General Encryption Scheme Research Articles

Image encryption using sequence generated by cyclic group

Image encryption using permutation is gaining its popularity over general encryption schemes like AES, DES, RSA etc., due to its high security, less time complexity using reasonable computational overheads. Mainly chaotic functions are employed in permutation based techniques to define a sequence, based on which the pixels or bits of an image are permuted. In parallel, researches are also carried out to define permutation using non chaotic techniques. In this paper, a novel non-chaotic image encryption technique is proposed. The properties of cyclic group are used as the backbone of the proposed method and using these properties some sequences/permutations are defined. These permutations are used for row/column level permutation of pixels and bit-level permutation. Iterative pixel addition operation with bit shifting using a ‘Transform array’ transforms the pixel value of the bit permuted image. Experimental results show that the proposed scheme is secure against statistical and differential attacks and provide a secure and efficient way for digital image encryption.

On the RCCA Security of Hybrid Signcryption for Internet of Things

With the rapid development of the Internet of Things (IoT), a lot of sensitive information in our daily lives are now digitalized and open to remote access. The provision of security and privacy of such data would incur comprehensive cryptographic services and has raised wide concern. Hybrid signcryption schemes could achieve various kinds of cryptographic services (e.g., confidentiality, authenticity, and integrity) with much lower cost than the combination of separate traditional cryptographic schemes with each providing a single cryptographic service. Thus, hybrid signcryption schemes are very suitable for IoT environments where resources are generally very constrained (e.g., lightweight sensors and mobile phones). To ensure that the overall hybrid signcryption scheme provides adequate cryptographic service (e.g., confidentiality, integrity, and authentication), its parts of KEM (key encryption mechanism) and DEM (data encryption mechanism) must satisfy some security requirements. Chosen‐ciphertext attack (CCA) security has been widely accepted as the golden standard requirement for general encryption schemes. However, CCA security appears too strong in some conditions. Accordingly, Canetti et al. (CRYPTO 2003) proposed the notion of replayable CCA security (RCCA) for encryption schemes, which is a strictly weaker security notion than CCA security and naturally more efficient. This new security notion has proved to be sufficient for most existing applications of CCA security, e.g., encrypted password authentication. This is particularly promising for IoT environments, where security is demanding, yet resources are constrained. In this paper, we examine the RCCA security of the well‐known SKEM+DEM style hybrid signcryption scheme by Dent at ISC 2005. Meanwhile, we also examine the RCCA security of the Tag‐SKEM+DEM style hybrid signcryption scheme by Bjorstad and Dent at PKC 2006. We rigorously prove that a hybrid signcryption scheme can achieve RCCA security if both its SKEM part and its DEM part satisfy some security assumptions.

Dynamic Resource Allocation and Secure Data forwarding in Large Cloud

Cloud computing is a computing paradigm, where a large pool of systems is connected in networks, to provide dynamically scalable infrastructure for application, data and file storage. Resource management is an important issue in a cloud environment. The data’s are transmitted into the single system. A new distributed system can be developed. Using Gossip Protocol resource can be allocated but it is not efficient, so Gossip with throttled load balancing can be used to automatically allocate CPU and memory to multiple VMs. The protocol continuously executes on dynamic. Resource management contains large file means it will decompose into smaller task and it can be shared and forwarded to cloud server. In a cloud environment, security was provided by using proxy re-encryption method. The general encryption scheme will not protect the data confidentiality. Proxy re-encryption techniques can be easily breakable by hackers. So a new encryption scheme called as threshold proxy re-encryption technique with salting is used to strengthen the encrypting data that will prevent the data from external threats.

Authentication Based Cloud Storage and Secure Data Forwarding

cloud storage system, consisting of a collection of storage servers, provides long-term storage services over the Internet. Storing data in a third party’s cloud system causes serious concern over data confidentiality. General encryption schemes protect data confidentiality, but also limit the functionality of the storage system because a few operations are supported over encrypted data. Constructing a secure storage system that supports multiple functions is challenging when the storage system is distributed and has no central authority. We propose a threshold proxy re-encryption scheme and integrate it with a decentralized erasure code such that a secure distributed storage system is formulated. The distributed storage system not only supports secure and robust data storage and retrieval, but also lets a user forward his data in the storage servers to another user without retrieving the data back. The main technical contribution is that the proxy re-encryption scheme supports encoding operations over encrypted messages as well as forwarding operations over encoded and encrypted messages. Our method fully integrates encrypting, encoding, and forwarding. We analyze and suggest suitable parameters for the number of copies of a message dispatched to storage servers and the number of storage servers queried by a key server. These parameters allow more flexible adjustment between the number of storage servers and robustness.

A Secure Erasure Code-Based Cloud Storage System with Secure Data Forwarding

A cloud storage system, consisting of a collection of storage servers, provides long-term storage services over the Internet. Storing data in a third party's cloud system causes serious concern over data confidentiality. General encryption schemes protect data confidentiality, but also limit the functionality of the storage system because a few operations are supported over encrypted data. Constructing a secure storage system that supports multiple functions is challenging when the storage system is distributed and has no central authority. We propose a threshold proxy re-encryption scheme and integrate it with a decentralized erasure code such that a secure distributed storage system is formulated. The distributed storage system not only supports secure and robust data storage and retrieval, but also lets a user forward his data in the storage servers to another user without retrieving the data back. The main technical contribution is that the proxy re-encryption scheme supports encoding operations over encrypted messages as well as forwarding operations over encoded and encrypted messages. Our method fully integrates encrypting, encoding, and forwarding. We analyze and suggest suitable parameters for the number of copies of a message dispatched to storage servers and the number of storage servers queried by a key server. These parameters allow more flexible adjustment between the number of storage servers and robustness.

A Novel Lower Cost Crypto-Scheme Based on the Theory of Sharing Secrets

This article presents an information permutation and breaking scheme to construct a low-cost encryption scheme. The proposed encryption scheme pre- serves the security requirements of a general encryption scheme. The presented re- search uses information entropy to depict the one-way property and tries to use en- tropy to study the one-way property. The authors also present an estimation of the reasonable size of the seed set of a pseudo-random number generator. Mobile computing continues to grow in importance. Machines that are designated to perform mobile computing are notebook PCs, PDAs, and mobile phones. In general, these machines have lower power than desktop PCs, and one of the main applications of these machines is communication. The owners of these machines communicate with each other or to some host machines. The business users of these lower power machines may need to exchange secret messages with other machines. The main tech- nique to protect these secret messages is computer cryptography. The most popular cryptosystems are public-key cryptosystems.