Cryptographic Protocols Research Articles

A Dynamic Trading Approach Based on Walrasian Equilibrium in a Blockchain-Based NFT Framework for Sustainable Waste Management

It is becoming harder to manage the growing amounts of waste generated daily at an increasing rate. These problems require an efficient solution that guarantees effectiveness and transparency and maintains trust within the community. To improve the process of traditional waste management, we proposed a unique solution, “GREENLINK”, which uses a combination of blockchain technology with the concept of zero-knowledge proofs (ZKPs), non-fungible tokens (NFTs), and Walrasian equilibrium. Zero-knowledge proofs (cryptographic protocols) are used to verify organizations and prove compliance (e.g., certification, recycling capacity) without disclosing sensitive information. Through an iterative bidding process, the proposed framework employs Walrasian equilibrium, a technique to balance supply and demand, guaranteeing equitable pricing and effective resource distribution among participants. The transactions and waste management activities are securely recorded on an immutable ledger, ensuring accountability, traceability, and transparency. The performance of the proposed model is evaluated. Parameters like average latency, TPS, and memory consumption are calculated using Hyperledger Caliper (a blockchain performance benchmark framework).

Securing fog computing in healthcare with a zero-trust approach and blockchain

As healthcare systems increasingly adopt fog computing to improve responsiveness and real-time data processing at the edge, significant security challenges emerge due to the decentralized architecture. The traditional perimeter-based security models are inadequate for addressing the dynamic and distributed nature of fog networks, leaving them vulnerable to unauthorized access, data tampering, and latency issues. Therefore, this paper proposes a novel security framework that integrates blockchain (BC) and software-defined network (SDN) technologies, underpinned by zero-trust (ZT) principles, to address these challenges in latency-sensitive healthcare environments. The proposed framework enhances security by combining BC’s immutable transaction logs for data integrity and traceability with SDN’s dynamic network reconfiguration for real-time access control and anomaly detection. The integration of BC and SDN supports continuous authentication and monitoring using cryptographic protocols (SHA-256A and RSA-2048) to secure data transmission. Additionally, tasks are dynamically allocated to fog nodes based on a multi-metric scheduling mechanism that considers fog node capacity, proximity, and compliance with predefined security protocols. The framework was evaluated using iFogSim, simulating a healthcare environment with 50 IoT devices, 10 fog nodes, and varying workloads (100–1000 tasks/min). The key evaluation performance metrics include intrusion detection rate (IDR), data integrity (DI), task completion rate (TCR), average task response time (ART), and average block time. The implementation results demonstrate satisfactory improvements compared to existing models: a 40% increase in IDR, a 30% enhancement in DI, a 15.29% rise in TCR, and a 39.66% reduction in ART. Moreover, the baseline IDR (85%) and DI (70%) were drawn from ZT-1, while TCR (85%) and ART (300 ms) were measured using ZT-2 as benchmarks. These findings illustrate the feasibility of integrating BC, SDN, and ZT principles to mitigate threats such as unauthorized access, data tampering, and delays in latency-sensitive tasks.

Optimizing SIKE for blockchain-based IoT ecosystems with resource constraints

Blockchain technology offers a robust framework for integration with the Internet of Things (IoT), enhancing interoperability, security, privacy, and scalability in modern technological ecosystems. However, traditional cryptographic protocols used in blockchain systems are increasingly vulnerable to quantum attacks due to advancements in quantum computing. In response, the National Institute of Standards and Technology (NIST) has prioritized research in post-quantum cryptography, presenting challenges and opportunities for developing blockchain-based applications tailored to IoT devices. Among the post-quantum cryptographic schemes evaluated in NIST's third standardization round, the Supersingular Isogeny Key Encapsulation (SIKE) protocol stands out for its relatively small public and private key sizes. Despite this advantage, SIKE faces challenges related to high latency, necessitating efficient implementations to make it viable for real-world applications. This research focuses on optimizing the cryptographic foundations of blockchain networks to securely and efficiently integrate resource-constrained IoT ecosystems. By enhancing the SIKE protocol, which exhibits strong resistance to brute-force and whitewashing attacks, the study achieves significant performance improvements. Our FPGA-based implementation on the VIRTEX-6 XC6VLX760 demonstrates reduced latency, achieving a key generation time of 24 ms, encapsulation time of 72 ms, and decapsulation time of 73 ms for SIKEp434. These results highlight the feasibility of deploying SIKE-optimized blockchain networks in IoT environments with stringent resource constraints.

Enhancing Ad Hoc Network Security using Palm Vein Biometric Features

This study proposes an innovative approach to securing ad hoc networks through palm vein biometric authentication, addressing critical security vulnerabilities in decentralized wireless communications. The research introduces an Adaptive Fusion Biometric Key Generation (AFBKG) framework that seamlessly integrates palm vein biometric features with state-of-the-art cryptographic protocols. The methodology implements a comprehensive six-stage process, incorporating Near-Infrared (NIR) imaging at 850 nm wavelength, advanced image preprocessing techniques, and deep learning-based feature extraction using a fine-tuned Convolutional Neural Network (CNN), culminating in a robust 512-dimensional feature vector. A rigorous performance evaluation was conducted, which demonstrated exceptional results, achieving 98% authentication accuracy with a 0.1% False Acceptance Rate (FAR) and 95% spoofing resistance. The AFBKG algorithm significantly outperforms traditional security methods, demonstrating 95% authentication strength and 92% resistance to Man-in-the-Middle (MITM) attacks while maintaining minimal key management complexity (15%). The system's superior scalability (90%) and computational efficiency (10% overhead) compared to conventional biometric approaches are noteworthy. These findings establish palm vein biometric authentication as a cutting-edge solution for enhancing ad hoc network security, offering substantial improvements over traditional password-based systems and alternative biometric methods.

Ethernet Passive Mutual Authentication Scheme on Quantum Networks

In the context of increasing demand for secure and efficient communication networks, addressing the issue of mutual authentication in ethernet passive optical networks (EPONs) has become both valuable and practically significant. This paper proposes a solution based on ideal lattices. The proposed scheme leverages the security of the ring learning with errors (RLWE) problem to establish a robust public-key cryptosystem. By involving ONUs, OLTs, and an SDN controller in the authentication process, it enables mutual authentication through a series of message exchanges facilitated by the SDN controller. Utilizing approximate smooth projection hash functions for secure key exchange and verification, the scheme ensures robust security performance against various attacks, including man-in-the-middle, impersonation, replay, and known key secrecy attacks. Simulation results demonstrate that the proposed solution introduces minimal delay and maintains a high registration success rate compared to traditional authentication methods. Additionally, this paper explores the convergence of quantum network protocols with EPONs, highlighting their potential to achieve unprecedented levels of communication security. Integrating quantum technology with EPON networks, due to the unique security properties of quantum, can also better prevent man-in-the-middle attacks. Secure interception detection techniques based on fundamental quantum properties provide a fundamental security direction for future communication systems, aligning with the growing interest in quantum-resistant cryptographic protocols.

Dynamic Key Replacement Mechanism for Lightweight Internet of Things Microcontrollers to Resist Side-Channel Attacks

5G technology and IoT devices are improving efficiency and quality of life across many sectors. IoT devices are often used in open environments where they handle sensitive data. This makes them vulnerable to side-channel attacks (SCAs), where attackers can intercept and analyze the electromagnetic signals emitted by microcontroller units (MCUs) to expose encryption keys and compromise sensitive data. To address this critical vulnerability, this study proposes a novel dynamic key replacement mechanism specifically designed for lightweight IoT microcontrollers. The mechanism integrates Moving Target Defense (MTD) with a lightweight Diffie–Hellman (D-H) key exchange protocol and AES-128 encryption to provide robust protection against SCAs. Unlike traditional approaches, the proposed mechanism dynamically updates encryption keys during each cryptographic cycle, effectively mitigating the risk of key reuse—a primary vulnerability exploited in SCAs. The lightweight D-H key exchange ensures that even resource-constrained IoT devices can securely perform key exchanges without significant computational overhead. Experimental results demonstrate the practicality and security of the proposed mechanism, achieving key updates with minimal time overhead, ranging from 12 to 50 milliseconds per encryption transmission. Moreover, the approach shows strong resilience against template attacks, with only two out of sixteen AES-128 subkeys compromised after 20,000 attack attempts—a notable improvement over existing countermeasures. The key innovation of this study lies in the seamless integration of MTD with lightweight cryptographic protocols, striking a balance between security and performance. This dynamic key replacement mechanism offers an effective, scalable, and resource-efficient solution for IoT applications, particularly in scenarios that demand robust protection against SCAs and low-latency performance.

Optimizing cryptographic protocols against side channel attacks using WGAN-GP and genetic algorithms

This research introduces a novel hybrid cryptographic framework that combines traditional cryptographic protocols with advanced methodologies, specifically Wasserstein Generative Adversarial Networks with Gradient Penalty (WGAN-GP) and Genetic Algorithms (GA). We evaluated several cryptographic protocols, including AES-ECB, AES-GCM, ChaCha20, RSA, and ECC, against critical metrics such as security level, efficiency, side-channel resistance, and cryptanalysis resistance. Our findings demonstrate that this integrated approach significantly enhances both security and efficiency across all evaluated protocols. Notably, the AES-GCM algorithm exhibited superior performance, achieving minimal computation time and robust side-channel resistance. This study underscores the potential of leveraging machine learning and evolutionary algorithms to advance cryptographic protocol security and efficiency, laying a robust foundation for future advancements in cybersecurity.

A Gray Image Quantum Encryption using GNEQR Representation

In the digital era, characterized by extensive online data exchange, information security has become a priority. While traditional encryption methods have proven effective in protecting data transfers, the advent of advanced quantum computing has increased susceptibility to security breaches. Quantum encryption provides a revolutionary solution to this problem by using quantum mechanics principles to establish algorithms that are impermeable to decryption. Using these quantum properties, cryptographic protocols are developed to provide superior security, unlike traditional encryption methods. The image plays an important role in transmitting information in all areas. Therefore, quantum image encryption methods are specifically designed to counter the potential risks posed by quantum computers, which can compromise conventional encryption protocols. This ensures the preservation of data security despite advances in quantum computing technology. In addition, quantum image encryption improves data transmission efficiency by establishing secure communication channels using quantum stats, thereby reducing the need for bandwidth and improving transmission speed. This paper proposes a new method of quantum encryption based on GNEQR representation and the modification of pixel values and positions in an image. After converting the image into a quantum form, we applied an algorithm to modify the values and positions of the pixels using a succession of quantum gates. We concluded this study with a statistical analysis showing the robustness of our quantum image encryption method.

Cryptography in IoT: Securing the Next Generation of Connected Devices

The Internet of Things (IoT) has revolutionized connectivity across diverse industries, linking billions of devices for optimized operations, data-driven insights, and enhanced consumer experiences. However, IoT's vast scale, heterogeneity, and resource-constrained devices introduce severe security challenges, with data integrity and privacy at risk. This white paper explores the application of cryptographic methods in securing IoT, addressing the unique constraints IoT presents, and highlighting recent advancements in lightweight cryptography, key management, and authentication protocols tailored to IoT requirements. Key words: IoT Security, Cryptography, Lightweight Encryption, Key Management, Authentication, Secure Communication

Privacy-Preserving Cryptographic Protocols Balancing Data Security and User Privacy in Modern Networks

Privacy-Preserving Cryptographic Protocols Balancing Data Security and User Privacy in Modern Networks

MixBuy: Contingent Payment in the Presence of Coin Mixers

A contingent payment protocol involves two mutually distrustful parties, a buyer and a seller, operating on the same blockchain, and a digital product, whose ownership is not tracked on a blockchain (e.g. a digital book). The buyer holds coins on the blockchain and transfers them to the seller in exchange for the product. However, if the blockchain does not hide transaction details, any observer can learn that a buyer purchased some product from a seller. In this work, we take contingent payment a step further: we consider a buyer who wishes to buy a digital product from a seller routing the payment via an untrusted mixer. Crucially, we require that said payment is unlinkable, meaning that the mixer (or any other observer) does not learn which buyer is paying which seller.We refer to such setting as unlinkable contingent payment (UCP).We present MixBuy, a system that realizes UCP. Mixbuy relies on oracle-based unlinkable contingent payment (O-UCP), a novel four-party cryptographic protocol where the mixer pays the seller and the seller provides the buyer with the product only if a semi-trusted notary attests that the buyer has paid the mixer. More specifically, we require four security notions: (i) mixer security that guarantees that if the mixer pays the seller, the mixer must get paid from the buyer; (ii) seller security that guarantees that if the seller delivers the product to the buyer, the seller must get paid from the {mixer}; (iii) buyer security that guarantees that if the buyer pays the mixer, the buyer must obtain the product; and (iv) unlinkability that guarantees that given a set of buyers and sellers, the mixer should not learn which buyer paid which seller. We present a provably secure and efficient cryptographic construction for O-UCP. Our construction can be readily used to realize UCP on most blockchains, as it has minimal functionality requirements (i.e., digital signatures and timelocks). To demonstrate the practicality of our construction, we provide a proof of concept for O-UCP and our benchmarks in commodity hardware show that the communication overhead is small (a few kB per message) and the running time is below one second.

Generating hard ising instances with planted solutions using post-quantum cryptographic protocols

Generating hard ising instances with planted solutions using post-quantum cryptographic protocols

Exploring the significance of quantum cryptography in future network security protocols

In an era of unprecedented technological advancement, the rise of quantum computing poses both opportunities and challenges to network security. While quantum computers promise to revolutionize data processing and problem-solving, they also render traditional cryptographic protocols vulnerable, threatening the integrity of current network security systems. Quantum cryptography, particularly quantum key distribution (QKD), emerges as a groundbreaking solution, leveraging the principles of quantum mechanics to ensure unparalleled data security. Unlike classical methods, QKD guarantees secure communication by detecting eavesdropping attempts, as any observation of quantum states disrupts their integrity. This paper explores the pivotal role of quantum cryptography in shaping future network security protocols amidst a landscape of increasing cyber threats. It provides a comprehensive analysis of QKD systems, their integration into existing infrastructure, and their resilience against potential quantum-based attacks. The discussion includes real-world implementations, such as satellite-based QKD networks and fiber-optic quantum communication systems, illustrating their practical viability and scalability. Furthermore, the paper addresses current challenges, including cost, technical complexity, and interoperability with classical networks, offering insights into ongoing research aimed at overcoming these hurdles. As global reliance on digital infrastructure grows, the transition to quantum-resilient security frameworks becomes imperative. Policymakers, industry leaders, and technology developers must collaborate to advance quantum cryptographic technologies and ensure their accessibility. By securing communication channels against both classical and quantum threats, quantum cryptography is positioned to redefine the foundations of network security, paving the way for a more secure and interconnected digital future.

A survey on the application of blockchain in cryptographic protocols

With the continuous development of network technology, cryptographic protocols are facing diverse and complex security challenges. Blockchain technology, as a solution incorporating decentralization, traceability, programmability, and immutability, effectively enhances the security, trustworthiness, operational efficiency, and ensures the security and integrity of data storage in traditional cryptographic protocols. Consequently, it has gradually emerged as a focal point of research in cryptographic protocols. This manuscript delves into the ongoing research concerning the application of blockchain technology in cryptographic protocols. First, this manuscript introduces the background of blockchain research in cryptographic protocols and the corresponding basic knowledge. Secondly, we delve into the main concerns of traditional cryptographic protocols, with a particular focus on security and performance. Thirdly, according to the main classification of cryptographic protocols, the latest research results of blockchain in authentication protocols, authentication and key agreement protocols, and e-commerce protocols are presented. Finally, the research directions of blockchain technology in cryptographic protocols are summarized based on the existing research, and the future development trend is also prospected.

METHOD FOR IMPROVING SECURITY OF IOT DEVICES PAIRING

Background. The usage of IoT technologies leads to the social, technological and financial development of society. While complex systems play an important role in the IoT, the design, integration and use of simple devices really drive the technology's widespread adoption. At the same time, ensuring a high level of security for simple IoT devices is a difficult task. The reasons for this are device limited computing resources and low power consumption requirements. It prevents the implementation of most modern cryptographic protocols for simple IoT devices. From a security point of view, the most critical communication stage is device pairing, when shared encryption keys are formed to establish a secure communication channel. Objective. The purpose of the paper is to analyse the main vulnerabilities of a simple IoT device pairing process and develop a method for improving security of this process. The method should provide proximity-based device authentication and pairing process protection against known attacks, such as man-in-the-middle attack. Methods. The method of pairing process security improvement includes proximity-based device authentication using analysis of the wireless signal strength. The security of the authentication method is proven analytically and by results of practical experiments with measurement of wireless signal strength change with distance and obstacles between devices. Results. Performed research demonstrated that the proposed method guarantees secure user authentication at a close distance between devices and protection against attacker located at least 10 meters from the paired device. Provided theoretical calculations and experimental results show that the level of attacker's wireless signal power increase required for a successful attack exceeds technical capabilities of existing communication devices. Conclusions. The article solves an important issue of improving the security of simple device pairing. The proposed method of proximity-based IoT device authentication provides pairing process protection against man-in-the-middle attacks. Mathematical calculations were confirmed by conducting a number of experiments to research wireless signal power change depending on the distance and types of obstacles between devices. The proposed authentication method can be integrated into the existing JustWorks protocol for connecting simple IoT devices using the BLE communication channel.

Existential unforgeability in quantum authentication from quantum physical unclonable functions based on random von Neumann measurement

Physical unclonable functions (PUFs) leverage inherent, nonclonable physical randomness to generate unique input-output pairs, serving as secure fingerprints for cryptographic protocols like authentication. Quantum PUFs (QPUFs) extend this concept by using quantum states as input-output pairs, offering advantages over classical PUFs, such as challenge reusability via public channels and eliminating the need for trusted parties due to the no-cloning theorem. Recent work introduced a generalized mathematical framework for QPUFs. It was shown that random unitary QPUFs cannot achieve existential unforgeability against quantum polynomial time (QPT) adversaries. Security was possible only with additional uniform randomness. To avoid the cost of external randomness, we propose a novel measurement-based scheme. Here, the randomness naturally arises from quantum measurements. Additionally, we introduce a second model where the QPUF functions as a nonunitary quantum channel, which guarantees existential unforgeability. These are the first models in the literature to demonstrate a high level of provable security. Finally, we show that the quantum phase estimation (QPE) protocol, applied to a Haar random unitary, serves as an approximate implementation of the second type of QPUF by approximating a von Neumann measurement on the unitary's eigenbasis. Published by the American Physical Society 2024

Quantum Cryptographic Protocols for Enhanced Cloud Security

Quantum cryptographic protocols offer transformative potential for enhancing cloud security by leveraging the principles of quantum mechanics. These protocols ensure unbreakable encryption through quantum key distribution (QKD), where security is derived from the fundamental properties of quantum particles. Unlike classical encryption, which relies on computational complexity, quantum cryptography guarantees data protection by preventing unauthorized access, as any attempt to intercept quantum keys alters their state and can be immediately detected. This paper explores the application of quantum cryptographic protocols in securing cloud environments, addressing vulnerabilities posed by classical encryption techniques in the face of growing computational power. Key protocols, such as BB84 and E91, are analyzed for their potential in securing cloud infrastructure, offering enhanced confidentiality, integrity, and authentication of data. Additionally, this study highlights the integration of quantum cryptography with modern cloud architectures, overcoming challenges such as scalability and implementation cost. By employing quantum-resistant strategies, these protocols provide a robust defense against emerging threats from quantum computing, making them an essential solution for future-proof cloud security. The findings demonstrate that quantum cryptography, combined with advanced cloud security practices, can ensure secure, scalable, and resilient cloud infrastructures capable of protecting sensitive data in an increasingly interconnected digital landscape.

Retraction Note: Enhanced BB84 quantum cryptography protocol for secure communication in wireless body sensor networks for medical applications

Retraction Note: Enhanced BB84 quantum cryptography protocol for secure communication in wireless body sensor networks for medical applications

Robust single-photon generation for quantum information enabled by stimulated adiabatic rapid passage

The generation of single photons using solid-state quantum emitters is pivotal for advancing photonic quantum technologies, particularly in quantum communication. As the field continuously advances toward practical use cases and beyond shielded laboratory environments, specific demands are placed on the robustness of quantum light sources during operation. In this context, the robustness of the quantum light generation process against intrinsic and extrinsic effects is a major challenge. Here, we present a robust scheme for the coherent generation of indistinguishable single-photon states with very low photon number coherence using a three-level system in a semiconductor quantum dot. Our approach combines the advantages of adiabatic rapid passage and stimulated two-photon excitation. We demonstrate robust quantum light generation while maintaining the prime quantum-optical quality of the emitted light state. Moreover, we highlight the immediate advantages of the implementation of various quantum cryptographic protocols.

Using TLA+/TLC for modeling and verification of cryptographic protocols

Using TLA+/TLC for modeling and verification of cryptographic protocols