Encryption Mode Research Articles

A Review on Implementation of AES Algorithm Using FPGA and Its Performance Analysis

Now a day's large number of internet and wireless communication users has led to an increasing demand of security measures and devices for protecting the user data transmitted over the unsecured network so that unauthorized persons cannot access it . As we share the data through wireless network it should provide data confidentiality, integrity and authentication. The symmetric block cipher plays a major role in the bulk data encryption. Advanced Encryption Standard (AES) provides data security. AES has the advantage of being implemented in both hardware and software. Hardware implementation of the AES has lot of advantage such has increased throughput and better security level. Hardware Implementation for 128 bit AES (Advanced Encryption Standard) encryption and Decryption has been made using VHDL. The proposed algorithm for encryption and decryption module will functionally verified using modelsim, will be synthesize using Quartus 2 using Altera FPGA platform and analyze the design for the power, Throughput & area.

Infrared target-based selective encryption by chaotic maps

The increasing transmission for multimedia has induced a growing requirement for security of crucial content. Towards this direction, several selective encryption schemes have been proposed in literature, whereas most of them only consider the edge information as significant information rather than regions of interest (infrared targets). In this study, we propose an infrared target encryption scheme based on block-cross encryption and Logistic–Sine system. Initially, the infrared target regions are efficiently detected by a geometric active contour model based on a partial differential equation (PDE) formulation. When the detection regions are irregular, an appropriate rectangular containing the detection regions should be designed. Next the pixels of extracted infrared targets are encrypted using block-cross encryption mode based on the Logistic–Sine system. Results demonstrate that the significant information of an infrared image has been largely hidden. The keys about the cipher image are extremely sensitive and the proposed scheme has high security.

Memory Confidentiality and Integrity Protection Method Based on Variable Length Counter

Focusing on the problem of high overhead and frequent overflow of the counter mode encryption, this paper proposed an efficient scheme to protect data confidentiality and integrity. Based on the local characteristic of data accessing, the scheme set different counter length for memory area according to different accessing frequencies and the counter length can be dynamically adjusted. The analysis and the simulation results indicated that compared with the counter mode encryption, the scheme can decrease memory space overhead and the number of overflow. The proposed scheme can be applied to other schemes of protecting confidentiality and integrity based on counters and can satisfy performance requirements for most applications.

Low-Cost Concurrent Error Detection for GCM and CCM

In many applications, encryption alone does not provide enough security. To enhance security, dedicated authenticated encryption (AE) mode are invented. Galios Counter Mode (GCM) and Counter with CBC-MAC mode (CCM) are the AE modes recommended by the National Institute of Standards and Technology. To support high data rates, AE modes are usually implemented in hardware. However, natural faults reduce its reliability and may undermine both its encryption and authentication capability. We present a low-cost concurrent error detection (CED) scheme for 7 AE architectures. The proposed technique explores idle cycles of the AE mode architectures. Experimental results shows that the performance overhead can be lower than 100 % for all architectures depending on the workload. FPGA implementation results show that the hardware overhead in the 0.1–23.3 % range and the power overhead is in the 0.2–23.2 % range. ASIC implementation results show that the hardware overhead in the 0.1–22.8 % range and the power overhead is in the 0.3–12.6 % range. The underlying block cipher and hash module need not have CED built in. Thus, it allows system designers to integrate block cipher and hash function intellectual property from different vendors.

Implementation of a Parallel XTS Encryption Mode of Operation

Security of data stored inside storage devices is becoming one of the main issues in computer security now. It is known that the most efficient techniques to protect storage devices are using cryptography. Developing newer and more secure encryption algorithms and modes of operation might be critically important to protect these devices since conventional disk encryption algorithms, such as CBC mode, have shown serious security flaws. In this paper, the IEEE XTS encryption mode of operation for storage encryption (P1619 standard) has been implemented using parallel design. A performance comparison between the sequential and parallel algorithms of XTS mode is presented here. Parallel overheads that prevented from achieving perfect linear speedup are measured and minimized. The parallel XTS algorithm has shown a speedup of 1.80, with 90% efficiency, faster than the sequential algorithm. In these simulations, AES is used as encryption algorithm with 256-bit encryption key. Keywords: XTS Mode, Disk Encryption, Encryption Modes, Parallel Processing

Implementation of a parallel XTS encryption mode of operation

Security of data stored inside storage devices is becoming one of the main issues in computer security now. It is known that the most efficient techniques to protect storage devices are using cryptography. Developing newer and more secure encryption algorithms and modes of operation might be critically important to protect these devices since conventional disk encryption algorithms, such as CBC mode, have shown serious security flaws. In this paper, the IEEE XTS encryption mode of operation for storage encryption (P1619 standard) has been implemented using parallel design. A performance comparison between the sequential and parallel algorithms of XTS mode is presented here. Parallel overheads that prevented from achieving perfect linear speedup are measured and minimized. The parallel XTS algorithm has shown a speedup of 1.80, with 90% efficiency, faster than the sequential algorithm. In these simulations, AES is used as encryption algorithm with 256-bit encryption key.

A Data-encrypted Distributed Simulation Framework

To add the feature of data security for the distributed simulation system, the paper propose an dataencrypted distributed simulation framework. The framework introduces the encryption module into the HLA simulation system. The framework adds an encryption module in every federator to obtain more security in data transportation. The encrypt module adopt the chaotic key and the composite discrete chaotic system as encryption scheme. The chaotic system can produce continuous acyclic encrypt key for every data transportation during the whole of simulation. The encryption algorithm can achieve self-synchronization due to its own feature. This framework provides data-protected service for each group of federators with difierent authority. This framework has been proved feasible and efiective.

A Service Oriented Jewelry Image Watermarking Encryption Method

To avoiding tampering with jewelry image, based on web service technology, a jewelry image watermarking encryption service is proposed by encapsulating the watermarking encryption module which runs in the local network environment. The service can judge the barcode regions in the jewelry image, and get the jewelry serial number by analyzing the barcode content. The practicability and validity of the watermarking encryption service is verified through the application in the jewelry inspection business management system.

개인정보암호화에 효율적인 새로운 형태보존암호화 알고리즘

ABSTRACT Recently financial institutions and large retailers have a large amount of personal information leakage accident occurred one after another, and the damage is a trend of increasing day by d ay. Regulation such as enforcing the encryption of the personal identification information are strengthened. Efficient technolo gy to encrypt personal information is Format-preserving encrypt ion. Typical encryption expand output data length than input data le ngth and change a format. Format Preserving Encryption is an efficient method to minimize database and application modificat ion, because it makes preserve length and format of input data. In this paper, to encrypt personal information efficiently, we propose newly Format Preserving Encryption using Block cipher mode of operation. Keywords: Format-Preserving Encryption; Modes of Operation; Block cipher ; Data format; Data Length I.서 론 국내외를 불문하고 대량의 개인정보유출사고가 연이어 발생하고 있고, 이에 따라 개인정보보호법 개정 접수일(2014년 6월 17일), 수정일(2014년 8월 5일), 게재확정일(2014년 8월 5일)†주저자, km8944@korea.ac.kr‡교신저자, jcsung@uos.ac.kr(Corresponding author)

A New Construction of Pseudorandom Number Generator

Random number sequences and RNGs play an important role in trusted computing environments and cryptographic applications. For example, we use random numbers in the generation of keys in TPM. In some web protocols, random numbers are applied to resist replay attacks. It is necessary to guarantee the quality of RNGs and their random sequences because deterministic factors are likely to be involved in the generation process. If a random number generator is not designed carefully, then the output number sequences may become predictable and bring high security risks. Thus, the design of random number generators that produce high-quality random number sequences has been a hot research topic in these decades. Recently, with the development of resource constrained environments, the demand of lightweight random number generators dramatically increases. People prefer to use the random number generators with extreme high efficiency in the on-the-fly applications. This will affect the security performance of the generators. In this paper, we design a random number generator which meets the current lightweight requirements in the resource-limited environments. Our design is originally based on a lightweight block cipher, and applies the property of random looking output of block cipher to the random number generators. We combine a traditional encryption mode with a novel structure for the random number generator, so that the trade-off between security and efficiency can be made perfectly. We also take a comprehensive security evaluation for our random number generator.

Ultra simple way to encrypt non‐volatile main memory

AbstractBuilding non‐volatile main memory (NVMM) systems requires the memory data to be encrypted to remedy the potential security vulnerability caused by the non‐volatile property of NVMM. Existing solutions still have shortcomings as vulnerability of security, inadequate optimizing of performance, and other limitations hold back their deployment into real systems. This paper proposes an address‐based counter mode encrypted NVMM system. It constructs a stand‐alone memory‐side secure engine to make counter mode encryption and maintains the crucial encryption parameter of counter by adopting the address‐based strategy. Compared with existing techniques, it provides the distinct advantages of: (1) higher assurance of security through encrypting any data at any time; (2) better performance, as nearly all of the encryption/decryption latencies are removed; (3) good feasibility due to the lowest‐level protection, ultra simple structure with low implementation cost, as well as no need for further adjustments, and it can also be made available for a wide range of target platforms; (4) helpful to improve the lifetime of NVMM without side‐effects to wear‐leveling techniques. Performance evaluation shows the overall performance slowdown has an average value of 0.072%, which proves the proposed method is an effectual way to implement data protection for NVMM systems. Copyright © 2014 John Wiley & Sons, Ltd.

Pengamanan Komputer Menggunakan Kriptografi CIPHER BLOCK CHAINING (CBC)

In cryptography, a mode of operation is an algorithm that uses a block cipher to encrypt messages of arbitrary length in a way that provides confidentiality or authenticity. A block cipher by itself is only suitable for the secure cryptographic transformation (encryption or decryption) of one fixedlength group of bits called a block. A mode of operation describes how to repeatedly apply a cipher's single-block operation to securely transform amounts of data larger than a block. Most modes require a unique binary sequence, often called an Initialization Vector (IV), for each encryption operation. The IV has to be non-repeating and, for some modes, random as well. The initialization vector is used to ensure distinct ciphertexts are produced even when the same plaintext is encrypted multiple times independently with the same key. Block ciphers have one or more block size(s), but during transformation the block size is always fixed. Block cipher modes operate on whole blocks and require that the last part of the data be padded to a full block if it is smaller than the current block size. There are, however, modes that do not require padding because they effectively use a block cipher as a stream cipher; such ciphers are capable of encrypting arbitrarily long sequences of bytes or bits. Historically, encryption modes have been studied extensively in regard to their error propagation properties under various scenarios of data modification. Later development regarded integrity protection as an entirely separate cryptographic goal. Some modern modes of operation combine confidentiality and authenticity in an efficient way, and are known as authenticated encryption modes.

The TrueCrypt On-Disk Format--An Independent View

Full disk encryption (FDE) is a common way to prevent unauthorized use of data by encrypting the whole storage device. TrueCrypt (www.truecrypt.org) is one of the widest-known open source tools providing FDE. It’s available for multiple OSs including Windows, Mac OS, and Linux, letting you share encrypted storage among these systems. Unfortunately, there are license problems and questions related to implementation security. An ongoing community-funded project aims to review license issues and perform a full security audit of source codes (see istruecryptauditedyet.com). We took a different approach. We implemented independent, fully TrueCrypt-compatible, volume handling for Linux, using open source and native Linux technologies. We then released the code under the common open source license. Our most important implementation goal was to disregard the original source code (we didn’t want to use it even for reference), to avoid either tainting our code with hidden problems or violating the original license. We wrote our TrueCrypt format-handling code from scratch using only the available documentation, inspired partly by tc-play (github.com/bwalex/tc-play), another independent open source implementation. The following format description is based on our implementation. Although we intended our implementation only for Linux, our comments apply for all supported architectures. We hope this article, which includes comments on older and problematic TrueCrypt encryption modes, provides interesting insight into the TrueCrypt data format history.

Implementing a database encryption solution, design and implementation issues

In this paper, we analyze and compare five traditional architectures for database encryption. We show that existing architectures may provide a high level of security, but have a significant impact on performance and impose major changes to the application layer, or may be transparent to the application layer and provide high performance, but have several fundamental security weaknesses. We suggest a sixth novel architecture that was not considered before. The new architecture is based on placing the encryption module inside the database management software (DBMS), just above the database cache, and using a dedicated technique to encrypt each database value together with its coordinates. These two properties allow our new architecture to achieve a high level of data security while offering enhanced performance and total transparency to the application layer. We also explain how each architecture can be implemented in a commercial, open source DBMS. We evaluate the performance of the various architectures both analytically and through extensive experimentation. Our performance evaluation results demonstrate that in most realistic scenarios, i.e., where only a part of the database content is stored in the database cache, the suggested architecture outperforms the others.

Возможности параллелизации режимов шифрования

Возможности параллелизации режимов шифрования

Unification modulo a 2-sorted Equational theory for Cipher-Decipher Block Chaining

We investigate unification problems related to the Cipher Block Chaining (CBC) mode of encryption. We first model chaining in terms of a simple, convergent, rewrite system over a signature with two disjoint sorts: list and element. By interpreting a particular symbol of this signature suitably, the rewrite system can model several practical situations of interest. An inference procedure is presented for deciding the unification problem modulo this rewrite system. The procedure is modular in the following sense: any given problem is handled by a system of `list-inferences', and the set of equations thus derived between the element-terms of the problem is then handed over to any (`black-box') procedure which is complete for solving these element-equations. An example of application of this unification procedure is given, as attack detection on a Needham-Schroeder like protocol, employing the CBC encryption mode based on the associative-commutative (AC) operator XOR. The 2-sorted convergent rewrite system is then extended into one that fully captures a block chaining encryption-decryption mode at an abstract level, using no AC-symbols; and unification modulo this extended system is also shown to be decidable.

Secure Message Transmission Method of MMS Telecontrol Communication Based on AES-CCM

With the application of Ethernet communication architecture in electric power telecontrol communication, new requirements of information security have been put forward based on Manufacturing Message Specification (MMS). IEC62351 standard makes two clear security requirements for MMS, which is confidentiality and integrity. Taking into consideration the increasing costs if one algorithm corresponds to one security requirement, this paper designs a MMS-based security message format, applying AES-CCM encryption algorithm to satisfy various safety demands and analyzes algorithms time costs as well as benefits with an example of authenticated encryption mode. Analysis shows that security and interoperability of telecontrol communication can be improved to a large extent using different modes of AES-CCM algorithm for security message transmission under distinct security requirements.

Secure Access Platform Improved System Based on Regional Division

With the promotion and popularization of the State Grid Corporations security access platform, the possibility of the massive remote terminal access the security gateway system is growing, its public network resource consumption surged along with the expansion of the number of terminals. The designated area farther away from the terminal to the gateway routing digestion, the massive terminal access at the same time, the burden on the public network will also be very large. This article is based on the target about reducing the burden on the public network and improving the efficiency of the system access, designed the division of regional security access platform system with the help of the courier. Successfully Solved the chaotic gateway autonomy brought the access path complexity and through the SM1 Encryption module, SM2 signature module, and SM3 hash module greatly improve the operating efficiency and the security of the Secure Access platform under massive terminal access, has a strong practical.

스마트 워터그리드 네트워크의 원격 단말기 보안을 위한 암호화 모듈에 관한 연구

This paper studies the security module for the reliable transmission of the meter reading and the control data between the remote terminals and the upper server-side in smart water grid. The proposed security module was implemented to make it attachable to the remote terminal without security function. In particular, unlike the smart grid of electric field, the low power is considered due to the use of battery power in the smart water grid, and the ARIA-GCM-128 symmetric key method is adopted taking into the account that the damp and constrictive environments by the installed meter location in the underground occur a communication obstacle on building of the large-scale network system. The encryption module of this paper was devised to ensure the safety between the reading data on the terminal and the control data from the upper server, and secure the stability of the remote meter reading system by taking protection against an arbitrary alteration or modification.

웰니스 환경에서 암호화 프로토콜 적용을 위한 모바일과 원격 서버간 트래픽 성능 평가

U-Wellness Healthcare System(U-WHS)이란, 웰빙(wellbeing)과 피트니스(fitness)를 결합한 원격 건강 관리 시스템을 말한다. 이러한 시스템에서는 시간과 공간에 제약 없이 언제 어디서나 환자의 생체정보를 측정 및 관리 할 수 있는 것이다. 본 논문에서는 스마트모바일기기와 HIS(Hospital Information System)간 생체정보 전송시 암호화 모듈이 통신 평가에 끼치는 영향을 알아보기 위해 수행하였다. U-WHS 모델의 경우 클라이언트는 iOS Xcode환경의 Objective-c 개발 언어를 이용하여 SEED, HIGHT 암호화 모듈 적용을 하였다. HIS의 경우 클라이언트와 서버간 통신을 위하여 HTML5의 WebSocket API와 관계형 데이터베이스 관리 시스템인 MySQL를 적용하였다. 그리하여 WIFI 통신 환경에서 Wireshark를 사용, 분석하여 생체 정보의 데이터 전송율, 지연율, 손실율에 대한 평가를 확인하였다. U-WHS refers to a means of remote health monitoring service to combine fitness with wellbing. U-WHS is a system which can measure and manage biometric information of patients without any limitation on time and space. In this paper, we performed in order to look into the influence that the encryption module influences on the communication evaluation in the biometric information transmission gone to the smart mobile device and Hospital Information System.In the case of the U-WHS model, the client used the Objective-c programming language for software development of iOS Xcode environment and SEED and HIGHT encryption module was applied. In the case of HIS, the MySQL which is the Websocket API of the HTML5 and relational database management system for the client and inter-server communication was applied. Therefore, in WIFI communication environment, by using wireshark, data transfer rate of the biometric information, delay and loss rate was checked for the evaluation.