Key Generation System Research Articles

EEG-based identification and cryptographic key generation system using extracted features from transformer-based models

EEG-based identification and cryptographic key generation system using extracted features from transformer-based models

Система мониторинга безопасности технологических операций на основе квантового блокчейна

Quantum key generation systems are usually considered only as the basis of quantum telecommunications using quantum cryptography. Currently, the issues of safety of the techno genic environment of human existence in the conditions of the fourth industrial revolution are being implemented within the framework of the Safenet project of the National Technology Initiative of the Russian Federation. One of the main areas of work within the framework of this project is the development of software and hardware based on the use of quantum keys and block chain technology. Development testing is based on the Safenet cyber polygon under the auspices of the Government of St. Petersburg at the Ingria ETC site. One of such developments – a system for monitoring technological security for ICS based on a quantum block chain is considered.

Biometric key generation and multi round AES crypto system for improved security

To improve the reliability and system performance many transformation works have been investigated using various contexts. In general, numerical global key models and pseudo-random numbers for public block cipher algorithms suffers from key leakages and insufficient key strength. To overcome all these challenges, an intellectual cryptosystem is proposed with hierarchical hardware pipelined structures. An additional goal of the proposed framework is to enhance the area efficiency, throughput and optimize the hardware structures. In this paper 256-bit AES algorithm proposed with highly optimized hardware units using hybrid resource sharing and modified Key schedule along with optimized Sub bytes blocks, for reduced complexity overhead. The path delay optimization is achieved by decomposing the internal operations into bytes and applied stage wise pipelining and compared with direct 128-bit AES operations without pipeline. The proposed implementation helps in re-using the same hardware in a pipelined fashion which results in improved area efficiency up to 2.8 times and energy efficiency of 22 % over conventional AES crypto system.

Fast image encryption algorithm with random structures

Block encryption algorithms are among the most preferred applications in cryptographic systems. Block ciphers should have accomplished some requirements for a secure communication system. They should be evaluated in terms of cryptanalysis methods for widespread usage. The aim of this paper is to introduce a new secure and fast block encryption algorithm for images. For this purpose, a new block cipher, which offers an innovative encryption structure for key generation systems and can use S-boxes with different methods, is proposed. A Dynamic S-Box is used in the algorithm for both substitution and key generation purposes. Linear and differential cryptanalysis methods were performed successfully. UACI and NPCR tests show that the proposed symmetric block cipher algorithm is compatible with image encryption systems. The 512-bit key length provides the highest security for block encryption. Additionally, information entropy test, correlation coefficients, mean-squared error, and peak signal-to-noise ratio analyses were concluded successfully. The novelty of the paper is building a cryptanalysis attack-resistant block cipher algorithm that presents a lightweight cryptographic solution for image encryption systems.

Cosmic coding and transfer storage (COSMOCATS) for invincible key storage

Thus far, a perfectly secure encryption key storage system doesn’t exist. As long as key storage is connected to a network system, there is always a chance that it can be cracked. Even if storage is not continually connected to a network system; it is repeatedly necessary for an individual to access storage to upload and download the data; hence there is always a loophole with every conventional encryption key storage system. By utilizing the penetrative nature of cosmic-ray muons, the COSMOCAT (Cosmic coding and transfer) technique may tackle this problem by eliminating the requirement for any network connection to data storage. COSMOCAT was invented as a post quantum key generation and distribution technique for wireless near field communication. However, in its first stage of development, COSMOCAT relied on standard comparators and Global Positioning System (GPS) or other Global Navigation Satellite Systems (GNSS) for key generation. Temporal jitters of the signals outputted from comparators and frequency fluctuations in GPS-disciplined oscillators degraded the key strength and the efficiency of both the key generation and distribution. New strategies are tested in this paper to improve these factors. As a result, the key strength and the key authenticating rate limit are respectively improved by 4 orders of magnitude and more than 5 orders of magnitude. As a consequence, it has become possible to propose a practical methodology for a new key storage and authentication strategy which has the potential to be an impregnable defense against any kind of cyber/physical attack to data storage. Practical applications of COSMOCATS-based symmetric-key cryptosystems to an electronic digital signing system, communication, and cloud storage are also discussed.

Implementation of Elliptic Curves in the Polynomial Blom Key Pre-Distribution Scheme for Wireless Sensor Networks and Distributed Ledger Technology

One of the challenges in securing wireless sensor networks (WSNs) is the key distribution; that is, a single shared key must first be known to a pair of communicating nodes before they can proceed with the secure encryption and decryption of the data. In 1984, Blom proposed a scheme called the symmetric key generation system as one method to solve this problem. Blom’s scheme has proven to be λ-secure, which means that a coalition of λ+1 nodes can break the scheme. In 2021, a novel and intriguing scheme based on Blom’s scheme was proposed. In this scheme, elliptic curves over a finite field are implemented in Blom’s scheme for the case when λ=1. However, the security of this scheme was not discussed. In this paper, we point out a mistake in the algorithm of this novel scheme and propose a way to fix it. The new fixed scheme is shown to be applicable for arbitrary λ. The security of the proposed scheme is also discussed. It is proven that the proposed scheme is also λ-secure with a certain condition. In addition, we also discuss the application of this proposed scheme in distributed ledger technology (DLT).

LDA-2IoT: A level dependent authentication using two factor for IoT paradigm

The widespread expansion of IoT-based services is transforming people’s living habits. With the vast data generation and intelligent decision making system, IoT supports many industries to improve their quality of services. The major challenge for IoT developers is to design a secure data transmission system and a trustworthy inter-device and user-device communication system. The data starts its journey from the sensing devices and reaches the user dashboard via a different medium. An authentication among IoT devices provides a reliable and lightweight key generation system. This paper puts forward a novel authentication approach for the IoT paradigm and postulates an ECC-based two-factor Level Dependent Authentication for Generic IoT (LDA-2IoT) in which users at a particular level in the hierarchy can access the sensors deployed below or at the equal level of the hierarchy. Security analysis is given based on the Dolev–Yao channel and widely accepted random oracle-based ROR model. A real-time implementation of the proposed scheme with MQTT protocol over a lab IoT environment shows that it is highly efficient in terms of network throughput, computation cost, and communication cost compared to existing schemes.

Передача информации в квантовом канале связи

Currently, quantum key generation systems are considered as the basis of quantum telecommunications using quantum cryptography. At the same time, concepts are substituted: such a system simply generates the same binary code on two sides of the quantum channel and does not allow data to be transmitted as in the communication channel. In the future, such a key is used by a classical cryptographic system in a conventional communication channel. The low rate of generation of a quantum key requires its accumulation, which deprives this key of authentication – as soon as once it is presented as a file, it can be replaced. Nevertheless, the steady increase in the generation rate makes it possible to use a quantum key for direct secure transmission of information in a quantum channel «bit to bit» with any quantum protocol and physical implementation. The method of such transfer is discussed in this article.

FLoRa: Sequential fuzzy extractor based physical layer key generation for LPWAN

The security of Low-Power Wide-Area Network (LPWAN) mainly relies on encryption for ensuring packet integrity and confidentiality. Unfortunately, the latest LPWAN specifications refrain from specifying how to distribute keys for encryption. In this paper, we tackle this problem via physical layer security, which exploits the channel characteristics to generate secret keys at the physical layer. In order to generate consistent keys from noisy feature sources and to achieve high reconciliation success rate, we propose FLoRa, a physical layer key generation system for LPWAN based on sequential fuzzy extractor. An adaptive multi-bit quantization algorithm is first proposed to generate the initial key, which accelerates the bit generation rate at the start-up procedure. We then design a novel fuzzy extractor by sequentially slicing the initial key, which improves the reconciliation success rate, as well as reduces the key reconciliation time. We implement FLoRa in a LoRaWAN based network prototype and evaluate it by conducting extensive indoor and outdoor experiments. Experimental results reveal that FLoRa is capable of generating consistent secret keys with high key generation performance in both static and dynamic network environments.

Secret Key Establishment Using Modified Quantization Log For Vehicular Ad-Hoc Network

Traditional cryptographic approaches such as symmetric and asymmetric cryptography are commonly employed to solve network security issues. The Secret Key Generation (SKG) system has the advantage of extracting secret keys from a wireless channel's physical layer information. It allows two wireless devices within the transmission range to extract a shared symmetric key without the use of a fixed key distribution infrastructure, allowing vehicular ad hoc networks to exchange information (VANET). This study aims to create a secure data communication system on the Vehicular Ad-Hoc Network using RSS Key Generation. Starting from the Modified Quantization Log, the results of the Modified Quantization Log show that the average KDRM between Alice and Bob is the average KDRM between Alice and Bob is 9.4%; meanwhile, the average KGR is 71.4 bps. This shows that the number of bit mismatches after the Modified Quantization Log process between the two valid users is already small, because they have used the pre-processing process in front of them, namely using the Kalman Filter and from the results of the BCH Code to be matched again so that it becomes the key. The next process is Universal Hash which is tested with the NIST test. The NIST Test parameters used are approximately entropy, frequency, block frequency, longest run, cumulative sum forward, and cumulative sum reverse. The existing results are appropriate; namely, the threshold in p whose value is above 0.01 is achieved. From the results of the Average Approximate Entropy, it is found that the largest value is obtained by the 40k10ms scheme, which is 0.7352.

An Image of Encryption Algorithm Using Graph Theory and Speech Signal Key Generation

In this paper, a color image of encryption algorithm used a graph theory has been proposed. The proposed algorithm depends on the audio files as a basis for exploiting a set of keys for encoding color images. The key generation system was built by passing the audio signal in several stages based on the graph theory. The results revealed that the proposed algorithm has generated the encrypted images with uniform distribution in pixel histograms with information entropy closes to 8, which resists different attacks. The comparison experiments with other recent algorithms were performed. The statistical results show that the proposed algorithm has a strong security against attacks.

Key Generation for Internet of Things

Key generation is a promising technique to bootstrap secure communications for the Internet of Things devices that have no prior knowledge between each other. In the past few years, a variety of key generation protocols and systems have been proposed. In this survey, we review and categorise recent key generation systems based on a novel taxonomy. Then, we provide both quantitative and qualitative comparisons of existing approaches. We also discuss the security vulnerabilities of key generation schemes and possible countermeasures. Finally, we discuss the current challenges and point out several potential research directions.

Development of a Unique Biometric-based Cryptographic Key Generation with Repeatability using Brain Signals

Network security is very important when sending confidential data through the network. Cryptography is the science of hiding information, and a combination of cryptography solutions with cognitive science starts a new branch called cognitive cryptography that guarantee the confidentiality and integrity of the data. Brain signals as a biometric indicator can convert to a binary code which can be used as a cryptographic key. This paper proposes a new method for decreasing the error of EEG- based key generation process. Discrete Fourier Transform, Discrete Wavelet Transform, Autoregressive Modeling, Energy Entropy, and Sample Entropy were used to extract features. All features are used as the input of new method based on window segmentation protocol then are converted to the binary mode. We obtain 0.76%, and 0.48% mean Half Total Error Rate (HTER) for 18-channel and single-channel cryptographic key generation systems respectively.

Securing Cyber-Physical Social Interactions on Wrist-Worn Devices

Since ancient Greece, handshaking has been commonly practiced between two people as a friendly gesture to express trust and respect, or form a mutual agreement. In this article, we show that such physical contact can be used to bootstrap secure cyber contact between the smart devices worn by users. The key observation is that during handshaking, although belonged to two different users, the two hands involved in the shaking events are often rigidly connected, and therefore exhibit very similar motion patterns. We propose a novel key generation system, which harvests motion data during user handshaking from the wrist-worn smart devices such as smartwatches or fitness bands, and exploits the matching motion patterns to generate symmetric keys on both parties. The generated keys can be then used to establish a secure communication channel for exchanging data between devices. This provides a much more natural and user-friendly alternative for many applications, e.g., exchanging/sharing contact details, friending on social networks, or even making payments, since it doesn’t involve extra bespoke hardware, nor require the users to perform pre-defined gestures. We implement the proposed key generation system on off-the-shelf smartwatches, and extensive evaluation shows that it can reliably generate 128-bit symmetric keys just after around 1s of handshaking (with success rate >99%), and is resilient to different types of attacks including impersonate mimicking attacks, impersonate passive attacks, or eavesdropping attacks. Specifically, for real-time impersonate mimicking attacks, in our experiments, the Equal Error Rate (EER) is only 1.6% on average. We also show that the proposed key generation system can be extremely lightweight and is able to run in-situ on the resource-constrained smartwatches without incurring excessive resource consumption.

KEHKey

For kinetic-powered body area networks, we explore the feasibility of converting energy harvesting patterns for device authentication and symmetric secret keys generation continuously. The intuition is that at any given time, multiple wearable devices harvest kinetic energy from the same user activity, such as walking, which allows them to independently observe a common secret energy harvesting pattern not accessible to outside devices. Such continuous KEH-based authentication and key generation is expected to be highly power efficient as it obviates the need to employ any extra sensors, such as accelerometer, to precisely track the walking patterns. Unfortunately, lack of precise activity tracking introduces bit mismatches between the independently generated keys, which makes KEH-based authentication and symmetric key generation a challenging problem. We propose KEHKey, a KEH-based authentication and key generation system that employs a compressive sensing-based information reconciliation protocol for wearable devices to effectively correct any mismatches in generated keys. We implement KEHKey using off-the-shelf piezoelectric energy harvesting products and evaluate its performance with data collected from 24 subjects wearing the devices on different body locations including head, torso and hands. Our results show that KEHKey is able to generate the same key for two KEH-embedded devices at a speed of 12.57 bps while reducing energy consumption by 59% compared to accelerometer-based methods, which makes it suitable for continuous operation. Finally, we demonstrate that KEHKey can successfully defend against typical adversarial attacks. In particular, KEHKey is found to be more resilient to video side channel attacks than its accelerometer-based counterparts.

Improved Structure of Data Encryption Standard Algorithm

The Internet is providing vital communications between millions of individuals. It is also more and more utilized as one of the commerce tools; thus, security is of high importance for securing communications and protecting vital information. Cryptography algorithms are essential in the field of security. Brute force attacks are the major Data Encryption Standard attacks. This is the main reason that warranted the need to use the improved structure of the Data Encryption Standard algorithm. This paper proposes a new, improved structure for Data Encryption Standard to make it secure and immune to attacks. The improved structure of Data Encryption Standard was accomplished using standard Data Encryption Standard with a new way of two key generations. This means the key generation system generates two keys: one is simple, and the other one is encrypted by using an improved Caesar algorithm. The encryption algorithm in the first 8 round uses simple key 1, and from round 9 to round 16, the algorithm uses encrypted key 2. Using the improved structure of the Data Encryption Standard algorithm, the results of this paper increase Data Encryption Standard encryption security, performance, and complexity of search compared with standard Data Encryption Standard. This means the Differential cryptanalysis cannot be performed on the cipher-text.

An Efficient Key Generation for the Internet of Things Based Synchronized Quantization.

One solution to ensure secrecy in the Internet of Things (IoT) is cryptography. However, classical cryptographic systems require high computational complexity that is not appropriate for IoT devices with restricted computing resources, energy, and memory. Physical layer security that utilizes channel characteristics is an often used solution because it is simpler and more efficient than classical cryptographic systems. In this paper, we propose a signal strength exchange (SSE) system as an efficient key generation system and a synchronized quantization (SQ) method as a part of the SSE system that synchronizes data blocks in the quantization phase. The SQ method eliminates the signal pre-processing phase by performing a multi-bit conversion directly from the channel characteristics of the measurement results. Synchronization is carried out between the two authorized nodes to ensure sameness of the produced keys so it can eliminate the error-correcting phase. The test results at the IoT devices equipped with IEEE 802.11 radio show that SSE system is more efficient in terms of computing time and communication overhead than existing systems.

A Group Authentication Protocol on Multilayer Structure for Privacy-Preserving IoT Environment

In the Internet of Things (IoT) systems, large amounts of data are accumulated from anywhere at any time, which may attack individuals' privacy, especially when systems are utilized in medical and everyday environments. With the promise of IoT's proactive systems, the integration of smart things into standard Internet creates several security challenges, because most Internet technologies, communication protocols and sensors are not designed to support IoT. Recent research studies have shown that launching security / privacy attacks against IoT active systems, in particular, Wearable Medical Sensor (WMS) systems, may lead to catastrophic situations and life-threatening conditions. Therefore, security threats and privacy concerns in the IoT area should be actively studied. This causes us in this paper to create a privacy authentication protocol for IoT end-devices on a four-layer structure that does not have the ability to accurately identify the device of request's sender so that some attacks can be minimized. We used the Blakley Sharing scheme to design a key generation and distribution system for secure communications between edge devices and end devices and examined the security properties of the protocol for the five common attacks in the IoT. The results of the experiments show that the proposed authentication protocol by the Blakley method is more efficient with increasing number of instructions in both fog structures and in a without fog structure, which shows a higher flexibility of the Blakley method than the Schemer because of the increasing number of instructions indicating increasing the number of nodes in the network.

Life-cycle sustainability assessment of key electricity generation systems in Portugal

This article presents a life-cycle sustainability assessment of electricity generation systems in Portugal, namely coal, natural gas, hydro (large and small), wind, and photovoltaic systems, and evaluates their environmental and socioeconomic impacts. The environmental life-cycle assessment methodology was used to quantify impacts in metal depletion, fossil fuel depletion, global warming, ozone depletion, terrestrial acidification, freshwater eutrophication, aquatic acidification, water scarcity footprint, and toxicity (towards freshwater ecosystems and humans). Socioeconomic impacts were estimated for employment provision, dependence on fossil fuels, capacity factor, and levelised cost of electricity. The results show that electricity based on coal has the highest environmental impacts in all categories except: metal depletion (wind had the highest impacts), ozone depletion (natural gas), water scarcity footprint (large hydro), and freshwater ecotoxicity and human toxicity, non-cancer (photovoltaic). For socioeconomic categories, there was a greater variability. Photovoltaic generated the most employment and wind-based generation was estimated to have the lowest levelised cost, while coal generated the second-highest total employment and the third-lowest levelised cost. Overall, the life-cycle sustainability assessment shows small hydro as the most environmentally and socioeconomically sustainable system. By exposing the trade-offs amongst technologies and sustainability dimensions, this work provides an informed basis for future energy policy in Portugal.

A real-time multi-agent system for cryptographic key generation using imaging-based textural features

Traditional network security protocols depend on exchanging the security keys between the network nodes, and thus opposing the network to different classes of security threats. In this paper, a multi-agent system for cryptographic key generation is proposed for real-time networks. The proposed key generation technique generates a 256-bit security key for the advanced encryption standard (AES) algorithm using the textural features of digital images. By implementing this key generation technique at both the sender and receiver network nodes, the process of exchanging the security keys through the network would be eliminated, and thus making communication between network nodes robust against different security threats. Simulation results over a real-time network show the efficiency of the proposed system in reducing the overhead of the security associations performed by the IPsec protocol. On the other hand, the proposed agent-based system shows a high efficiency in guaranteeing the quality-of-service (QoS) of the real-time requests in terms of miss-ratio and total average delay through applying the best scheduling algorithm.