Symmetric Encryption Algorithm Research Articles

A Modified AES-512 Bits Algorithm for Data Encryption

Privacy is given top priority as far as communication involving transfer of confidential document or data is concerned. There is therefore a need to keep confidential data secretive from being invaded by unauthorised access, and this is done through cryptography algorithms, where the Advanced Encryption Standard algorithm has been the widely accepted symmetric block encryption algorithm for such purposes. This paper therefore focuses on developing a new AES-512 bits symmetric encryption algorithm through modification of the conventional AES-128 algorithm to be used purposefully in the classroom for document transfer.The development comes with increasing the plaintext bits of the conventional AES-128 algorithm to 512 bits plaintext which undergoes five operational transformations: STATE, SKGF, SRL, SCL and AARC through key size in the Galois field, GF(29). A numerical example is then given to explain the use of the algorithm, and finally, we provide a comparative study of this algorithm and other existing symmetric encryption models, such as the AES-128 and DES algorithms.

Security Improvements of JPEG Images Using Image De-Identification

Today, as data is easily exposed through various channels, such as storing data in cloud services or exchanging data through a SNS (Social Network Service), related privacy issues are receiving a significant amount of attention. In addition, for data that are more sensitive to personal information, such as medical images, more attention should be paid to privacy protection. De-identification is a common method for privacy protection. Typically, it is a method of deleting or masking individual identifiers and omitting quasi-identifiers such as birth dates. In the case of images, de-identification is performed by mosaic processing or applying various effects. In this paper, we present a method of de-identifying an image by encrypting only some of the data in the JPEG (Joint Photograph Experts Group) image format, one of the most common image compression formats, so that the entire image cannot be recognized. The purpose of this paper is to protect images by encrypting only small parts, and not the entire image. This work is suitable for the fast and safe transmission and verification of high-capacity images. We have shown that images can be de-identified by encrypting data from the DHT (Define Huffman Table) segment among the JPEG header segments. Through experiments, we confirmed that that these images could not be identified after encrypting only a minimal portion, compared to previous studies that encrypted entire images, and the encryption speed and decryption speed were also faster and more effective than the results of previous studies. A model was implemented to de-identify images using AES-256 (Advanced Encryption Standard-256) and symmetric key encryption algorithm in the Huffman tables of JPEG headers, resulting in the ability to render entire images unidentifiable quickly and effectively.

A security-enhanced scheme for MQTT protocol based on domestic cryptographic algorithm

Recently, the rapid advancement of Industrial Internet of Things (IIoT) technology has led to the utilization of various communication protocols. Among these, the Message Queue Telemetry Transport (MQTT) protocol has become prevalent. Operating on a publish/subscribe model, MQTT’s popularity in IIoT because of simplicity, lightweight nature, and ease of implementation. However, traditional MQTT protocol standards have neglected critical security concerns during the communication process, such as ineffective identity authentication, weak data confidentiality, and a lack of access control functions. To address these challenges, this paper introduces a security-enhanced scheme for the MQTT protocol based on domestic cryptographic algorithms. The proposed method enforces mutual identity authentication between the MQTT Client and the MQTT Broker using digital certificates. It also implements access control through an Access Control List (ACL) and ensures end-to-end data security via the symmetric encryption algorithm SM4. Through comprehensive security analysis and experimental validation, this paper demonstrates that the enhanced scheme effectively rectifies the MQTT protocol’s security deficiencies, achieving these improvements with small overhead.

LFTDA: A lightweight and fault-tolerant data aggregation scheme with privacy-enhanced property in fog-assisted smart grid

In recent years, the data aggregation scheme was widely adopted in smart grids (SG) to protect data privacy while ensuring data availability. Meanwhile, asymmetric homomorphic encryption is a popular technique that guarantees data aggregation and accurate computing results. However, it often brings heavy computation overheads and costs, which increases burdens to SG. In order to lighten SG’s burden, in this paper, a lightweight and fault-tolerant data aggregation scheme (LFTDA) with privacy-enhanced property is proposed. Unlike existing schemes, our proposed scheme uses a lightweight symmetric encryption algorithm and a skillful mathematical structure to achieve data aggregation. In addition, in the proposed scheme, smart meters are allowed to dynamically join and exit from the group while guaranteeing the correctness, security, and efficiency of aggregation. More importantly, our LFTDA is fault-tolerant, which means that the data collection from other devices will not be affected even if some of the smart meters or fog nodes do not work. From the view of security, LFTDA can defend against eavesdropping attack and collusion attack. Finally, we evaluate its performance along with other related schemes in terms of aggregation, decryption, and communication costs, which shows that LFTDA is very competitive and hence is suitable for many practical SG applications.

An image encryption algorithm based on multi-layered chaotic maps and its security analysis

This study introduces a novel symmetric image encryption algorithm that employs a multi-layered architecture of chaotic maps, incorporating both confusion and diffusion components. The selected chaotic maps, namely Aizawa, Ricker, Sine-Circle, and Chirikov, have been well-established as effective sources of chaos in the existing literature. Within the proposed algorithm, these chaotic maps are strategically utilised in distinct layers to enhance the security of the encrypted image. The algorithm demonstrates applicability to real-world scenarios, distinguished by its simplicity, high-speed performance, and low computational complexity. The efficacy of the method is underlined by its dependence on both original images and secret keys, rendering it resilient against brute force and differential attacks. Rigorous experimentation, encompassing correlation, histogram analysis, NBCR, NPCR, UACI, PSNR, and NIST values, establishes the proposed encryption algorithm's robustness and security against diverse attack modalities, including differential and statistical approaches. These findings position the algorithm as a compelling solution for safeguarding sensitive information in various practical applications.

Text and Image Encryption Using Symmetric Cryptography Ron Rivest Cipher 2 (RC2)

In the current context, ensuring the secure transmission of data over the internet has become a critical concern, with information technology playing a fundamental role. As society advances into the digital information age, the importance of network security issues continues to increase. Therefore, the need for cryptographic technology has emerged to overcome these challenges. Cryptography includes symmetric and asymmetric cryptography. An example of symmetric cryptography is the RC2 algorithm. RC2 is a symmetric encryption algorithm that uses a single key to encrypt and decrypt data. The ciphertext is then concealed within an image using the Stepic technique. The RC2 encryption method also utilizes symmetric encryption, ensuring the security of the encryption process while maintaining efficient encryption and decryption speeds. The result of this research is that the average percentage of MSE is 0.00%, and for PSNR and AVA are 70.85% and 34.93%. However, the AVA value is quite unstable because the average value is below 40%. Meanwhile, image encryption results in the longer the text that needs to be hidden in the image, the higher the UACI percentage. This is inversely proportional to the NPCR, the longer the text that needs to be hidden in the image, the lower the NPCR percentage. The average results obtained for UACI and NPCR values are 41.46% dan 98.13%.

A Review of Various Symmetric Encryption Algorithms for Multiple Applications

A Review of Various Symmetric Encryption Algorithms for Multiple Applications

Key generation method from fingerprint image based on deep convolutional neural network model

Biometrics effect our live. Security applications employ biometrics. Biometric encryption is growing. Encryption requires biometric key creation. Long, random, and unexpected is the key. Information and communication security research emphasizes long, strong encryption keys. The proposed system uses fingerprint biometrics to generate a long, random biometric encryption key for symmetric encryption. Pre-processing removed noise from donor fingerprint images in the dataset. The program then trains an updateable Tuned VGG-16 convolutional neural network model and tests it on fingerprint images to learn fundamental fingerprint properties. The convolutional neural netwoprk CNN model retains the final weights for the second model to extract encryption key features. Transfer learning built a second convolutional neural network model to retrieve features without relearning. Keeping vector mean for processing. The last step generates an encryption key based on each person's vector of unique biometric features can be used for symmetric encryption algorithms to encrypt personal documents on the personal PC or personal cloud. Our CNN based method uses biometrics to recognize people and create safe and trustworthy encryption keys with over 99% accuracy in testing. Our 98%-accurate deep ANN classifier exceeds the support vector machine and random forest classifiers.

Design and Implementation of Multi-key Blowfish and CAST Algorithm: Comparative Study with CBC, CFB and CTR Modes

In modern communication systems, secret keys are used to secure sensitive information such as personal data, financial transactions and government secrets. However, the security of these systems is only as strong as the secrecy of the key utilized for encrypting and decrypting the data. The use of easy guessable or compromised keys can lead to unauthorized access, data breaches, and identity theft. Additionally, the distribution and management of secret keys present challenges such as key generation, key distribution, key revocation, and key renewal, which can be complex and costly. Therefore, finding secure and efficient methods to manage secret keys is crucial for ensuring the confidentiality, integrity, and availability of sensitive information in today's digital age. Therefore, to improve the security of the symmetric encryption algorithms, The new method to encrypt and decrypt the difference size files using multiple keys is proposed. In addition to investigate the impact of using multiple keys on the security and performance of symmetric algorithms. However, the multiple keys are generated previously using MD5 and SHA2. The chosen algorithms in this study are Blowfish and CAST, with chosen three modes of operation: CBC, CFB and CTR. The results presented in the paper demonstrated that the Blowfish algorithm with generated multiple keys outperforms in the CBC mode despite has the most encryption and decryption time-consuming and memory usage. Where the randomness of Blowfish with mode CBC and CTR is the best throughput then it follows Blowfish with mode CFB.

Development of information technology for secure file storage based on hybrid cryptography methods

This article explores the development of information technology for secure file storage based on hybrid cryptography methods. It highlights the importance of secure file storage in the digital age and introduces hybrid cryptography as a solution for enhanced data security. The purpose of the article is to provide a comprehensive understanding of the benefits and advancements in hybrid cryptography for secure file storage.The article discusses the differences between symmetric and asymmetric encryption algorithms and introduces hybrid cryptography as a combination of both. It delves into the advantages of hybrid cryptography, emphasizing its ability to provide robust security and efficient data protection. The use of hybrid cryptography in encryption at rest and encryption in transit is examined, highlighting its role in securing stored data and ensuring secure data transmission.Moreover, the article explores the authentication, integrity, and reliability features provided by hybrid cryptography. It discusses the importance of key management and its impact on secure file storage. 

Software implementation of the data encryption module on the BeagleBone platform for data transmission systems with increased cryptoresistance

In today's digital world, where the exchange of information is an integral part of our daily lives, ensuring information security becomes a criticaltask. This work aimsto develop an information protection module for data encryption on the BeagleBone platform for data transmission systems with increased crypto resistance. Itis a hardware system based on a BeagleBone AI 64 microcomputer with antennas for transmitting/receiving data. Since the information is transmitted over a physically unprotected channel, developing a module that will encrypt the data is necessary. The information protection module ensures the confidentiality of the transmitted data in the system using the AES symmetric encryption algorithm with a variable key length (128/192/256 bits). Regardless of the hardware platform, it is characterized by universality, as it can be run on the Linux kernel adapted for use on embedded systems. Providesoptions for configuring protocols and encryption algorithms. In the process of developing the security module, modern encryption methods and algorithms were used (AES 128/192/256 –for data encryption, RSA –for the distribution of secret keys), in addition, a lightweight protocol for secure data transmission Scplight was implemented as an alternative to OpenSSL, which improves transfer speed on low-power hardware platforms. The developed information protection module has undergone thorough testing on a real system. Thedevelopment of the information protection module is based on the need for a universal component that provides high-quality data protection in wireless communication systems. This module will accelerate the development of relatively affordable physical means of secure communication, a critical partofsuch projects. The module is implemented as a library written in the C language, which implements an API for establishing a secure connection and further forwarding information over an unprotected transmissionchannel. In addition, a configurator programallows you to change the module settings even in real-time when client applications use it. This ensures continuous, seamless, and secure data exchangeandconvenient configuration of the module. Many supporting libraries were used in the development process, including Crypton, Libgcrypt, Openssl, Ncurses and Sqlite3.

Blockchain-based cyber-security enhancement of cyber–physical power system through symmetric encryption mechanism

The increasing dependence on the communication network in monitoring, operating, and controlling power systems increases the threat of cyber-attacks. Cyber attacks could harm the power system’s functioning and cause substantial economic losses. Malicious injection of compromised synchrophasor measurements is capable of hampering adequate control actions and jeopardizing the security and reliability of the power system. To tackle this issue, an adequate method for detecting cyber intrusion in the communication network should be developed for the secure operation of the cyber–physical power system. Blockchain has evolved as a proven technology that holds the potential for enhancing grid security. In this paper, we investigate the application of blockchain for enhancing grid security and propose a random sequence-based symmetric encryption algorithm that uses a blockchain-based secure platform for sharing the decryption keys. The presence of cyber-attack has been identified using a weighted least square-based state estimator. We have further developed a cyber-attack simulator application that could emulate the behavior of a false data injector and proposed the attack detection mechanism. The developed technology has been tested on IEEE 14 bus test systems.

A Secret Key Classification Framework of Symmetric Encryption Algorithm Based on Deep Transfer Learning

The leakage signals, including electromagnetic, energy, time, and temperature, generated during the operation of password devices contain highly correlated key information, which leads to security vulnerabilities. In traditional encryption algorithms, the length of the key greatly affects the upper limit of its security against cracking. Regarding side-channel attacks on long-key algorithms, traditional template attack methods characterize the energy traces using multivariate Gaussian distribution during the template construction phase. The exhaustive key-guessing process is expected to consume a significant amount of time and computational resources. Therefore, to analyze the effectiveness of obtaining key values from the side information of password devices, we propose an innovative attack method based on a divide-and-conquer logical structure, targeting semi-bytes. We construct a collection of key classification submodules with symmetric correlations. By integrating a differential network model for byte-block sets and an end-to-end direct attack method, we form a holistic symmetric decision framework and propose a key classification structure based on deep transfer learning. This structure consists of three main parts: side information data acquisition, analysis of key-value effectiveness, and determination of attack positions. It employs multiple parallel symmetric subnetworks, effectively improving attack efficiency and reducing the key enumeration range. Experimental results show that the optimal attack accuracy of the network model can reach 91%, with an average attack accuracy of 78%. It overcomes overfitting issues under small sample dataset conditions.

Design of a Scan Chain for Side Channel Attacks on AES Cryptosystem for Improved Security

Scan chain-based attacks are side-channel attacks focusing on one of the most significant features of hardware test circuitry. A technique called Design for Testability (DfT) involves integrating certain testability components into a hardware design. However, this creates a side channel for cryptanalysis, providing crypto devices vulnerable to scan-based attacks. Advanced Encryption Standard (AES) has been proven as the most powerful and secure symmetric encryption algorithm announced by USA Government and it outperforms all other existing cryptographic algorithms. Furthermore, the on-chip implementation of private key algorithms like AES has faced scan-based side-channel attacks. With the aim of protecting the data for secure communication, a new hybrid pipelined AES algorithm with enhanced security features is implemented. This paper proposes testing an AES core with unpredictable response compaction and bit level-masking throughout the scan chain process. A bit-level scan flipflop focused on masking as a scan protection solution for secure testing. The experimental results show that the best security is provided by the randomized addition of masked scan flipflop through the scan chain and also provides minimal design difficulty and power expansion overhead with some negligible delay measures. Thus, the proposed technique outperforms the state-of-the-art LUT-based S-box and the composite sub-byte transformation model regarding throughput rate 2 times and 15 times respectively. And security measured in the avalanche effect for the sub-pipelined model has been increased up to 95 per cent with reduced computational complexity. Also, the proposed sub-pipelined S-box utilizing a composite field arithmetic scheme achieves 7 per cent area effectiveness and 2.5 times the hardware complexity compared to the LUT-based model.

Retracted: Application of Symmetric Encryption Algorithm Sensor in the Research of College Student Security Management System

Retracted: Application of Symmetric Encryption Algorithm Sensor in the Research of College Student Security Management System

Design and Implementation of Low-Power IoT RISC-V Processor with Hybrid Encryption Accelerator

The security and reliability of data transmission between IoT devices are considered to be major challenges in the development of IoT technology. This paper presents a low-power, low-cost RISC-V processor for IoT applications with an integrated hybrid encryption accelerator, which can achieve efficient and secure encryption and decryption of data transmitted between IoT devices. The hybrid encryption accelerator, which uses the SM3 and the SM4, respectively, as hash and symmetric encryption algorithms, achieves a balance between encryption security, high speed, and key-management convenience. Both the processor and encryption accelerator are designed using the Verilog HDL language and are subsequently implemented and evaluated on both FPGA and ASIC platforms. The performance of the proposed processor and that of the Hummingbird E203 and the XuanTie E902 are compared. It is shown that, on the FPGA platform, the total resource utilization rate is reduced by 39.1~66.2%. In a 90 nm CMOS process, it is shown that the power efficiency of the proposed processor is increased by 10~34.8% and the circuit area is reduced by 32.5~57.1%.

HDLBC: A lightweight block cipher with high diffusion

Both the diffusion property and the area consumption are two important evaluation criteria in the design and implementation of symmetric encryption algorithms. Many AND-Rotation-XOR (AND-RX) block ciphers are usually designed by reducing the diffusion property to minimize the area consumption. On the other hand, these AND-RX block ciphers use multiple round function operations to achieve the enough diffusion property, which always induce more area consumption in their hardware implementation. How to trade off the diffusion property and the area consumption appears to be an interesting task in the design of block cipher. In this paper, HDLBC as a new family of lightweight block cipher (with 64-bit plaintext and 64-bit/128-bit key) for the Internet of Things (IoT) is proposed. More specifically, the HDLBC is designed by using only two F-functions (RA1 and RA2), where the non-linear layer of the F-functions is constructed by the NAND operation that consumes the least area among the non-linear logic operations. To the best of our knowledge, HDLBC cipher requires the minimum number of F-functions to provide the diffusion property, where the F-functions require fewer implementation resources than the F-functions of existing similar encryption algorithms. It illustrates the hardware implementation of HDLBC cipher on SMIC 0.18μm requires only 1248 Gate Equivalents (GEs), its throughput rate is 256 Kbps at 100 KHz. Compared with other encryption algorithms, the implementation performance of HDLBC cipher achieves well-balanced in both the area consumption and diffusion property. Moreover, the security analysis shows that HDLBC cipher has enough security margin against various known attacks, such as differential cryptanalysis, linear cryptanalysis, impossible differential cryptanalysis, zero correlation cryptanalysis, etc.

Blockchain-assisted multi-keyword fuzzy search encryption for secure data sharing

Cloud-based data sharing has become a significant technology trend thanks for its convenience and economy. Data owners are suggested to encrypt data before outsourcing for data security and users’ privacy. This approach makes it a challenging problem to implement the retrieval of encrypted data while enforcing fine-grained access control over the ciphertext. In this paper, we propose a blockchain-assisted multi-keyword fuzzy search encryption (BCFSE) scheme for secure data sharing which supports fine-grained access control and attribute revocation. The BCFSE scheme maps the attributes in the ciphertext policy attribute-based encryption (CP-ABE) to attribute tokens on the blockchain, which provides lightweight, secure and trusted attribute management. Moreover, we construct a keyword search scheme based on CP-ABE by using searchable symmetric encryption algorithm in the keyword encryption and retrieval phases, effectively reducing computational cost. BCFSE combines the advantages of CP-ABE and searchable encryption based on blockchain, which implements authorization and search with the assistance of smart contracts to ensure the reliability of the search process. In addition, the BCFSE scheme supports multi-keyword fuzzy search with both AND and OR semantics. Extensive experiments have been performed on real datasets to validate the effectiveness and efficiency of our BCFSE scheme.

A dynamic and multi-level key management method in wireless sensor networks (WSNs)

Wireless sensor networks include a set of ultralight sensor nodes with limited energy, low storage capacity, and constrained processing power. Security is a challenging issue in these networks. One approach to maintain security in these networks is key management. When designing key management schemes, the main challenge is to achieve the acceptable security level and manage resources, especially energy. Today, many key management methods use authentication mechanisms. However, these methods are faced with different challenges due to the limited computational capability of nodes and high energy consumption in the network. In this paper, we present a dynamic and multi-level key management method for homogeneous wireless sensor networks. The proposed key management approach uses an authentication mechanism based on message authentication code (MAC), which is calculated by the shared symmetric keys between the transmitter and receiver nodes. In our scheme, the network is divided into five levels. Then, the clustering process is performed at each level, so that the size of the clusters varies in different levels. The proposed approach includes four phases: (1) Network leveling phase (2) Clustering phase (3) Key establishment phase (cluster key, pairwise key, and gateway key) (4) Rekeying phase. In the proposed method, a symmetric encryption algorithm called RC5 is used for producing keys. Our method contributes to the state of the art in wireless sensor networks by proposing a dynamic and multi-level key management approach. The use of a MAC-based authentication mechanism and the division of the network into different levels and clusters allows for efficient key establishment and rekeying, while minimizing energy consumption and communication overhead. Our proposed method is implemented using the NS2 simulator. Then, the simulation results are compared with SKWN and KMP methods. The results show that our proposed method outperforms SKWN and KMP in terms of average energy consumption, required memory, and communication overhead. However, its computational overhead is slightly more than SKWN and KMP.

Performance Comparison of Symmetric and Asymmetric Encryption Algorithms

İnternet tabanlı teknolojilerin her geçen gün artması, dünyadaki veri oluşumunu da sürekli artırmakta ve veri büyüklüğü genişledikçe kullanıcılar için bilginin güvenliği ve gizliliği risk taşımaktadır. Güvenli olmayan bir iletişim kanalı üzerinden veriler iletildiğinde tehlikeli durumların minimuma indirgenmesi veya tamamen önlenmesi için önerilen yöntemlerden biri kriptografik algoritmalardır. Temeli matematiksel ifadelere dayanan tekniklerin ve uygulamalarının birleşimini içeren tüm şifreleme algoritmaları; verilerin kullanılabilirliğini, gizliliğini ve bütünlüğünü korumayı amaçlamaktadır. Ancak başarımları; seçilen dosya türü, boyutu, karmaşıklığı, anahtar yapısı ve kullanılan bilgisayar platformu(yazılım ve donanım) gibi çeşitli faktörlere göre değişmektedir. Bu faktörler temelinde, üç farklı simetrik(AES, Blowfish, Cast-128) ve asimetrik(ECDH, El-Gamal, RSA) şifreleme algoritması kullanılarak bir uygulama yapılmıştır. “The Da Vinci Code” adlı içerikten üretilen 100 KB, 1, 5 ve 100 MB arasında değişen 4 adet çeşitli metinsel dosya boyutlarının karmaşıklığı; UTF-8 tablo yapısındaki birleşimleridir. Anahtar(gizli ve açık) sistemi; 32 karakterden(256 bit) oluşan mimaridir ve uygulama platformu; yazılım için, Windows, Python VS Code, donanım için, Intel I7-CPU, 16 GB RAM, 4 GB-GPU kullanılmıştır. Literatürde kabul edilen performans kriterleri; şifreleme ve şifre-çözmedeki hızı (s), bellek (MB) ve CPU (%) kullanım oranları temel alınarak başarımları değerlendirilmiştir. Böylece, simetrik ve asimetrik şifreleme algoritmalarının başarımları aynı veri setleri üzerinde karşılaştırılmıştır. Simetrik şifreleme algoritmalarının başarım sonuçlarının daha iyi olduğu gözlemlenmiştir.