attack using lattice cryptography. Further, a reliable blockchain mechanism is shown to provide vehicles’ trustworthiness in batch data verification. Rigorous formal analysis shows the ability of the proposed algorithm to resist existential unforgeability against the chosen-message attack. Nonetheless, the developed protocol supports other essential security functionalities, including unlikability, conditional-traceability, anti-replay, and data authenticity. Performance analysis exhibits the simulation orchestration and shows the way the proposed protocol outperforms other related techniques in energy consumption, data computation, communication, and cryptographic key storage overheads.

Customized AES Using Pad and Chaff Technique Diffie Hellman Key Exchange

Abstract: In today’s world, transferring or exchanging the information on a secure connection has become the most crucial part. Hence in order to have a safe/reliable connection it needs keys exchangement and also they should be transferred on a secure connection. Hence the data that is secured, when passed through the internet should be protected. Hence the data protection can be measured in two ways 1.Confidentiality - ensuring no one except the authorized users or admins can access the data. 2. Integrity - ensuring no one can alter while transferring. Hence Confidentiality, Integrity is achieved using Symmetric Encryption, Message Authentication Code(MAC). Hence in order to achieve these, identical and secret keys are required. For these reasons this algorithm is developed.

Secure Transfer of Digital Evidence from the Crime Scene

The essential task in tracing the source of the theft is to secure the digital proof from the location where the data was misused. But, more significantly, the data evidence must be sent to the main server without being intercepted by a Man-in-the-Middle assault. Diffie-Hellman Key Exchange Algorithm is used to securely exchange cryptographic keys from the admin and investigator. Here different layers of security have been identified. The proposed method uses message digest, encryption and steganography to implement secure transfer of digital evidence from the crime scene.

Secure Authentication Scheme Using Diffie–Hellman Key Agreement for Smart IoT Irrigation Systems

Smart irrigation is considered one of the most significant agriculture management systems worldwide, considering the current context of water scarcity. There is a clear consensus that such smart systems will play an essential role in achieving the economic growth of other vital sectors. In general, the consequences of global warming and the unavailability of clean water sources for the agricultural sector are clear indications that the demand for these systems will increase in the near future, especially considering the recent expansions in the use of the Internet of Things (IoT) and Wireless Sensor Network (WSN) technologies, which have been employed in the development of such systems. An obvious result is that security challenges will be one of the main obstacles to attaining the widespread adoption of such systems. Therefore, this paper proposes a secure authentication scheme using Diffie–Hellman key agreement for smart IoT irrigation systems using WSNs. This scheme is based on Diffie–Hellman and one-way hash cryptographic functions in order to support the basic security services with a high data rate and ability to resist well-known attacks. The Burrows–Abadi–Needham (BAN) logic model is used to verify the proposed scheme formally. Based on various possible attack scenarios, a resistance analysis of the proposed scheme is discussed. Further analyses are performed in terms of the storage size, intercommunication, and running time costs. Therefore, the proposed scheme not only can be considered a secure authentication scheme but is also practical for smart IoT irrigation systems due to its reasonable efficiency factors.

Enhancement of Security of Diffie-Hellman Key Exchange Protocol using RSA Cryptography.

Cryptography is related and referred to as the secured transmission of messages amongst the sender and the intended receiver by ensuring confidentiality, integrity, and authentication. Diffie – Hellman (DH) key exchange protocol is a well-known algorithm that would generate a shared secret key among the sender and the intended receiver, and the basis of cryptosystems for using public and private key for encryption and decryption process. But it is severely affected by the Man in the Middle (MITM) attack that would intercept and manipulate thus eavesdropping the shared secret key. This paper proposes a model of integrating the public-key RSA cryptography system with the DH key exchange to prevent the MITM attack. The performance of the proposed work has been compared to the DH Key Exchange algorithm as well as RSA Cryptosystem to conclude for effectiveness of the proposed model.

Biometric Cryptosystem Based On Fingerprint Authentication And Cryptography Technique

Biometric systems are one of the most reliable and popular techniques today and fingerprint authentication is one of the most reliable and robust biometric techniques due to its nature. The characteristics of fingerprints play a big and important role in the authentication of people. In this research, fingerprint authentication scheme consists of many stages: image enhancement, binarization, segmentation, spine thinning, detail extraction. In this authentication we use Gaussian filter for better result. Hybrid protection is created through a combination of biometrics and cryptography, such as fingerprint and cryptography schemes. The combination of many biometric features with a single crypto key should offer an approach to increase authenticity and reduce the fake acceptance rate (FAR) and fake rejection rate (FRR) of fingerprints. For each new user of a biometric system, the combination of a cryptobiometric system will overcome the limitations of accuracy and vulnerabilities. We want to protect our real data from unauthorized people and systems, so we use cryptographic schemes as Elliptic Curve Diffie Hellman's key exchange algorithm. Biometric techniques can be used for various applications, such as:Biometrics can help make processes, transactions and everyday life safer and more convenient. You can use biometric data anywhere. to provide a valid identity solution. Cryptographic systems and fingerprint authentication have been identified as two of the most important aspects of the security environment. In this document, two powerful techniques are combined to produce better and safer results. In this study we use Gaussian Tyagi, S., Kumar, M., Singh, D. & Tyagi, H. (2023). IRJPMC; 1(1)– 27– filters, because less FAR and less FRR, with fingerprints authorized and finally authentication being a security key or a secure message created for a particular job . If the entered fingerprint matches the authorized person, but the DBA fingerprint does not, the system says "You are an unauthorized person, please try again." If the two fingerprints match, it will send all the secure passwords or cryptographic keys or secure messages for each work. It is developed by MATLAB (Matrix Laboratory). The proposed algorithm was tested on the FVC2004 database and compared with all participants in FVC2004. Keyword: Biometric systems, Fingerprint authentication, Image enhancement, Cryptography, Gaussian filter, FAR, and FRR.

FPGA implementation of hybrid asymmetric key-based digital signature and Diffie-Hellman key exchange algorithm for IoT application

A new RSA-based Diffie-Hellman key exchange with a digital signature algorithm has been proposed and implemented through FPGAs. In the proposed algorithm, the problem of man-in-the-middle attack is solved. The proposed algorithm is more useful in the case of the client and server-based interaction like in the case of wireless mobile internet (4G/LTE) usage by an individual and in the case of bank transactions that are made by the individuals. Security, resistance to side attacks and collisions, larger key size, and non-factorisation of the prime numbers are the advantages of the RSA which is used in the proposed algorithm. Synthesis and implementation of the encrypted block have been compared and analysed on Spartan-3, Spartan-6e, Virtex-4 and Spartan-6 FPGA boards. Complete security is achieved using digital signature and previous problems of the traditional algorithm.

Group Security Authentication and Key Agreement Protocol Built by Elliptic Curve Diffie Hellman Key Exchange for LTE Military Grade Communication

4G mobile communication is a global technology. Therefore, it is essential to enforce confidentiality between mobile users and their networks. This paper presents a Group Security Authentication and Key Agreement Protocol Built by Elliptic Curve Diffie Hellman Key Exchange (GSAKA-ECDHKE) to overcome and address the LTE networks Evolved Packet System Authentication and Key Agreement Protocol (EPS-AKA) protocol flaws and vulnerabilities. GSAKA-ECDHKE is presented for 4G mobile military group communications to provide security, confidentiality, and privacy while the users and networks authenticate. By embedding the Group Commander (GC) role in the EPS-AKA protocol to control the member authentication in the group. GSAKA-ECDHKE protocol is based on Elliptic Curve Diffie Hellman Key Exchange (ECDHKE) and hash function to generate and share secret Elliptic Curve (EC) key to encrypt and protect the routing authentication parameters. The Automated Validation of Internet Security Protocols and Applications (AVISPA) tool is used for security analysis and formal verification. AVISPA demonstrated that GSAKA-ECDHKE had overcome various known security attacks such as Man In The Middle (MITM), replay attacks, and Denial of Services (DoS) attacks, satisfying the evaluated security requirements. Additionally, the suggested protocol provides the lowest communication overheads compared to the existing group-based AKA protocols.

Towards Blockchain-Based Secure Storage and Trusted Data Sharing Scheme for IoT Environment

Nowadays, cloud-based storage systems play a vital role in IoT data storage, processing, and sharing. Despite its contribution, the current cloud-based architecture may cause severe data leakage or jeopardize user privacy. Meanwhile, the cloud-based architecture heavily relies on a trusted third-party auditor (TPA) and runs in a centralized control manner. However, the TPA may not be a completely trustworthy entity, and a single point of failure might cause the centralized system to collapse. Fortunately, with the advent of blockchain technology, the decentralized storage model has gained popularity. A decentralized storage system successfully eradicates the rule of TPA, solves the problem of a single point of failure, and has many advantages over a centralized control architecture, such as low storage prices and high throughput. This study offers a blockchain-based decentralized distributed storage and sharing scheme that provides end-to-end encryption and fine-grained access control. In our proposed IoTChain model, fine-grained permission is based on attribute-based access control (A-BAC) policy by employing the Ethereum blockchain as an auditable access control layer. Smart contracts are tailored for the IoTChain model, which combines the Ethereum blockchain and the interplanetary file system (IPFS). We used an advanced encryption standard (AES) for encryption and the elliptic curve Diffie-Hellman key exchange protocol for secret key sharing between data owners and users. Also, the proof-of-work (PoW) consensus mechanism is replaced with a proof-of-authority (PoA) to minimize system transaction cost and boost system throughput. Additionally, our solution has been tested on the Ethereum official test network Rinkeby, and the results demonstrate that our approach is realistic and economical on the IoT data.

FPGA Implementation of Hybrid Asymmetric key based Digital Signature and Diffie-Hellman Key Exchange Algorithm for IoT Application

FPGA Implementation of Hybrid Asymmetric key based Digital Signature and Diffie-Hellman Key Exchange Algorithm for IoT Application

Secure Optimized Request Zone Location-Aided Routing

Secure data transmission is one of the biggest challenges for Vehicular Ad Hoc Networks (VANETs) due to its dynamic and infrastructure-less characteristics. Such security services become a demand to provide safe and secure conversation between automobiles. In this paper, two optimized secure routing protocol for VANETs were proposed: 1) Secure Tilted-Rectangular-Shaped Request Zone Location-Aided Routing protocol (STRS-RZLAR); 2) Secure Cone-Shaped Request Zone LAR (SCS-RZLAR). Each proposed secure protocol integrates a security unit with an optimized shape request zone. The security unit in both protocols is a multi-layer unit that adopts two security agreement protocols: 1) modified Diffie-Hellman key agreement protocol; 2) short authentication string (SAS)-based key agreement protocol. The overall communication scheme is performed using Wi-Fi Direct out-of-band channels. The proposed secure protocols provide a reliable and secure data transmission between automobiles in a VANET and thus making it robust against man-in-the-middle attack (MITMA). Extensive simulations using three main network parameters: vehicular node density, number of malicious nodes and vehicle speed show that the proposed secure routing protocols provide superior performance regarding data delivery and normalized routing load (NRL) with a trade-off in average end to end packet delay. From the other side, Simulation results show that SCS-RZLAR protocol outperforms the STRS-RZLAR protocol regarding NRL and average end to end packet delay, while STRS-RZLAR protocol outperforms the SCS-RZLAR protocol regarding data delivery.

Design and Implementation of an Encryption Unit to Enhance Satellite Communication Security

Satellite projects consume very high resources in all of their phases (research, design, manufacturing, testing and launching), they also extend for significant amount of time, and hence satellites must be protected against intrusion and data perception. Over the past years, satellite security has been overlooked except for military satellites because satellite intrusions were inconceivable as they far away from earth, but recently commercial satellite manufacturers realized the importance of satellite security because satellite intrusion became not an impossible task. In this paper, we present the design and implementation of encryption unit to secure satellite communication system by ciphering tele-commands using advanced encryption algorithm (AES) with random key generation, Diffie-Hellman key exchange algorithm and Hash-based message authentication code (HMAC) digital signature algorithm.

Secure Symmetric Keyword Search with Keyword Privacy for Cloud Storage Services

As Internet services are widely used in various mobile devices, the amount of data produced by users steadily increases. Meanwhile, the storage capacity of the various devices is limited to cover the increasing amount of data. Therefore, the importance of Internet-connected storage that can be accessed anytime and anywhere is steadily increasing in terms of storing and utilizing a huge amount of data. To use remote storage, data to be stored need to be encrypted for privacy. The storage manager also should be granted the ability to search the data without decrypting them in response to a query. Contrary to the traditional environment, the query to Internet-connected storage is conveyed through an open channel and hence its secrecy should be guaranteed. We propose a secure symmetric keyword search scheme that provides query privacy and is tailored to the equality test on encrypted data. The proposed scheme is efficient since it is based on prime order bilinear groups. We formally prove that our construction satisfies ciphertext confidentiality and keyword privacy based on the hardness of the bilinear Diffie–Hellman (DH) assumption and the decisional 3-party DH assumption.

Privacy-Preserving Fingerprint Authentication Using D-H Key Exchange and Secret Sharing

Biometric based remote authentication has been widely deployed. However, there exist security and privacy issues to be addressed since biometric data includes sensitive information. To alleviate these concerns, we design a privacy-preserving fingerprint authentication technique based on Diffie-Hellman (D-H) key exchange and secret sharing. We employ secret sharing scheme to securely distribute fragments of critical private information around a distributed network or group, which softens the burden of the template storage center (TSC) and the users. To ensure the security of template data, the user’s original fingerprint template is stored in ciphertext format in TSC. Furthermore, the D-H key exchange protocol allows TSC and the user to encrypt the fingerprint template in each query using a random one-time key, so as to protect the user’s data privacy. Security analysis indicates that our scheme enjoys indistinguishability against chosen-plaintext attacks and user anonymity. Through experimental analysis, we demonstrate that our scheme can provide secure and accurate remote fingerprint authentication.