Symmetric Encryption Algorithm Research Articles

Software implementation of the data encryption module on the BeagleBone platform for data transmission systems with increased cryptoresistance

In today's digital world, where the exchange of information is an integral part of our daily lives, ensuring information security becomes a criticaltask. This work aimsto develop an information protection module for data encryption on the BeagleBone platform for data transmission systems with increased crypto resistance. Itis a hardware system based on a BeagleBone AI 64 microcomputer with antennas for transmitting/receiving data. Since the information is transmitted over a physically unprotected channel, developing a module that will encrypt the data is necessary. The information protection module ensures the confidentiality of the transmitted data in the system using the AES symmetric encryption algorithm with a variable key length (128/192/256 bits). Regardless of the hardware platform, it is characterized by universality, as it can be run on the Linux kernel adapted for use on embedded systems. Providesoptions for configuring protocols and encryption algorithms. In the process of developing the security module, modern encryption methods and algorithms were used (AES 128/192/256 –for data encryption, RSA –for the distribution of secret keys), in addition, a lightweight protocol for secure data transmission Scplight was implemented as an alternative to OpenSSL, which improves transfer speed on low-power hardware platforms. The developed information protection module has undergone thorough testing on a real system. Thedevelopment of the information protection module is based on the need for a universal component that provides high-quality data protection in wireless communication systems. This module will accelerate the development of relatively affordable physical means of secure communication, a critical partofsuch projects. The module is implemented as a library written in the C language, which implements an API for establishing a secure connection and further forwarding information over an unprotected transmissionchannel. In addition, a configurator programallows you to change the module settings even in real-time when client applications use it. This ensures continuous, seamless, and secure data exchangeandconvenient configuration of the module. Many supporting libraries were used in the development process, including Crypton, Libgcrypt, Openssl, Ncurses and Sqlite3.

Blockchain-based cyber-security enhancement of cyber–physical power system through symmetric encryption mechanism

The increasing dependence on the communication network in monitoring, operating, and controlling power systems increases the threat of cyber-attacks. Cyber attacks could harm the power system’s functioning and cause substantial economic losses. Malicious injection of compromised synchrophasor measurements is capable of hampering adequate control actions and jeopardizing the security and reliability of the power system. To tackle this issue, an adequate method for detecting cyber intrusion in the communication network should be developed for the secure operation of the cyber–physical power system. Blockchain has evolved as a proven technology that holds the potential for enhancing grid security. In this paper, we investigate the application of blockchain for enhancing grid security and propose a random sequence-based symmetric encryption algorithm that uses a blockchain-based secure platform for sharing the decryption keys. The presence of cyber-attack has been identified using a weighted least square-based state estimator. We have further developed a cyber-attack simulator application that could emulate the behavior of a false data injector and proposed the attack detection mechanism. The developed technology has been tested on IEEE 14 bus test systems.

A Secret Key Classification Framework of Symmetric Encryption Algorithm Based on Deep Transfer Learning

The leakage signals, including electromagnetic, energy, time, and temperature, generated during the operation of password devices contain highly correlated key information, which leads to security vulnerabilities. In traditional encryption algorithms, the length of the key greatly affects the upper limit of its security against cracking. Regarding side-channel attacks on long-key algorithms, traditional template attack methods characterize the energy traces using multivariate Gaussian distribution during the template construction phase. The exhaustive key-guessing process is expected to consume a significant amount of time and computational resources. Therefore, to analyze the effectiveness of obtaining key values from the side information of password devices, we propose an innovative attack method based on a divide-and-conquer logical structure, targeting semi-bytes. We construct a collection of key classification submodules with symmetric correlations. By integrating a differential network model for byte-block sets and an end-to-end direct attack method, we form a holistic symmetric decision framework and propose a key classification structure based on deep transfer learning. This structure consists of three main parts: side information data acquisition, analysis of key-value effectiveness, and determination of attack positions. It employs multiple parallel symmetric subnetworks, effectively improving attack efficiency and reducing the key enumeration range. Experimental results show that the optimal attack accuracy of the network model can reach 91%, with an average attack accuracy of 78%. It overcomes overfitting issues under small sample dataset conditions.

Design of a Scan Chain for Side Channel Attacks on AES Cryptosystem for Improved Security

Scan chain-based attacks are side-channel attacks focusing on one of the most significant features of hardware test circuitry. A technique called Design for Testability (DfT) involves integrating certain testability components into a hardware design. However, this creates a side channel for cryptanalysis, providing crypto devices vulnerable to scan-based attacks. Advanced Encryption Standard (AES) has been proven as the most powerful and secure symmetric encryption algorithm announced by USA Government and it outperforms all other existing cryptographic algorithms. Furthermore, the on-chip implementation of private key algorithms like AES has faced scan-based side-channel attacks. With the aim of protecting the data for secure communication, a new hybrid pipelined AES algorithm with enhanced security features is implemented. This paper proposes testing an AES core with unpredictable response compaction and bit level-masking throughout the scan chain process. A bit-level scan flipflop focused on masking as a scan protection solution for secure testing. The experimental results show that the best security is provided by the randomized addition of masked scan flipflop through the scan chain and also provides minimal design difficulty and power expansion overhead with some negligible delay measures. Thus, the proposed technique outperforms the state-of-the-art LUT-based S-box and the composite sub-byte transformation model regarding throughput rate 2 times and 15 times respectively. And security measured in the avalanche effect for the sub-pipelined model has been increased up to 95 per cent with reduced computational complexity. Also, the proposed sub-pipelined S-box utilizing a composite field arithmetic scheme achieves 7 per cent area effectiveness and 2.5 times the hardware complexity compared to the LUT-based model.

Design and Implementation of Low-Power IoT RISC-V Processor with Hybrid Encryption Accelerator

The security and reliability of data transmission between IoT devices are considered to be major challenges in the development of IoT technology. This paper presents a low-power, low-cost RISC-V processor for IoT applications with an integrated hybrid encryption accelerator, which can achieve efficient and secure encryption and decryption of data transmitted between IoT devices. The hybrid encryption accelerator, which uses the SM3 and the SM4, respectively, as hash and symmetric encryption algorithms, achieves a balance between encryption security, high speed, and key-management convenience. Both the processor and encryption accelerator are designed using the Verilog HDL language and are subsequently implemented and evaluated on both FPGA and ASIC platforms. The performance of the proposed processor and that of the Hummingbird E203 and the XuanTie E902 are compared. It is shown that, on the FPGA platform, the total resource utilization rate is reduced by 39.1~66.2%. In a 90 nm CMOS process, it is shown that the power efficiency of the proposed processor is increased by 10~34.8% and the circuit area is reduced by 32.5~57.1%.

HDLBC: A lightweight block cipher with high diffusion

Both the diffusion property and the area consumption are two important evaluation criteria in the design and implementation of symmetric encryption algorithms. Many AND-Rotation-XOR (AND-RX) block ciphers are usually designed by reducing the diffusion property to minimize the area consumption. On the other hand, these AND-RX block ciphers use multiple round function operations to achieve the enough diffusion property, which always induce more area consumption in their hardware implementation. How to trade off the diffusion property and the area consumption appears to be an interesting task in the design of block cipher. In this paper, HDLBC as a new family of lightweight block cipher (with 64-bit plaintext and 64-bit/128-bit key) for the Internet of Things (IoT) is proposed. More specifically, the HDLBC is designed by using only two F-functions (RA1 and RA2), where the non-linear layer of the F-functions is constructed by the NAND operation that consumes the least area among the non-linear logic operations. To the best of our knowledge, HDLBC cipher requires the minimum number of F-functions to provide the diffusion property, where the F-functions require fewer implementation resources than the F-functions of existing similar encryption algorithms. It illustrates the hardware implementation of HDLBC cipher on SMIC 0.18μm requires only 1248 Gate Equivalents (GEs), its throughput rate is 256 Kbps at 100 KHz. Compared with other encryption algorithms, the implementation performance of HDLBC cipher achieves well-balanced in both the area consumption and diffusion property. Moreover, the security analysis shows that HDLBC cipher has enough security margin against various known attacks, such as differential cryptanalysis, linear cryptanalysis, impossible differential cryptanalysis, zero correlation cryptanalysis, etc.

Blockchain-assisted multi-keyword fuzzy search encryption for secure data sharing

Cloud-based data sharing has become a significant technology trend thanks for its convenience and economy. Data owners are suggested to encrypt data before outsourcing for data security and users’ privacy. This approach makes it a challenging problem to implement the retrieval of encrypted data while enforcing fine-grained access control over the ciphertext. In this paper, we propose a blockchain-assisted multi-keyword fuzzy search encryption (BCFSE) scheme for secure data sharing which supports fine-grained access control and attribute revocation. The BCFSE scheme maps the attributes in the ciphertext policy attribute-based encryption (CP-ABE) to attribute tokens on the blockchain, which provides lightweight, secure and trusted attribute management. Moreover, we construct a keyword search scheme based on CP-ABE by using searchable symmetric encryption algorithm in the keyword encryption and retrieval phases, effectively reducing computational cost. BCFSE combines the advantages of CP-ABE and searchable encryption based on blockchain, which implements authorization and search with the assistance of smart contracts to ensure the reliability of the search process. In addition, the BCFSE scheme supports multi-keyword fuzzy search with both AND and OR semantics. Extensive experiments have been performed on real datasets to validate the effectiveness and efficiency of our BCFSE scheme.

A dynamic and multi-level key management method in wireless sensor networks (WSNs)

Wireless sensor networks include a set of ultralight sensor nodes with limited energy, low storage capacity, and constrained processing power. Security is a challenging issue in these networks. One approach to maintain security in these networks is key management. When designing key management schemes, the main challenge is to achieve the acceptable security level and manage resources, especially energy. Today, many key management methods use authentication mechanisms. However, these methods are faced with different challenges due to the limited computational capability of nodes and high energy consumption in the network. In this paper, we present a dynamic and multi-level key management method for homogeneous wireless sensor networks. The proposed key management approach uses an authentication mechanism based on message authentication code (MAC), which is calculated by the shared symmetric keys between the transmitter and receiver nodes. In our scheme, the network is divided into five levels. Then, the clustering process is performed at each level, so that the size of the clusters varies in different levels. The proposed approach includes four phases: (1) Network leveling phase (2) Clustering phase (3) Key establishment phase (cluster key, pairwise key, and gateway key) (4) Rekeying phase. In the proposed method, a symmetric encryption algorithm called RC5 is used for producing keys. Our method contributes to the state of the art in wireless sensor networks by proposing a dynamic and multi-level key management approach. The use of a MAC-based authentication mechanism and the division of the network into different levels and clusters allows for efficient key establishment and rekeying, while minimizing energy consumption and communication overhead. Our proposed method is implemented using the NS2 simulator. Then, the simulation results are compared with SKWN and KMP methods. The results show that our proposed method outperforms SKWN and KMP in terms of average energy consumption, required memory, and communication overhead. However, its computational overhead is slightly more than SKWN and KMP.

Performance Comparison of Symmetric and Asymmetric Encryption Algorithms

İnternet tabanlı teknolojilerin her geçen gün artması, dünyadaki veri oluşumunu da sürekli artırmakta ve veri büyüklüğü genişledikçe kullanıcılar için bilginin güvenliği ve gizliliği risk taşımaktadır. Güvenli olmayan bir iletişim kanalı üzerinden veriler iletildiğinde tehlikeli durumların minimuma indirgenmesi veya tamamen önlenmesi için önerilen yöntemlerden biri kriptografik algoritmalardır. Temeli matematiksel ifadelere dayanan tekniklerin ve uygulamalarının birleşimini içeren tüm şifreleme algoritmaları; verilerin kullanılabilirliğini, gizliliğini ve bütünlüğünü korumayı amaçlamaktadır. Ancak başarımları; seçilen dosya türü, boyutu, karmaşıklığı, anahtar yapısı ve kullanılan bilgisayar platformu(yazılım ve donanım) gibi çeşitli faktörlere göre değişmektedir. Bu faktörler temelinde, üç farklı simetrik(AES, Blowfish, Cast-128) ve asimetrik(ECDH, El-Gamal, RSA) şifreleme algoritması kullanılarak bir uygulama yapılmıştır. “The Da Vinci Code” adlı içerikten üretilen 100 KB, 1, 5 ve 100 MB arasında değişen 4 adet çeşitli metinsel dosya boyutlarının karmaşıklığı; UTF-8 tablo yapısındaki birleşimleridir. Anahtar(gizli ve açık) sistemi; 32 karakterden(256 bit) oluşan mimaridir ve uygulama platformu; yazılım için, Windows, Python VS Code, donanım için, Intel I7-CPU, 16 GB RAM, 4 GB-GPU kullanılmıştır. Literatürde kabul edilen performans kriterleri; şifreleme ve şifre-çözmedeki hızı (s), bellek (MB) ve CPU (%) kullanım oranları temel alınarak başarımları değerlendirilmiştir. Böylece, simetrik ve asimetrik şifreleme algoritmalarının başarımları aynı veri setleri üzerinde karşılaştırılmıştır. Simetrik şifreleme algoritmalarının başarım sonuçlarının daha iyi olduğu gözlemlenmiştir.

CHAT SIMULATOR USING AES ENCRYPTION

Smartphones have become an integral part the lives of individuals and their priorities The present moment. The most visible uses are to chat and chat programs Most of these apps do does not provide the necessary protection and privacy information exchanged between users. Chat apps have become one of the most important and popular smartphone apps. It has the ability to exchange text messages, images and files that can freely communicate with each other. All messages must be protected and in this paper the encryption to used for secure all messages is by using AES encryption. AES (Advanced Encryption Standard) is a symmetric encryption algorithm widely used to keep data confidential in Internet networks. AES uses a block cipher with a block length of 128 bits and can encrypt data with keys consisting of 128, 192, or 256 bits. AES is one of the strongest encryption algorithms available today. It has been adopted by many organizations, including governments, banks, and technology companies. AES security is based on mathematical complexity and is difficult to crack even on ultra-fast computers. The AES encryption process involves multiple steps such as replace, move, and merge. The original data is split into smaller blocks and encrypted with the provided key. The blocks then change periodically, complicating the data patterns an attacker might find

Matrix Encryption Walks for Lightweight Cryptography

In this paper, we propose a new symmetric stream cipher encryption algorithm based on Graph Walks and 2-dimensional matrices, called Matrix Encryption Walks (MEW). We offer example Key Matrices and show the efficiency of the proposed method, which operates in linear complexity with an extremely large key space and low-resource requirements. We also provide the Proof of Concept code for the encryption algorithm and a detailed analysis of the security of our proposed MEW. The MEW algorithm is designed for low-resource environments such as IoT or smart devices and is therefore intended to be simple in operation. The encryption, decryption, and key generation time, along with the bytes required to store the key, are all discussed, and similar proposed algorithms are examined and compared. We further discuss the avalanche effect, key space, frequency analysis, Shannon entropy, and chosen/known plaintext-ciphertext attacks, and how MEW remains robust against these attacks. We have also discussed the potential for future research into algorithms such as MEW, which make use of alternative structures and graphic methods for improving encryption models.

Sparse Compression-Based Image Encryption using Data Encryption Standards RC5

In this work, we have used the standard symmetric key block cipher data encryption algorithm RC5(32,16,8) for the encryption of digital greyscale images. For this, we have only considered the nonzero elements of the sparse matrix of the images which have been generated using the sparse representation technique. The security strength of the proposed technique is verified through different quality parameters, e.g. information entropy, correlation coefficients, NPCR, UACI, and NIST test. Our proposed algorithm achieved the maximum information entropy value of 7.9977 for the cameraman image and nearly zero correlation coefficient values establish the robustness of the cryptosystem. The highest NPCR and UACI values obtained in our work are 99.6916 and 33.9605, which are closer to the maximum theoretical values. The proposed technique is also compared with some of the contemporary works to validate the credibility of our proposed algorithm.

Symmetric Color Image Encryption Using a Novel Cross–Plane Joint Scrambling–Diffusion Method

Motivated by the pursuit of both encryption efficiency and security, this paper presents a symmetric color image encryption algorithm using a novel cross–plane joint scrambling–diffusion method. To provide high–strength security, the color planes are firstly spliced horizontally and then vertically to be adequately encrypted by the joint scrambling–diffusion method. Therefore, minor changes in any pixel can cross every color plane that significantly influences the final cipher image. To achieve fast encryption speed, all employed chaotic systems have simple structures but robust properties to rapidly generate high–quality pseudorandom sequences. Additionally, the joint scrambling–diffusion method is vectorized to handle pixels in parallel for satisfactory execution efficiency. Security tests demonstrate the outstanding security performance of the proposed algorithm, with correlation coefficients and entropies of cipher images being close to 0 and greater than 7.99, respectively, and results of NPCR and UACI tests being similar to ideal cipher images, which can resist statistical, differential, exhaustive, and even chosen ciphertext/plaintext attacks. Moreover, because of the O(4W + 4H) time complexity of the novel scrambling–diffusion method, even a color image with a size of 1024 × 1024 only costs 0.26 s to be encrypted. Hence, the proposed algorithm can satisfy the efficiency and security requirements of color image encryption.

Linear Layer Architecture Based on Cyclic Shift and XOR

One of the nodes of a block symmetric encryption algorithm is represented by a linear layer, the purpose of which is to distribute the mutual influence of bits within the processed data block. Several methods exist for constructing a linear layer, the most common of which are matrix multiplication operations and the permutation of bits. Both approaches have high computational complexity and are not equally effective for both hardware and software implementations. This paper presents an approach for constructing linear functions for block symmetric encryption algorithms utilizing cyclic shift, and bitwise addition operations are formulated. We provide a preliminary assessment of certain properties of such functions, including the branch number. This linear operation can accommodate binary words of any length, allowing for the design of an optimal linear layer for software or hardware architectures with any word size. Furthermore, the developed architecture allows for balancing the laboriousness of linear operations and related branch numbers. The proposed novel linear layer architecture facilitates the creation of fast lightweight encryption algorithms as well as robust classical algorithms with a high level of cryptographic strength. For efficient implementation on software and hardware platforms, no additional optimizations are required, as the proposed linear layer allows for achieving high performance in both cases.

Design of information security transmission scheme and related authentication services based on Kerberos

A plethora of cloud service companies have sprung up in response to the growing amount of data. Data security protection solutions have been proposed by service providers. As a result, a rising number of people are using the cloud to store their own data. However, as technology advances and hackers' capabilities increase, service providers' protection mechanisms become less effective, and data security cannot be guaranteed. We review the logic of the Kerberos algorithm and discuss the work of each part in this paper. This document also includes and discusses difficulties with Kerberos, as well as improvement strategies.The main focus will be on strengthening the security of the Kerberos secure communication process, which will serve as a reference for Kerberos security transmission and authentication research. It solves the problem of the symmetric encryption algorithm's relatively low security in the authentication process by replacing it with the RSA one-time encryption algorithm; in addition, the Kerberos authentication protocol is added between the client and the cloud service provider to secure the data transmission process. Furthermore, this paper explains some basic authentication principles.

Performance Analysis of a Hybrid Security Algorithm for Secure Cloud Environment

Encryption algorithms are critical in ensuring the security of information in today's rapidly evolving internet and network applications. These algorithms are especially important in ensuring information security for internet-based dynamic applications and storage methods like cloud computing, which require high reliability, scalability, and autonomy to enable ubiquitous access. Given the prevalence of cloud computing in our everyday routines, data security has emerged as a major concern, particularly for non-technical users. To address this concern, the effectiveness of two widely used symmetric key encryption algorithms, AES and Blowfish, in terms of throughput, power consumption, and encryption speed, has been analyzed and compared. Based on the simulation results, it is clear that AES outperforms Blowfish when security flaws are put into consideration. It should be noted, however, that AES requires more processing power. As a result, a proposed efficient hybrid security algorithm seeks to combine the benefits of both approaches in an encryption system, thereby improving data security in a cloud environment while optimizing resource utilization. According to the performance analysis, the proposed hybrid approach is an excellent solution for encrypting and decrypting files with large block sizes and longer keys, as well as defending against Man in the Middle (MitM) attacks.

A Novel Approach for Enhancement of Blowfish Algorithm by using DES, DCT Methods for Providing, Strong Encryption and Decryption Capabilities

Data safety has evolved into a critical requirement and a duty in modern life. Most of our systems are designed in such a way that it can get hacked, putting our private information at danger. As a result, for numerous safety motives, we utilize various approaches to save as much as possible on this data, regardless of its varied formats, words, photographs, videos, and so on. The data storage capacity of mobile devices is restricted owing to insufficient data storage and processing. In order to develop a safe MCC environment, security concerns must be studied and analysed. This study compares the most widely used symmetric key encryption algorithms, including DES (Data Encryption Standard), Blowfish, TDES (Triple Data Encryption Standard), PRESENT, and KLEIN. The assessment of algorithms is based on attacks, key size, and block size, with the best outcomes in their field.

An Efficient Encryption Scheme with Fully Hidden Access Policy for Medical Data

With the development of informatization, patient medical data are generally stored in the form of electronic medical records. Hospitals store a large amount of medical data on cloud servers, which can ensure the integrity and sharing of medical data. There are many problems when sharing medical data, the most important of which is the security of private data. The ciphertext-policy attribute-based encryption (CP-ABE) algorithm not only supports data encryption, but also supports data access control. The CP-ABE algorithm is applied to medical databases. Through the encryption of medical data and the fine-grained control of data owner access to medical data, the privacy security and sharing security of medical data are realized. However, the traditional CP-ABE algorithm also has problems for the data user regarding access policy privacy leakage and the low efficiency of medical data encryption and decryption. This paper proposes a secure and efficient encryption technique. Medical data are encrypted using a symmetric encryption algorithm, and the CP-ABE algorithm with a fully hidden access policy encrypts the symmetric key. To implement access policy hiding, it uses an attribute bloom filter (ABF) for all access structures. The solution also supports the outsourced decryption of medical data, which can improve the encryption and decryption efficiency of the technique. Finally, in this paper, it is demonstrated that the scheme is selectively chosen-plaintext attack secure (CPA-secure). The experimental results show that users have less computational consumption to obtain medical data.

A Survey on Hybrid Cryptography for Secure File Storage on the Cloud

Abstract: This paper suggests the use of hybrid cryptography for safe cloud file storage and gives a software to implement it. To establish higher security measures, the application mixes symmetric and asymmetric encryption algorithms. The data is encrypted using symmetric encryption, and the symmetric key is encrypted using asymmetric encryption, guaranteeing that the data is encrypted using a unique key for each user while also protecting the key itself. The Advanced Encryption Standard (AES) algorithm is used for symmetric encryption, whereas the Rivest-Shamir-Adleman (RSA) method is used for asymmetric encryption. It has functions like user authentication, file upload/download, and key management. This study illustrates the efficacy of hybrid cryptography for protecting cloud-stored information and gives a framework for implementing it.

Методика подвійної автентифікації для RFID систем управління доступом з підвищеним рівнем захисту

Currently, there are no uniform international standards for devices and systems that use radio frequency identification technology. Using tag alone as an identifier imposes certain restrictions on the level of protection of access control systems, since the unique tag identifier can be easily copied, so two-step authentication is required. The second level of protection can be a digital password entered via the keyboard. The work presents dual authentication technique for access control to the premises. Increasing the level of protection of radio frequency identification systems is achieved by the additional use of a digital password encrypted using a symmetric block encryption algorithm and recorded on the tag. This removes any restrictions on the number of registered users in the system, because passwords and IDs are stored on tags. The laboratory model of the device is based on the NodeMCU-32S Opensource platform with an RFID module that allows connection to most fog and cloud services of the Internet of things. The development is based on the ESP32 controller, which supports the necessary set of commands and hardware for implementing the methodology, in particular, wireless standards and communication protocols, hardware-accelerated encryption. The Cayenne service from MyDevices was chosen as the cloud platform, which made it possible to configure the device using the publish-subscribe messaging protocol and develop a graphical user interface. A log on the Cayenne platform is used to keep track of users, a character display is used to display the current status and settings of the device, and a serial interface is used to debug work algorithms. The software is implemented using the Arduino C programming language.