Key Generation Process Research Articles

Retina Image and Bat-Inspird Algorithm for Artificial Key Generation

The process of key generation is utilized in different applications based on encryption techniques. Thecharacteristics of the generated key should satisfy the required security as potential. The traditionaltechniques used for generating keys are based on various equations based on chaos maps or modulation formaking these keys as one-time pads. Also, there are many techniques that utilized the block cipher or hashfunction for generating keys. In this paper, a retina image and bat-inspired algorithm are used for generatingsecure keys. Several processes have been applied to the input retina images like enhancement and edgedetection processes. In the proposed technique, some parameters are adjusted for controlling the results andevery output represents a bat solution and depending on the fitness function, the keys are generated. Thesegenerated keys are tested and evaluated using NIST tests. As a case study, some images are encrypted usingthe generated keys and the obtained encrypted images passed all the required security tests.

Cryptographically Secure Pseudo-Random Number Generator IP-Core Based on SHA2 Algorithm.

In the context of growing the adoption of advanced sensors and systems for active vehicle safety and driver assistance, an increasingly important issue is the security of the information exchanged between the different sub-systems of the vehicle. Random number generation is crucial in modern encryption and security applications as it is a critical task from the point of view of the robustness of the security chain. Random numbers are in fact used to generate the encryption keys to be used for ciphers. Consequently, any weakness in the key generation process can potentially leak information that can be used to breach even the strongest cipher. This paper presents the architecture of a high performance Random Number Generator (RNG) IP-core, in particular a Cryptographically Secure Pseudo-Random Number Generator (CSPRNG) IP-core, a digital hardware accelerator for random numbers generation which can be employed for cryptographically secure applications. The specifications used to develop the proposed project were derived from dedicated literature and standards. Subsequently, specific architecture optimizations were studied to achieve better timing performance and very high throughput values. The IP-core has been validated thanks to the official NIST Statistical Test Suite, in order to evaluate the degree of randomness of the numbers generated in output. Finally the CSPRNG IP-core has been characterized on relevant Field Programmable Gate Array (FPGA) and ASIC standard-cell technologies.

8‐bit serialised architecture of SEED block cipher for constrained devices

This study presents an 8-bit serialised architecture of SEED block cipher for constrained devices. The circuit utilises 356 FPGA slices and 447 1-bit registers flip-flops (FFs) in the BASYS3 board, operates with an 8-bit datapath and is aimed for use on area constraints devices. In order to keep the usage of hardware resources to a minimum but, at the same time, achieve a high level of security, the key generation process of SEED is implemented through an on-the-fly procedure. In addition, the necessary S-boxes are implemented using composite field arithmetic without using any block RAMs, resulting in a very compact implementation. The proposed architecture achieves a maximum frequency equal to 125 MHz with a total latency of 280 clock cycles and a throughput up to 57.1 Mbps for encryption or decryption.

Novel secure surgical telepresence using enhanced advanced encryption standard: during, pre and post surgery

Security during surgical telepresence has not yet been sufficiently considered. This paper aims to propose a solution to enhance security during surgery between the site of surgery (local site) and the site that hosts the expert surgeon (remote site). The proposed system consists of an Enhanced Advanced Encryption Standard, which enhances the confusion and diffusion of the encrypted video. Two-factor authentication have been used biometrics and a one-time password complemented by archiving that are also considered for pre and post-surgery respectively. In the proposed system the substitution box and shift rows are eliminated and replaced with mix row step, this leads to increase the complexity of the proposed system. Also the Henon chaiotic map was used in the key generation process, and this is provided more randomness. The results demonstrate that the proposed encryption method increases the entropy of the encrypted video by 0.25% compared to the Advanced Encryption Standard algorithm. In addition, a reduction in processing time have been achieved, for encryption and decryption by 24% and 38% respectively. For testing the strength of security, we measure the plain-text sensitivity by using the information entropy, Peak Signal-to-Noise Ratio (PSNR) and Mean Square Error (MSE). Also, the encryption/decryption time is measured for the proposed algorithm and state of the art algorithm. The decreasing in PSNR means the stronger encryption algorithm, and while the PSNR of the proposed system was decreased then this leads to better encryption method. The proposed system aims to enhance surgical network security to make it viable for implementation during surgery where data is exchanged under conditions of telepresence. The proposed system eliminates the limitation of the traditional AES algorithm. The proposed EAES provides high security by increasing the entropy while decreasing the encryption and decryption time.

A chaos based image encryption algorithm using Rubik’s cube and prime factorization process (CIERPF)

A novel Rubik’s cube based pixel level scrambling and simple XOR based diffusion is proposed in this paper to safely transmit multimedia information (images) through an untrusted channel, such as adaptive image content (i.e., plain image related) based initial random value generation is introduced to achieve high plain image sensitivity in order to overcome plain image related attacks. From this random value, the initial vectors of Henon map is obtained and this is iterated to obtain the key sequences to be applied over the Rubik’s cube row and column confusion processes. Also, the same random seed is involved in the key generation process based on prime factorization to be applied in diffusion. For each and every encryption of different plain image, the random list is changed dynamically and it is shown that the CIERPF method is secure against differential attacks. The CIERPF method is checked against various simulations to illustrate the security level of the technique. From the simulations, it is shown that the proposed methodology has good key space, high key sensitivity, and uniform distribution of cipher image pixels. Also differential cryptanalysis is performed for the proposed cryptosystem to prove its effectiveness towards differential attacks.

LEA-SIoT: Hardware Architecture of Lightweight Encryption Algorithm for Secure IoT on FPGA Platform

The Internet of Things (IoT) is one of the emerging technology in today’s world to connect billions of electronic devices and providing the data security to these electronic devices while transmission from the attacks is a big challenging task. These electronic devices are smaller and consume less power. The conventional security algorithms are complex with its computations and not suitable for IoT environments. In this article, the hardware architecture of the new Lightweight encryption algorithm (LEA) for the secured Internet of things (SIoT) is designed, which includes Encryption, decryption along with key generation process. The New LEA-SIoT is a hybrid combination of the Feistel networks and Substitution-permutation Network (SPN). The encryption/decryption architecture is the composition of Logical operations, substitution transformations, and swapping. The encryption/decryption process is designed for 64-bit data input and 64-bit key inputs. The key generation process is designed with the help of KHAZAD block cipher algorithm. The encryption and key generation process are executing in parallel with pipelined architecture with five rounds to improve the hardware and computational complexity in IoT systems. TheLEA-SIoT is designed on the Xilinx platform and implemented on Artix-7 FPGA. The hardware constraints like area, power, and timing utilization are summarized. The Comparison of the LEA-SIoT with similar security algorithms is tabulated with improvements.

Securing Next Generation Multinodal Leadless Cardiac Pacemaker System: A Proof of Concept in a Single Animal

As the next generation of implanted medical devices for cardiac rhythm management moves towards multi-nodal leadless systems that do without the limitations of transvenous leads, new security threats arise from the wireless communication between the systems' nodes. Key management and the key distribution problem used in traditional cryptographic methods are considered to be too computationally expensive for small implanted medical devices. Instead, inherent human biometrics could provide a reliable alternative. In this work, we tested the key generation process across different nodes of a mimicked dual-chamber leadless cardiac pacemaker system and a subcutaneous implantable relay (S-relay). The proposed key generation process utilizes the randomness available from inter beat intervals (IBIs). A pre-clinical in-vivo experiment was performed in one dog in order to validate the concept by implanting conventional bipolar cardiac pacemaker leads in the right atrium, the right ventricle and the subcutaneous space. Based on the available randomness and entropy of recorded IBIs, 3-bits were extracted per IBI by approximating a sequence of intervals with a normal distribution. This allowed for the generation of a 128-bit key string across the nodes with an average bit mismatch rate of about 3%. Parity check methods were used to reconciliate the keys across the multiple nodes of a multi-nodal leadless pacemaker and subcutaneous device system. The findings are encouraging and demonstrate that IBIs can be used to generate secure keys for data encryption across different nodes of a leadless pacemaker system and S-relay.

Matrix-Based Dynamic Authentication With Conditional Privacy-Preservation for Vehicular Network Security

In vehicular networks, messages from vehicles are signed before being broadcasted to ensure the authenticity and integrity of the messages. Due to the high mobility of vehicular networks, frequent key updates are often required, which imposes an excessive burden on the key generation process. In this article, we propose a dynamic authentication with conditional privacy-preservation using matrix-based signature generation (DACOP), which is well suited to Vehicle-to-Everything (V2X) networks. The proposed authentication method also provides conditional privacy by utilizing a dynamic pseudo-identity and anonymity of the vehicle. In addition, it can significantly reduce the computation overhead for signature generation. We implemented DACOP and analyzed its computation and communication overhead compared with previous methods. Furthermore, our experimental results using real V2X networks demonstrate that DACOP reduces the computation time by 90% while enhancing the security level by 2 times over previous methods.

Research on Integrity Check Method of Cloud Storage Multi-Copy Data Based on Multi-Agent

Aimed at the huge number of files in cloud storage and the low audit efficiency of single-node audit mode, this paper proposes a multi-agent-based cloud storage multi-copy data integrity check scheme. The scheme uses a bilinear mapping method to construct the key generation process and a multi-branch authentication tree to perform multi-copy data signature to implement multi-copy authentication, signature, and verification. It also uses a directed acyclic graph (DAG) to represent the task relationship in the workflow, task and resource allocation based on QoS demand preference settings to schedule multiple tasks. Experimental results show that the proposed scheme has obvious advantages over existing schemes in terms of communication, storage overhead, and audit efficiency, with an average audit efficiency improvement of 20%.

Analysis of Encryption Key Generation in Modern Crypto Ransomware

The scale of ransomware attacks increases every year, and so does its cost, which has reached billions of dollars. A specific class of ransomware, called crypto ransomware, encrypts data of the victims for monetary gain. The encryption models adopted in crypto-ransomware can be very diverse, but, regardless, one of the critical aspects of the encryption process is the method used to generate the encryption key. The analysis of such a method can provide valuable information for understanding ransomware's innermost details and features, critical for building defenses. In this paper, we analyze the encryption model and the encryption key generation process of ransomware samples from different families. We discuss the analysis methods and tools we used and the challenges in the analysis of ransomware code. Finally, we present the results of our study and discuss algorithms and functions used in modern crypto-ransomware.

AudioKey: a usable device pairing system using audio signals on smartwatches

Smartwatches are expected to replace smartphones in some applications with better user experience because of a greater range of features and new innovations such as audio recording, activity recognition, and data transmission. In this paper, we develop a system called AudioKey, aiming to pair two smartwatches by generating a unique secret key between them. Compared with existing works, our system does not need extra infrastructure to synchronise devices and trigger the key generation process, and only uses the existing sensors (gyroscope and microphone) that are deployed on most smartwatches. AudioKey triggers the key generation process on two devices at the same time by detecting the handshake between two normal users. A secret key is extracted from both the frequency domain and the time domain of audio signals and used to authenticate each other or encrypt the sensitive data. Evaluation results collected on nine volunteers in three different scenarios show that our system can achieve a bit generation rate of 13.4 bits/s with the mean key agreement rate of 96.7% for a 128-bit secret key, while a strong attacker can only achieve a mean key agreement of 10.8%.

Fast and robust retinal biometric key generation using deep neural nets

For biometric identification with retina, vascular structure based features bear significance in preparing retinal digital templates. This requires analysis of large amount of data from different sources. It needs a faster and robust automated system to extract the quantitative measures from huge amount of retinal images. Therefore, fast and accurate detection of existing retinal features is an important element for a successful biometric identification. In this work, we propose to design and implement a retinal biometric key generation framework with deep neural network. The purpose is to replace the semi-automated or automated retinal vascular feature identification methods. The approach begins with segmentation from coloured fundus images, followed by selection of some unique features like center of optic disc, macula center and distinct bifurcation points on a convolutional neural network model. For better understanding, the key generation process has finally been shown with the help of a graphical user interface. This network was trained and tested with the training and testing images of DRIVE dataset and some of our previously published result sets on automated feature extraction methods. The network was trained on NVIDIA Titan Xp GPU provided by NVIDIA corporation.

Latency and Power Aware Reliable Intrusion Detection System for Ensuring Network Security in Military Applications

Intrusion detection system is a most concerned research area which needs to be detected earlier to avoid the unwanted network errors and problems. The accurate and reliable intrusion detection is a most focused research problem in various domains which is found to be more difficult issue. This is focused and resolved in the previous research work namely Prioritization Based Delay Avoided Secured and Reliable Data Transmission Method (PBDASRDT). However, this research method doesn’t focus on the energy conservation parameters. And also previous work doesn’t discuss about the security provisioning methods. This is focused and resolved in this research method by introducing the method namely Latency and Power aware Reliable Intrusion Detection System (LP-RIDS). In this research method latency and power consumption of servers in which intrusion detection is performed is reduced considerably by introducing the secondary cluster head selection process. This secondary cluster head can perform the energy management of IDS servers optimally between the nodes and gateway. And then security of the intrusion detection system is enhanced by introducing the dynamic key based encryption technique. Here the dynamic key generation process is done in the secondary cluster head and the encryption is done by using AES technique. This methodology can improve the network performance considerably by detecting the attacks more accurately with reduced latency and delay. The overall evaluation of the research method is done in the NS2 simulation environment from which it is proved that the proposed research method leads to ensure the enhanced outcome than the existing research methods. This method proved to provide the protection from the denial of service attacks in the efficient way, thus ensuring security with reduced computational cost

Secure e-Health Record System Using Identity-based Encryption with Embedded Key

The existence of electronic health record in the Internet world can result in the emergence of potentially unauthorized users to access and abuse the data. Therefore, it is necessary to have a high level of security that can maintain the confidentiality of electronic health record data. In cryptography, the longer the key then, the higher the level of security achieved. However, this can lead to slow computing time. Therefore, we propose a security method with an identity-based encryption scheme that is built hybrid using elliptic curve cryptography (ECC) and elliptic curve integrated encryption system (ECIES) algorithms or can be abbreviated as IBE-ECC-ECIES. An additional feature of the proposed method is the creation of key pairs generated by the ECC algorithm and there is an identity that has been embedded in the key pair in order to increase the level of security and uniqueness of the key. This method has been compared based on analysis of performance, computation time and the level of security in the same environment. This method is another IBE hybrid scheme called IBE-ECC-AES. The results of the test showed that the proposed method was superior to 0.3 seconds compared to the comparison method in the key pair generation process. In addition, security in the proposed method can overcome sniffing and chosen-plaintext attacks.

An Enhanced Cryptographic Algorithm Using Bi-Modal Biometrics

A novel cryptographic algorithm, namely Significant Secure Biometric Key (SSBK) algorithm is proposed.The novel algorithm is compared with the existing cryptographic algorithms like Advanced Encryption Standard (AES), key exchange algorithm like Diffie-Helman and also with Symmetric Random Biometric Key (SRBK) algorithm, and finally we prove the proposed algorithm is superior than existing algorithm based on few parameters. A sample plain text is taken and converted to cipher text and the key from the biometric feature is used for encryption and decryption. In the key generation process, the bi-modal biometrics, namely Ear and Lip features are taken. The concatenated key values obtained from ear and lip can be of minimum 8 bits to the maximum of 1024 bits based on the type of algorithm used.

Secure Collaborative Key Management System for Mobile Cloud Data Storage

Mobile Cloud Computing (MCC) is the combination of mobile computing, cloud computing and wireless networks to make mobile thin client devices resource-rich in terms of storage, memory computational power and battery power by remotely executing the wide range of mobile application’s data in a pay-per-use cloud computing environment. In MCC, one of the primary concern is the security and privacy of data stored in cloud. The existing techniques are not efficient to manage secret keys during key generation and key distribution processes. The objective of this project work is to develop a secure collaborative key management system (SCKMS) for mobile cloud data storage by implementing by the cryptographic techniques for file encryption and file decryption, key generation, key encryption, key distribution and key decryption processes. In our proposed methodology, DriverHQ public cloud infrastructure is used for accessing the secure file as Storage as a Service (SaaS) mechanism. For generating the secret key, the proposed work implemented with Pseudo Random Number Generator (PRNG) algorithm, it produces the sequence of random numbers for every time. The keys are distributed using general Secret key Sharing Scheme (SSS). The key pattern matching process is implemented to spilt the secret key into three partitions and sent it to client (mobile devices), cloud server and decryption server. The decryption server key and cloud sever key are mapped with client key. The key shares are grouped together using key-lock pair mechanism and it achieves key integrity during untrusted medium communication. The proposed work also eliminates key escrow and key exposure problems. The files are encrypted and decrypted using Rivest-Shamir-Adleman (RSA) algorithm. The RSA algorithm is more vulnerable against the brute force attack, because of using larger key size. Thus, the proposed SCKMS achieves data confidentiality and data integrity in mobile cloud storage data when compared to existing Key Management System (KMS). The work also reduces encryption & decryption computation and storage overhead in client mobile devices, and minimizes the energy consumption of the mobile devices efficiently.

Novel Secured Keys Generation (NSEKG) with User Property based Artificial Bee Colony (UPABC) for IDPS in MANET

Wireless networks are been used now-a-days. The most important fact about wireless network is it is mobile. It is thus used in many fields. One of the most important applications of wireless networks is Mobile Ad hoc NETwork (MANET) in which all the nodes work as both transmitter and receiver. MANETs are used in various fields like military, industry and emergency recovery. In order to provide adequate security against multiple attacks, the researchers are of the opinion that detection-based schemes should be incorporated in addition to traditionally used prevention techniques. Intrusion Detection and Prevention System (IDPS) is an effective defense mechanism that detects and prevents the security attacks at various levels. In recent work a polynomial key is employed for achieving useful key generation process and a polynomial is generated to compute the pair-wise key but it can be easily detected by the attacker so to improve the security in IDPS system, this work proposes the secure routing using Novel SEcured Keys Generation (NSEKG) against IDPS system. This proposal implements with two major keys: Secure Key (SeK) and Sharing key (ShK) creation is performed via the use of the User Property based Artificial Bee Colony (UPABC) algorithm and the frequency based behavior with certainty measurement on routing paths. These SeK and ShK keys creation with UPABC scheme exploits the encrypted value of the packets and the decryption determine whether the route reply is the result of a malicious node or not. The proposed NSEKG -IDPS system is very effective for communication attacks and needs to be gradually improved in order to detect multiple attacks. The performance is evaluated primarily in accordance with the subsequent metrics like Packet delivery ratio (PDR), Routing Overhead (RO), End-End-Delay (E2E), and Throughput

A Fractal Based Image Cipher Using Knuth Shuffle Method and Dynamic Diffusion

This paper proposes a fractal-based image encryption algorithm which follows permutation-substitution structure to maintain confusion and diffusion properties. The scheme consists of three phases: key generation process; pixel permutation using the Knuth shuffle method; and the dynamic diffusion of scrambled image. A burning ship fractal function is employed to generate a secret key sequence which is further scanned using the Hilbert transformation method to increase the randomness. The chaotic behavior of the fractal strengthens the key sensitivity towards its initial condition. In the permutation phase, the Knuth shuffle method is applied to a noisy plain image to change the index value of each pixel. To substitute the pixel values, a dynamic diffusion is suggested in which each scrambled pixel change its value by using the current key pixel and the previously ciphered image pixel. To enhance the security of the cryptosystem, the secret key is also modified at each encryption step by performing algebraic transformations. The visual and numerical analysis demonstrates that the proposed scheme is reliable to secure transmission of gray as well as color images.

Hiding Shares of Counting-Based Secret Sharing via Arabic Text Steganography for Personal Usage

This paper presented new models to hide sensitive data via Arabic text steganography. The models are structured to serve personal remembrance of secret shares to be used within counting-based secret sharing technique. This research hides secret shares adopting humanized remembrance tool to serve uncontrolled assigned shares, which are generated from the security system via automatically authentic target key generation process. The shares in their original secret sharing process are challenging to be memorized unlike normal password assignment that is enjoying the full personal selection. Therefore, our models for hiding secret shares are proposed to be hidden inside the personally chosen texts utilizing improved Arabic text steganography. This steganography models study is based on Kashida extension character used redundant within Arabic writing text. The research tests our two proposed modifications to original Arabic text steganography all serving secret sharing on the same text database. The comparisons examined the different models on the same benchmark of Imam Nawawi’s forty hadeeth collected by Islamic Scholar: Yahya ibn Sharaf an-Nawawi as standard text statements (40 Prophet Hadiths) showing interesting results and promising research contributions.

Refining Arabic text stego-techniques for shares memorization of counting-based secret sharing

Sensitive information requires many security systems to be protected by secret keys. One of these practical security systems is the so-called counting-based secret sharing, in which certain key portions are distributed to allow sharing access by specified number of real participants. Secret shares are hidden adopting a humanized remembrance tool to serve uncontrolled assigned shares, which are generated from the security system via an automatic authentic target key generation process. While in their counting-based secret sharing process, the shares become challenging to be memorized unlike the normal password assignment that enjoys full personal selection. Therefore, our secret shares models are proposed to be hidden inside the personally chosen texts utilizing improved Arabic text steganography. The current steganography models’ study is based on Kashida extension character that is redundant within Arabic writing text. We refined new models to hide data via Arabic text steganography used within counting-based secret sharing technique. The research tests our two proposed modifications to original Arabic text steganography and all are serving secret sharing on the same text database. The comparisons examined the different models on the same benchmark of 40 standard text statements (40 Prophet Hadiths). The results are significant and present promising research contributions.