# SECURITY EVALUATION OF ENCRYPTION USING RANDOM NOISE GENERATED BY LCG

Save this PDF as:

Size: px
Start display at page:

Download "SECURITY EVALUATION OF EMAIL ENCRYPTION USING RANDOM NOISE GENERATED BY LCG"

## Transcription

1 SECURITY EVALUATION OF ENCRYPTION USING RANDOM NOISE GENERATED BY LCG Chung-Chih Li, Hema Sagar R. Kandati, Bo Sun Dept. of Computer Science, Lamar University, Beaumont, Texas, USA , , ABSTRACT Theoretically, using any Linear Congruence Generator (LCG) to generate pseudorandom numbers for cryptographic purposes is problematic because of its predictableness. On the other hand, due to its simplicity and efficiency, we think that the LCG should not be completely ignored. Since the random numbers generated by the LCG are predictable, it is clear that we cannot use them directly. However, we shall not introduce too much complication in the implementation which will compromise the reasons, simplicity and efficiency, of choosing the LCG. Thus, we propose an easy encryption method using an LCG for encryption. To see how practical in predicting random numbers produced by an LCG, we implement Plumstead s inference algorithm [2] and run it on some numbers generated by the easiest congruence: X n+1 = ax n + b mod m. Based on the result, we confirm the theoretical fault of the LCG, that is, simply increasing the size of the modulus does not significantly increase the difficulty of breaking the sequence. Our remedy is to break a whole random number into pieces and use them separately (with interference from another source, in our case, English text). We use 16-bytes random numbers and embed each byte of the random number as noise in one text character. In such a way, we can avoid revealing enough numbers for the attacker to predict. Keywords: linear congruential generator, encryption, lightweight encryptions 1. INTRODUCTION The Linear Congruence Generator (LCG) has been used in generating pseudo-random numbers for a large variety of applications [11]. Although the pseudo-random numbers produced by an LCG bear many favorable properties to many (if not all) applications [6], they are theoretically not suggested for cryptographic purposes because they are predictable (even if the parameters of the linear congruential equations are unknown) [8]. This weakness however is not formidable in some practical applications when a lightweight encryption will suffice but efficiency is a major concern. Ordinary exchange seems to be such an example where some lightweight encryption may be enough to provide basic protection as the envelope to regular postal mails. We therefore propose an easy method for encryption with an LCG involved. To assess the security strength of using the LCG, we implement Plumstead s (Boyar s) powerful inference algorithm against congruential equations in its easiest form. Our experimental results show that the algorithm can correctly predict the entire sequence with a few known numbers in the sequence. Thus, if we directly embed the numbers in our text, some straightforward classical cryptanalysis can recover enough numbers for inference. To avoid this problem without further complicating our congruential equation, we choose big moduli (16 bytes or bigger) to produce big pseudo-random numbers and embed a number in 16 characters of the text. Since a correct guess on a string of 16 characters reveals just one number in the sequence, no prediction can be possibly made.

2 2. LINEAR CONGRUENTIAL GENERATORS The Linear Congruential Generator (LCG) generates a sequence of pseudo-random numbers according to some recurrence congruence. The easiest LCG uses the following equation: X n+1 = ax n + b mod m. (1) In (1), a is called the multiplier, b the increment, and m the modulus. The numbers will be generated in order as a sequence: X 0, X 1, X 2, etc. In the sequence, X 0 is given, which is called seed. We say that a, b, m, and X 0 are the parameters of an LCG. The quality of an LCG depends on the selection of its parameters, which has been widely discussed for practical reasons. For example, the condition of obtaining the maximum cycle (m-1) of un-repeated numbers was given by M. Greenberger in 1961 for the special case, m = 2 n. In 1962, Hull and Dobell gave the general condition (detailed discussion and proofs can be found in [7]). Park and Miller [10] suggested a minimal standard for implementation, which is not as easy as it may seem. A more recent and complete survey was done by Entacher [3]. However, these researchers emphasized on engineering applications, mostly for simulations, and put aside the issue on predictableness. In fact, most commercial LCGs disclose their implementations with fixed parameters because secrecy is not an issue for statistical use [12]. In other words, their designs are not meant for cryptographic applications. 3. ENCRYPTION WITH LCG Although the market for encryption has always been promising ever since the Internet came to its age, its research and products are unreasonably few. In part this was because software companies and individuals had been discouraged to develop an software with encryption ability due to the export control laws of the United States. Also, most public key ciphers were patented. For example, PGP and its creator, Phil Zimmermann, had experienced all these non-technique troubles [4]. Until recently, the export controls are relaxed and patents of many public-key ciphers have gradually expired. A new wave of developing fast, secure, inexpensive, and legal encryption software is certainly expected Encryption Method In this section we introduce our encryption method. Hybrid Cipher: We follow the structure of a hybrid cipher used in PGP. In PGP, there is an Advanced Encryption Standard (AES) cipher for actually encrypting the text. Also, there is an RSA cipher for encrypting the symmetric keys of the AES. In our cipher, we keep the standard RSA for the symmetric key exchange and use our LCG noise cipher for encrypting the message. The two parties, the sender and the receiver, shall establish keys for the RSA cipher upon their first communication. We omit the detailed descriptions about how a hybrid cipher and RSA work, which are rather standard (see [4, 13] for details). We use 512 bits (64 bytes) for the RSA public keys in our cipher, which is big enough for us to encrypt the 4 parameters of our LCG (16 bytes for each). In real implementation, we suggest using at least 2048 bits for the RSA public keys to guarantee security under today s computer power. Key Scheduling: Since our cipher does not resist plain-text attack, the sender has to

3 randomly select new LCG parameters for each to send off. Repeatedly using the same LCG parameters will significantly undermine the security of our system. A fully isolated random number generator should be used for the selection of the parameters. For example, the interval of mouse clicks is considered as a good source for seeding a generator, namely selecting values for a, b, m, and X 0. The moduli are required to be a 16-byte prime. We use the Miller-Rabin test to select prime numbers with error rate less than 1/2 m, where m is the length of m (see [13], page 179). According to the Prime Number Theorem, the density of primes in 16-byte integers is about 1/(ln2 128 ) = Thus, we can successfully pick up a prime within about 100 random tests, which is affordable. After m has been decided, we randomly assign numbers less than m to a, b, and X 0 without other restrictions except for removing some trivial values such as 0 or 2 k. There is no concern about the length of the cycle in the sequence generated, since a 128-bit prime as the modulus is very likely to generate unrepeated numbers within the length of a regular , especially we will use one random number for every 16 characters of the . Encrypting Text: We assume the plaintext to be encrypted is prepared in extended ASCII code (8-bits) without compression. Compression can increase the difficulty of cryptanalysis (this is what PGP does) but we do not consider this in our test cipher. Once the parameters of our LCG are decided, we generate X 1, X 2, X 3,... one by one, until all characters in the message have been encrypted. Starting from X 1, we embed each byte of the random number in a character of the message. For example, let (2) shown in the following be the message to be encrypted: Telecommunication in the state of the art (2) The values of the first three characters are T = 84, e =101, l = 108. Since there are 41 characters, we need three 16-byte random numbers. The embedding operation is simply the addition modulo 256. A more complicate operation doesn t seem necessary. For example, let X 1 = 1O5AFB11FCBBOO h The first three bytes are 10 h = 16, 5A h = 90, and FB h = 251. The values of the first three ciphertext characters of (2) are: mod 256 = mod 256 = mod 256 = 103 Moreover, a message will be padded by space to make the length a multiple of 16. For decryption, the receiver used the RSA to decrypt the parameters of the LCG. Then, run the LCG to reproduce the same sequence of the random numbers used by the sender. The decryption method is the reverses operation of addition modulo 256, which is straightforward. 4. CRYPTANALYSIS It is well known that the LCG is predictable. This was first argued by Knuth in [8], then by Boyar [2, 1]. Until Krawczyk [9] who gave an inference algorithm for predicting any LCG in the most general form, the problem was theoretically settled. Moreover, in his survey paper [12], Ritter s again warns any attempt to use the LCG for cryptographic purposes unless the sequence can be isolated from another generator. In our cipher, we will use plain-text to serve as such a generator for isolation. Although English certainly can t be seen as a source of random numbers,

4 we think the entropy of English has been good enough for the purpose. More precisely, the strength of our encryption method depends on the answers to the following two questions: (1) How many random numbers in the sequence need to be known for extrapolating the entire sequence? (2) How many random numbers used for encryption can be retrieved from the cipher-text by cryptanalysis? First, we need experimental results for question (1) so we can propose an appropriate remedy for this theoretical weakness. For (2), we shall answer the question in Section Predicting the Sequence of an LCG In this section, we briefly describe and analyze Plumstead s (Boyar s) algorithm for inferring an unknown LCG and discussion our experimental results. Plumstead s Algorithm [2]: The algorithm assumes that the LCG is fixed to (1) with a, b, m, and X 0 unknown and no specific properties of them are further assumed. The algorithm will find a congruence, X n+1 = a'x n + b' mod m, possibly with different multiplier and increment but generating the same sequence as with the unknown a, b, m, and X 0. The inference consists of two stages: (I.) Finding a' and b'; (II.) Predicting X i+1 and modifying the modulus m, if necessary. Let X i denote sequence X 0, X 1, X 2,, and Y i denote the sequence (X 1 -X 0 ), (X 2 -X 1 ), (X 3 -X 2 ),.., i.e. Y i =(X i+1 -X i ). Stage I: 1. Find the least t such that d Y t+1, where d = gcd (Y 0, Y 1,.,Y t ); 2. For each i with 0 i t, find u i such that ( t i=0 u i Y i )= d; 3. Set a' = ( t i=0 u i Y i+1 )/d, and b' = (X 1 -a'x 0 ). This stage will give X i+1 = a'x i + b' mod m for all i 0. Stage II: We use Gold s learning paradigm [5], i.e., when a prediction X i is made, the actual value will be available to the inference algorithm. Initially, set i = 0 and m = and assume X 0 and X i are available (we can reuse the numbers used in the previous stage). Repeat the following steps forever: 1. Set i = i+1 and predict X i+1 = a'x i + b' mod m. 2. If X i+1 is incorrect, set m = gcd (m, a'y i-1 -Y i ). It is easy to prove that X i indeed can be inferred in the limit, but the argument for an upper bound of the number of incorrect predictions is highly nontrivial (see [2] for details). Analytic and Empirical Results of Plumstead s Algorithm: It is clear that every step in both stages is polynomial-time computable in terms of the size of m. In [2], Plumstead proves that t in Stage I is bound by the length of m. Thus, the algorithm is optimal with sample complexity O(log 2 m) in the worst case. In practice, we found that the number of samples needed in average is far fewer than in the worst case. We test moduli m, from 1 byte in size and double the size up to 32 bytes. The parameters are selected according to the guideline of our symmetric key scheduling. For moduli

5 m bigger that two bytes, we use the Miller-Rabin test to select prime numbers with error rate less than 1/2 m. For each size of m, we test 1000 different sets of parameters. m (bytes) µ δ Min Max Table 1: The Results of Plumstead's Algorithm Table 1 shows the results of our experiments, where µ is the average of the numbers needed to infer the sequence and δ is the standard deviation. Also, the table shows the best (min) and worst (max) cases. In our experiments we take the liberty to notify our inference program to stop when it reaches the correct point. Note that, we do not overpower our program with this ability because, in our encryption case, this can be done by checking, for example, the index of coincidence of the decrypted cipher to decide if the random sequence is correctly inferred Retrieving Random Numbers from Cipher-Text Based on the results above, it is clear that the size of m does not significantly prolong the inference process. Intuitively, this is because the size of m does not affect the number of the internal states of the LCG, which is very small [6]. Thus, if we simply add a whole random number into a plain-text character, a classical cryptanalysis can easily retrieve 5 to 6 numbers from the cipher-text, which are enough to infer the entire sequence via Plumstead s algorithm in most cases (even the modulus is as big as 32 bytes). A common attack is to search common words in typical English and simply try every position of the cipher-text to see if we can recover a meaningful message. For example, the can be expected in almost every English . Moreover, since we keep all delimiters of the plain-text, a 3-letter word actually contributes 5 characters. Consider the following diagram where the segment C 1 C 2 C 3 C 4 C 5 in the cipher-text is obtained from the (note the two space before and after the word).... C 1 C 2 C 3 C 4 C 5... t h e X 1 X 2 X 3 X 4 X 5 After a few trials, we will land the at a right position. Then, each X i can be obtained by removing corresponding characters in the from the cipher character, C i s. Note that the plaintext in (2) has two positions for the. In general, if we can guess a word of n letters in the message and land it at the right position, we can obtain n+2 pseudo-random numbers. As the results shown in Table 1, it is very likely that five numbers are enough for inferring the sequence. Even if in some cases the random sequence cannot be broken with five known numbers, a serious attacker may search a dictionary for a longer word and try to find a match in the message. For example, the word Telecommunication in (2) will reveal a sequence of 19 random numbers (include the ending space). As we mentioned earlier, the checking can be done automatically by examining the index of coincidence of the decrypted text

6 obtained by removing random numbers generated by a hypothetical LCG. If the LCG is not the correct one, the index of coincidence will indicate that the decrypted text is close to a random text and the LCG should be rejected. With today s computer power, the attacker can search an entire dictionary and do the necessary computation within a few hours. On the other hand; our remedy to this problem is to distribute a 16-byte random number into 16 text characters as shown in Section 3.1. In such a way, even if the attacker successfully guesses 48 characters, (this is very unlikely, since this requires two consecutive long words to be located in the cipher-text), giving away three pseudo-random numbers generated by an LCG can t hurt the secrecy of the LCG. 5. CONCLUSION Since LCG is such an efficient and widely known pseudo-random numbers generator, we don t want to completely remove it from our cryptographic design just because of its theoretical weakness, especially when we can find an easy way to patch this fault. In general, this fault can be patched by blocking away the numbers from directly exposing to the attacker. In particular, encryption is a good example to achieve this. That is, the pseudo-random numbers and the text itself can hide each other. To conclude this investigation, we recommend that: if simplicity and efficiency are our major concerns and light-weight encryptions can meet our security requirement, LCG s should be considered, provided we should find an efficient way to hide the pseudo-random numbers generated by LCG s. REFERENCES [1] Boyar J., Inferring Sequences Produced by Pseudo-Random Number Generators. Journal of the ACM, 36(1): , [2] Boyar J. P., Inferring a Sequence Generated by a Linear Congruence. Proceedings of the 23 rd Annual IEEE Symposium on the Foundations of Computer Science, pages , [3] Entacher K., A Collection of Selected Pseudorandom Number Generators with Linear Structures. Technical report, 97-1, ACPC-Austrian Center for Parallel Computation, University of Vienna, Austria, [4] Garfinkel S., PGP: Pretty Good Privacy. O Reilly & Associates, mc, [5] Gold E. M., Language Identification in the Limit. Information and Control, 10: ,1967. [6] Heinrich J., Detecting a Bad Random Number Generator. Technical report, University of Pennsylvania, [7] Knuth D. E., The Art of Computer Programming, volume 2: Semi-numerical Algorithms. Addison-Wesley, [8] Knuth D. E., Deciphering a Linear Congruential Encryption. IEEE Transaction on Information Theory, IT-31(1):49-52, January [9] Krawczyk. H., How to Predict Congruential Generators. Journal of Algorithms, 13(4): , [10] Park S. K., and Miller K. W., Random Number Generators: Good ones are hard to find. Communication of the ACM, 31(10): , [11] Press W. H., Teukolsky S. A., Vetterling W. T., and Flannery B. P., Numerical Recipes in C, The Art of Scientific Computing. Cambridge University Press, New York, 2nd edition, Chapter 7 Random Number: [12] Ritter T., The Efficient Generation of Cryptographic Confusion Sequences. Cryptologia, 15(2):81-139, [13] Stinson D., Cryptography: Theory and Practice. 2nd Edition. Chapman & Hall Publications, 2002.

### Effective Secure Encryption Scheme [One Time Pad] Using Complement Approach Sharad Patil 1 Ajay Kumar 2

Effective Secure Encryption Scheme [One Time Pad] Using Complement Approach Sharad Patil 1 Ajay Kumar 2 Research Student, Bharti Vidyapeeth, Pune, India sd_patil057@rediffmail.com Modern College of Engineering,

### Cryptography and Network Security Prof. D. Mukhopadhyay Department of Computer Science and Engineering Indian Institute of Technology, Kharagpur

Cryptography and Network Security Prof. D. Mukhopadhyay Department of Computer Science and Engineering Indian Institute of Technology, Kharagpur Lecture No. # 11 Block Cipher Standards (DES) (Refer Slide

### Cryptography and Network Security Department of Computer Science and Engineering Indian Institute of Technology Kharagpur

Cryptography and Network Security Department of Computer Science and Engineering Indian Institute of Technology Kharagpur Module No. # 01 Lecture No. # 05 Classic Cryptosystems (Refer Slide Time: 00:42)

### CIS 6930 Emerging Topics in Network Security. Topic 2. Network Security Primitives

CIS 6930 Emerging Topics in Network Security Topic 2. Network Security Primitives 1 Outline Absolute basics Encryption/Decryption; Digital signatures; D-H key exchange; Hash functions; Application of hash

### Cryptography and Network Security Chapter 9

Cryptography and Network Security Chapter 9 Fifth Edition by William Stallings Lecture slides by Lawrie Brown (with edits by RHB) Chapter 9 Public Key Cryptography and RSA Every Egyptian received two names,

### Techniques of Asymmetric File Encryption. Alvin Li Thomas Jefferson High School For Science and Technology Computer Systems Lab

Techniques of Asymmetric File Encryption Alvin Li Thomas Jefferson High School For Science and Technology Computer Systems Lab Abstract As more and more people are linking to the Internet, threats to the

### SECURITY IMPROVMENTS TO THE DIFFIE-HELLMAN SCHEMES

www.arpapress.com/volumes/vol8issue1/ijrras_8_1_10.pdf SECURITY IMPROVMENTS TO THE DIFFIE-HELLMAN SCHEMES Malek Jakob Kakish Amman Arab University, Department of Computer Information Systems, P.O.Box 2234,

### Message Authentication Code

Message Authentication Code Ali El Kaafarani Mathematical Institute Oxford University 1 of 44 Outline 1 CBC-MAC 2 Authenticated Encryption 3 Padding Oracle Attacks 4 Information Theoretic MACs 2 of 44

### Today ENCRYPTION. Cryptography example. Basic principles of cryptography

Today ENCRYPTION The last class described a number of problems in ensuring your security and privacy when using a computer on-line. This lecture discusses one of the main technological solutions. The use

### Solutions to Problem Set 1

YALE UNIVERSITY DEPARTMENT OF COMPUTER SCIENCE CPSC 467b: Cryptography and Computer Security Handout #8 Zheng Ma February 21, 2005 Solutions to Problem Set 1 Problem 1: Cracking the Hill cipher Suppose

### Midterm Exam Solutions CS161 Computer Security, Spring 2008

Midterm Exam Solutions CS161 Computer Security, Spring 2008 1. To encrypt a series of plaintext blocks p 1, p 2,... p n using a block cipher E operating in electronic code book (ECB) mode, each ciphertext

### RSA Attacks. By Abdulaziz Alrasheed and Fatima

RSA Attacks By Abdulaziz Alrasheed and Fatima 1 Introduction Invented by Ron Rivest, Adi Shamir, and Len Adleman [1], the RSA cryptosystem was first revealed in the August 1977 issue of Scientific American.

### Lecture 10: CPA Encryption, MACs, Hash Functions. 2 Recap of last lecture - PRGs for one time pads

CS 7880 Graduate Cryptography October 15, 2015 Lecture 10: CPA Encryption, MACs, Hash Functions Lecturer: Daniel Wichs Scribe: Matthew Dippel 1 Topic Covered Chosen plaintext attack model of security MACs

### Network Security. Computer Networking Lecture 08. March 19, 2012. HKU SPACE Community College. HKU SPACE CC CN Lecture 08 1/23

Network Security Computer Networking Lecture 08 HKU SPACE Community College March 19, 2012 HKU SPACE CC CN Lecture 08 1/23 Outline Introduction Cryptography Algorithms Secret Key Algorithm Message Digest

### Data Encryption A B C D E F G H I J K L M N O P Q R S T U V W X Y Z. we would encrypt the string IDESOFMARCH as follows:

Data Encryption Encryption refers to the coding of information in order to keep it secret. Encryption is accomplished by transforming the string of characters comprising the information to produce a new

Family Name:... First Name:... Section:... Advanced Cryptography Final Exam July 18 th, 2006 Start at 9:15, End at 12:00 This document consists of 12 pages. Instructions Electronic devices are not allowed.

### Lecture 3: One-Way Encryption, RSA Example

ICS 180: Introduction to Cryptography April 13, 2004 Lecturer: Stanislaw Jarecki Lecture 3: One-Way Encryption, RSA Example 1 LECTURE SUMMARY We look at a different security property one might require

### Basics of Cryptography

Basics of Cryptography What is Cryptography? Cryptography is an applied branch of mathematics In some situations it can be used to provide Confidentiality Integrity Authentication Authorization Non-repudiation

### Computer Networks. Network Security and Ethics. Week 14. College of Information Science and Engineering Ritsumeikan University

Computer Networks Network Security and Ethics Week 14 College of Information Science and Engineering Ritsumeikan University Security Intro for Admins l Network administrators can break security into two

### MATH 168: FINAL PROJECT Troels Eriksen. 1 Introduction

MATH 168: FINAL PROJECT Troels Eriksen 1 Introduction In the later years cryptosystems using elliptic curves have shown up and are claimed to be just as secure as a system like RSA with much smaller key

### CRYPTOGRAPHIC ALGORITHMS (AES, RSA)

CALIFORNIA STATE POLYTECHNIC UNIVERSITY, POMONA CRYPTOGRAPHIC ALGORITHMS (AES, RSA) A PAPER SUBMITTED TO PROFESSOR GILBERT S. YOUNG IN PARTIAL FULFILLMENT OF THE REQUIREMENT FOR THE COURSE CS530 : ADVANCED

### Network Security: Cryptography CS/SS G513 S.K. Sahay

Network Security: Cryptography CS/SS G513 S.K. Sahay BITS-Pilani, K.K. Birla Goa Campus, Goa S.K. Sahay Network Security: Cryptography 1 Introduction Network security: measure to protect data/information

### Lecture 9 - Message Authentication Codes

Lecture 9 - Message Authentication Codes Boaz Barak March 1, 2010 Reading: Boneh-Shoup chapter 6, Sections 9.1 9.3. Data integrity Until now we ve only been interested in protecting secrecy of data. However,

### Overview of Cryptographic Tools for Data Security. Murat Kantarcioglu

UT DALLAS Erik Jonsson School of Engineering & Computer Science Overview of Cryptographic Tools for Data Security Murat Kantarcioglu Pag. 1 Purdue University Cryptographic Primitives We will discuss the

### Victor Shoup Avi Rubin. fshoup,rubing@bellcore.com. Abstract

Session Key Distribution Using Smart Cards Victor Shoup Avi Rubin Bellcore, 445 South St., Morristown, NJ 07960 fshoup,rubing@bellcore.com Abstract In this paper, we investigate a method by which smart

### 1) A very simple example of RSA encryption

Solved Examples 1) A very simple example of RSA encryption This is an extremely simple example using numbers you can work out on a pocket calculator (those of you over the age of 35 45 can probably even

### Chapter 11 Security+ Guide to Network Security Fundamentals, Third Edition Basic Cryptography

Chapter 11 Security+ Guide to Network Security Fundamentals, Third Edition Basic Cryptography What Is Steganography? Steganography Process of hiding the existence of the data within another file Example:

### Outline. Computer Science 418. Digital Signatures: Observations. Digital Signatures: Definition. Definition 1 (Digital signature) Digital Signatures

Outline Computer Science 418 Digital Signatures Mike Jacobson Department of Computer Science University of Calgary Week 12 1 Digital Signatures 2 Signatures via Public Key Cryptosystems 3 Provable 4 Mike

### T Cryptology Spring 2009

T-79.5501 Cryptology Spring 2009 Homework 2 Tutor : Joo Y. Cho joo.cho@tkk.fi 5th February 2009 Q1. Let us consider a cryptosystem where P = {a, b, c} and C = {1, 2, 3, 4}, K = {K 1, K 2, K 3 }, and the

### 1 Message Authentication

Theoretical Foundations of Cryptography Lecture Georgia Tech, Spring 200 Message Authentication Message Authentication Instructor: Chris Peikert Scribe: Daniel Dadush We start with some simple questions

### Portable Random Number Generators ABSTRACT

Portable Random Number Generators Gerald P. Dwyer, Jr.* a K. B. Williams b a. Research Department, Federal Reserve Bank of Atlanta, 104 Marietta St., N.W., Atlanta GA 30303 USA b. Melbourne Beach, Florida

### The Mathematics of the RSA Public-Key Cryptosystem

The Mathematics of the RSA Public-Key Cryptosystem Burt Kaliski RSA Laboratories ABOUT THE AUTHOR: Dr Burt Kaliski is a computer scientist whose involvement with the security industry has been through

### An Efficient Data Security in Cloud Computing Using the RSA Encryption Process Algorithm

An Efficient Data Security in Cloud Computing Using the RSA Encryption Process Algorithm V.Masthanamma 1,G.Lakshmi Preya 2 UG Scholar, Department of Information Technology, Saveetha School of Engineering

### Number Theory and Cryptography using PARI/GP

Number Theory and Cryptography using Minh Van Nguyen nguyenminh2@gmail.com 25 November 2008 This article uses to study elementary number theory and the RSA public key cryptosystem. Various commands will

### Random-Number Generation

Random-Number Generation Raj Jain Washington University Saint Louis, MO 63130 Jain@cse.wustl.edu Audio/Video recordings of this lecture are available at: http://www.cse.wustl.edu/~jain/cse574-08/ 26-1

### Dr. Jinyuan (Stella) Sun Dept. of Electrical Engineering and Computer Science University of Tennessee Fall 2010

CS 494/594 Computer and Network Security Dr. Jinyuan (Stella) Sun Dept. of Electrical Engineering and Computer Science University of Tennessee Fall 2010 1 Introduction to Cryptography What is cryptography?

### Ky Vu DeVry University, Atlanta Georgia College of Arts & Science

Ky Vu DeVry University, Atlanta Georgia College of Arts & Science Table of Contents - Objective - Cryptography: An Overview - Symmetric Key - Asymmetric Key - Transparent Key: A Paradigm Shift - Security

### 1 Step 1: Select... Files to Encrypt 2 Step 2: Confirm... Name of Archive 3 Step 3: Define... Pass Phrase

Contents I Table of Contents Foreword 0 Part I Introduction 2 1 What is?... 2 Part II Encrypting Files 1,2,3 2 1 Step 1: Select... Files to Encrypt 2 2 Step 2: Confirm... Name of Archive 3 3 Step 3: Define...

### Cryptographic process for Cyber Safeguard by using PGP

Cryptographic process for Cyber Safeguard by using PGP Bharatratna P. Gaikwad 1 Department of Computer Science and IT, Dr. Babasaheb Ambedkar Marathwada University Aurangabad, India 1 ABSTRACT: Data security

### 159.334 Computer Networks. Network Security 1. Professor Richard Harris School of Engineering and Advanced Technology

Network Security 1 Professor Richard Harris School of Engineering and Advanced Technology Presentation Outline Overview of Identification and Authentication The importance of identification and Authentication

### PGP - Pretty Good Privacy

I should be able to whisper something in your ear, even if your ear is 1000 miles away, and the government disagrees with that. -- Philip Zimmermann PGP - Pretty Good Privacy - services - message format

### 1 Pseudorandom Permutations

Theoretical Foundations of Cryptography Lecture 9 Georgia Tech, Spring 2010 PRPs, Symmetric Encryption 1 Pseudorandom Permutations Instructor: Chris Peikert Scribe: Pushkar Tripathi In the first part of

### Elements of Security

Elements of Security Dr. Bill Young Department of Computer Sciences University of Texas at Austin Last updated: April 15, 2015 Slideset 8: 1 Some Poetry Mary had a little key (It s all she could export)

### Developing and Investigation of a New Technique Combining Message Authentication and Encryption

Developing and Investigation of a New Technique Combining Message Authentication and Encryption Eyas El-Qawasmeh and Saleem Masadeh Computer Science Dept. Jordan University for Science and Technology P.O.

### Cryptography and Network Security

Cryptography and Network Security Spring 2012 http://users.abo.fi/ipetre/crypto/ Lecture 3: Block ciphers and DES Ion Petre Department of IT, Åbo Akademi University January 17, 2012 1 Data Encryption Standard

### 2 Primality and Compositeness Tests

Int. J. Contemp. Math. Sciences, Vol. 3, 2008, no. 33, 1635-1642 On Factoring R. A. Mollin Department of Mathematics and Statistics University of Calgary, Calgary, Alberta, Canada, T2N 1N4 http://www.math.ucalgary.ca/

### 1 Construction of CCA-secure encryption

CSCI 5440: Cryptography Lecture 5 The Chinese University of Hong Kong 10 October 2012 1 Construction of -secure encryption We now show how the MAC can be applied to obtain a -secure encryption scheme.

### CSCE 465 Computer & Network Security

CSCE 465 Computer & Network Security Instructor: Dr. Guofei Gu http://courses.cse.tamu.edu/guofei/csce465/ Public Key Cryptogrophy 1 Roadmap Introduction RSA Diffie-Hellman Key Exchange Public key and

### Cryptography. Helmer Aslaksen Department of Mathematics National University of Singapore

Cryptography Helmer Aslaksen Department of Mathematics National University of Singapore aslaksen@math.nus.edu.sg www.math.nus.edu.sg/aslaksen/sfm/ 1 Basic Concepts There are many situations in life where

### Symmetric Key cryptosystem

SFWR C03: Computer Networks and Computer Security Mar 8-11 200 Lecturer: Kartik Krishnan Lectures 22-2 Symmetric Key cryptosystem Symmetric encryption, also referred to as conventional encryption or single

### CHAPTER 3 THE NEW MMP CRYPTO SYSTEM. mathematical problems Hidden Root Problem, Discrete Logarithm Problem and

79 CHAPTER 3 THE NEW MMP CRYPTO SYSTEM In this chapter an overview of the new Mixed Mode Paired cipher text Cryptographic System (MMPCS) is given, its three hard mathematical problems are explained, and

### Cryptography and Network Security

Cryptography and Network Security Spring 2012 http://users.abo.fi/ipetre/crypto/ Lecture 7: Public-key cryptography and RSA Ion Petre Department of IT, Åbo Akademi University 1 Some unanswered questions

### FAREY FRACTION BASED VECTOR PROCESSING FOR SECURE DATA TRANSMISSION

FAREY FRACTION BASED VECTOR PROCESSING FOR SECURE DATA TRANSMISSION INTRODUCTION GANESH ESWAR KUMAR. P Dr. M.G.R University, Maduravoyal, Chennai. Email: geswarkumar@gmail.com Every day, millions of people

### CrypTool. www.cryptool.de www.cryptool.com www.cryptool.org. Claudia Eckert / Thorsten Clausius Bernd Esslinger / Jörg Schneider / Henrik Koy

CrypTool A free software program for creating awareness of IT security issues for learning about and obtaining experience of cryptography for demonstrating encryption algorithms and analysis procedures

### The Misuse of RC4 in Microsoft Word and Excel

The Misuse of RC4 in Microsoft Word and Excel Hongjun Wu Institute for Infocomm Research, Singapore hongjun@i2r.a-star.edu.sg Abstract. In this report, we point out a serious security flaw in Microsoft

### Mathematical Model Based Total Security System with Qualitative and Quantitative Data of Human

Int Jr of Mathematics Sciences & Applications Vol3, No1, January-June 2013 Copyright Mind Reader Publications ISSN No: 2230-9888 wwwjournalshubcom Mathematical Model Based Total Security System with Qualitative

### Cryptography: Motivation. Data Structures and Algorithms Cryptography. Secret Writing Methods. Many areas have sensitive information, e.g.

Cryptography: Motivation Many areas have sensitive information, e.g. Data Structures and Algorithms Cryptography Goodrich & Tamassia Sections 3.1.3 & 3.1.4 Introduction Simple Methods Asymmetric methods:

### International Journal of Information Technology, Modeling and Computing (IJITMC) Vol.1, No.3,August 2013

FACTORING CRYPTOSYSTEM MODULI WHEN THE CO-FACTORS DIFFERENCE IS BOUNDED Omar Akchiche 1 and Omar Khadir 2 1,2 Laboratory of Mathematics, Cryptography and Mechanics, Fstm, University of Hassan II Mohammedia-Casablanca,

### Basic Algorithms In Computer Algebra

Basic Algorithms In Computer Algebra Kaiserslautern SS 2011 Prof. Dr. Wolfram Decker 2. Mai 2011 References Cohen, H.: A Course in Computational Algebraic Number Theory. Springer, 1993. Cox, D.; Little,

### Cryptography and Network Security Prof. D. Mukhopadhyay Department of Computer Science and Engineering Indian Institute of Technology, Karagpur

Cryptography and Network Security Prof. D. Mukhopadhyay Department of Computer Science and Engineering Indian Institute of Technology, Karagpur Lecture No. #06 Cryptanalysis of Classical Ciphers (Refer

### Network Security. Security Attacks. Normal flow: Interruption: 孫 宏 民 hmsun@cs.nthu.edu.tw Phone: 03-5742968 國 立 清 華 大 學 資 訊 工 程 系 資 訊 安 全 實 驗 室

Network Security 孫 宏 民 hmsun@cs.nthu.edu.tw Phone: 03-5742968 國 立 清 華 大 學 資 訊 工 程 系 資 訊 安 全 實 驗 室 Security Attacks Normal flow: sender receiver Interruption: Information source Information destination

### Simple Encryption/Decryption Application

Simple Encryption/Decryption Application Majdi Al-qdah Faculty of Information Technology Multimedia University Cyberjaya, 63100, Malaysia majdi.qdah@mmu.edu.my Lin Yi Hui Faculty of Information Technology

### A SOFTWARE COMPARISON OF RSA AND ECC

International Journal Of Computer Science And Applications Vol. 2, No. 1, April / May 29 ISSN: 974-13 A SOFTWARE COMPARISON OF RSA AND ECC Vivek B. Kute Lecturer. CSE Department, SVPCET, Nagpur 9975549138

### Chapter 10 Asymmetric-Key Cryptography

Chapter 10 Asymmetric-Key Cryptography Copyright The McGraw-Hill Companies, Inc. Permission required for reproduction or display. 10.1 Chapter 10 Objectives To distinguish between two cryptosystems: symmetric-key

### AC76/AT76 CRYPTOGRAPHY & NETWORK SECURITY DEC 2014

Q.2a. Define Virus. What are the four phases of Viruses? In addition, list out the types of Viruses. A virus is a piece of software that can infect other programs by modifying them; the modification includes

### Cryptography: Authentication, Blind Signatures, and Digital Cash

Cryptography: Authentication, Blind Signatures, and Digital Cash Rebecca Bellovin 1 Introduction One of the most exciting ideas in cryptography in the past few decades, with the widest array of applications,

### Cryptography and Network Security Prof. D. Mukhopadhyay Department of Computer Science and Engineering Indian Institute of Technology, Kharagpur

Cryptography and Network Security Prof. D. Mukhopadhyay Department of Computer Science and Engineering Indian Institute of Technology, Kharagpur Module No. #01 Lecture No. #10 Symmetric Key Ciphers (Refer

### CS 758: Cryptography / Network Security

CS 758: Cryptography / Network Security offered in the Fall Semester, 2003, by Doug Stinson my office: DC 3122 my email address: dstinson@uwaterloo.ca my web page: http://cacr.math.uwaterloo.ca/~dstinson/index.html

### Cryptography. Course 2: attacks against RSA. Jean-Sébastien Coron. September 26, Université du Luxembourg

Course 2: attacks against RSA Université du Luxembourg September 26, 2010 Attacks against RSA Factoring Equivalence between factoring and breaking RSA? Mathematical attacks Attacks against plain RSA encryption

### PUBLIC KEY ENCRYPTION

PUBLIC KEY ENCRYPTION http://www.tutorialspoint.com/cryptography/public_key_encryption.htm Copyright tutorialspoint.com Public Key Cryptography Unlike symmetric key cryptography, we do not find historical

### Applied Cryptology. Ed Crowley

Applied Cryptology Ed Crowley 1 Basics Topics Basic Services and Operations Symmetric Cryptography Encryption and Symmetric Algorithms Asymmetric Cryptography Authentication, Nonrepudiation, and Asymmetric

### Error oracle attacks and CBC encryption. Chris Mitchell ISG, RHUL http://www.isg.rhul.ac.uk/~cjm

Error oracle attacks and CBC encryption Chris Mitchell ISG, RHUL http://www.isg.rhul.ac.uk/~cjm Agenda 1. Introduction 2. CBC mode 3. Error oracles 4. Example 1 5. Example 2 6. Example 3 7. Stream ciphers

### Cryptography and Security

Cunsheng DING Version 3 Lecture 17: Electronic Mail Security Outline of this Lecture 1. Email security issues. 2. Detailed introduction of PGP. Page 1 Version 3 About Electronic Mail 1. In virtually all

### AStudyofEncryptionAlgorithmsAESDESandRSAforSecurity

Global Journal of Computer Science and Technology Network, Web & Security Volume 13 Issue 15 Version 1.0 Year 2013 Type: Double Blind Peer Reviewed International Research Journal Publisher: Global Journals

### The RSA Algorithm: A Mathematical History of the Ubiquitous Cryptological Algorithm

The RSA Algorithm: A Mathematical History of the Ubiquitous Cryptological Algorithm Maria D. Kelly December 7, 2009 Abstract The RSA algorithm, developed in 1977 by Rivest, Shamir, and Adlemen, is an algorithm

### Applied Cryptography Public Key Algorithms

Applied Cryptography Public Key Algorithms Sape J. Mullender Huygens Systems Research Laboratory Universiteit Twente Enschede 1 Public Key Cryptography Independently invented by Whitfield Diffie & Martin

### Introduction to Symmetric and Asymmetric Cryptography

Introduction to Symmetric and Asymmetric Cryptography Ali E. Abdallah Birmingham CityUniversity Email: Ali.Abdallah@bcu.ac.uk Lectures are part of the project: ConSoLiDatE Multi-disciplinary Cooperation

### CIS 5371 Cryptography. 8. Encryption --

CIS 5371 Cryptography p y 8. Encryption -- Asymmetric Techniques Textbook encryption algorithms In this chapter, security (confidentiality) is considered in the following sense: All-or-nothing secrecy.

### A Chosen Ciphertext Attack on RSA Optimal Asymmetric Encryption Padding (OAEP) as Standardized in PKCS #1 v2.0

A Chosen Ciphertext Attack on RSA Optimal Asymmetric Encryption Padding (OAEP) as Standardized in PKCS #1 v2.0 James Manger Telstra Research Laboratories, Level 7, 242 Exhibition Street, Melbourne 3000,

### Cryptographic hash functions and MACs Solved Exercises for Cryptographic Hash Functions and MACs

Cryptographic hash functions and MACs Solved Exercises for Cryptographic Hash Functions and MACs Enes Pasalic University of Primorska Koper, 2014 Contents 1 Preface 3 2 Problems 4 2 1 Preface This is a

### Network Security. Security. Security Services. Crytographic algorithms. privacy authenticity Message integrity. Public key (RSA) Message digest (MD5)

Network Security Security Crytographic algorithms Security Services Secret key (DES) Public key (RSA) Message digest (MD5) privacy authenticity Message integrity Secret Key Encryption Plain text Plain

### Network Security. Chapter 6 Random Number Generation. Prof. Dr.-Ing. Georg Carle

Network Security Chapter 6 Random Number Generation Prof. Dr.-Ing. Georg Carle Chair for Computer Networks & Internet Wilhelm-Schickard-Institute for Computer Science University of Tübingen http://net.informatik.uni-tuebingen.de/

### 1.2 Using the GPG Gen key Command

Creating Your Personal Key Pair GPG uses public key cryptography for encrypting and signing messages. Public key cryptography involves your public key which is distributed to the public and is used to

### LUC: A New Public Key System

LUC: A New Public Key System Peter J. Smith a and Michael J. J. Lennon b a LUC Partners, Auckland UniServices Ltd, The University of Auckland, Private Bag 92019, Auckland, New Zealand. b Department of

### Common Pitfalls in Cryptography for Software Developers. OWASP AppSec Israel July 2006. The OWASP Foundation http://www.owasp.org/

Common Pitfalls in Cryptography for Software Developers OWASP AppSec Israel July 2006 Shay Zalalichin, CISSP AppSec Division Manager, Comsec Consulting shayz@comsecglobal.com Copyright 2006 - The OWASP

### A Factoring and Discrete Logarithm based Cryptosystem

Int. J. Contemp. Math. Sciences, Vol. 8, 2013, no. 11, 511-517 HIKARI Ltd, www.m-hikari.com A Factoring and Discrete Logarithm based Cryptosystem Abdoul Aziz Ciss and Ahmed Youssef Ecole doctorale de Mathematiques

### Cryptography and Network Security

Cryptography and Network Security Xiang-Yang Li Introduction The art of war teaches us not on the likelihood of the enemy s not coming, but on our own readiness to receive him; not on the chance of his

### Stream Ciphers. Example of Stream Decryption. Example of Stream Encryption. Real Cipher Streams. Terminology. Introduction to Modern Cryptography

Introduction to Modern Cryptography Lecture 2 Symmetric Encryption: Stream & Block Ciphers Stream Ciphers Start with a secret key ( seed ) Generate a keying stream i-th bit/byte of keying stream is a function

### Modular arithmetic. x ymodn if x = y +mn for some integer m. p. 1/??

p. 1/?? Modular arithmetic Much of modern number theory, and many practical problems (including problems in cryptography and computer science), are concerned with modular arithmetic. While this is probably

### ELECTRONIC COMMERCE OBJECTIVE QUESTIONS

MODULE 13 ELECTRONIC COMMERCE OBJECTIVE QUESTIONS There are 4 alternative answers to each question. One of them is correct. Pick the correct answer. Do not guess. A key is given at the end of the module

### Enhancing Advanced Encryption Standard S-Box Generation Based on Round Key

Enhancing Advanced Encryption Standard S-Box Generation Based on Round Key Julia Juremi Ramlan Mahmod Salasiah Sulaiman Jazrin Ramli Faculty of Computer Science and Information Technology, Universiti Putra

### Computer Networks 1 (Mạng Máy Tính 1) Lectured by: Dr. Phạm Trần Vũ MEng. Nguyễn CaoĐạt

Computer Networks 1 (Mạng Máy Tính 1) Lectured by: Dr. Phạm Trần Vũ MEng. Nguyễn CaoĐạt 1 Lecture 11: Network Security Reference: Chapter 8 - Computer Networks, Andrew S. Tanenbaum, 4th Edition, Prentice

### Network Security [2] Plain text Encryption algorithm Public and private key pair Cipher text Decryption algorithm. See next slide

Network Security [2] Public Key Encryption Also used in message authentication & key distribution Based on mathematical algorithms, not only on operations over bit patterns (as conventional) => much overhead

### Lecture Note 5 PUBLIC-KEY CRYPTOGRAPHY. Sourav Mukhopadhyay

Lecture Note 5 PUBLIC-KEY CRYPTOGRAPHY Sourav Mukhopadhyay Cryptography and Network Security - MA61027 Modern/Public-key cryptography started in 1976 with the publication of the following paper. W. Diffie

### The Mathematics of RSA

The Mathematics of RSA Dimitri Papaioannou May 24, 2007 1 Introduction Cryptographic systems come in two flavors. Symmetric or Private key encryption and Asymmetric or Public key encryption. Strictly speaking,

### Network Security CS 5490/6490 Fall 2015 Lecture Notes 8/26/2015

Network Security CS 5490/6490 Fall 2015 Lecture Notes 8/26/2015 Chapter 2: Introduction to Cryptography What is cryptography? It is a process/art of mangling information in such a way so as to make it

### Network Security. Chapter 6 Random Number Generation

Network Security Chapter 6 Random Number Generation 1 Tasks of Key Management (1)! Generation:! It is crucial to security, that keys are generated with a truly random or at least a pseudo-random generation

### Princeton University Computer Science COS 432: Information Security (Fall 2013)

Princeton University Computer Science COS 432: Information Security (Fall 2013) This test has 13 questions worth a total of 50 points. That s a lot of questions. Work through the ones you re comfortable