检索结果-内蒙古大学图书馆

Secure cryptographic functions via virtualization-based outsourced computing

CONCURRENCY AND COMPUTATION-PRACTICE & EXPERIENCE 2016年第11期28卷 3149-3163页

作者： Qiang, Weizhong Zhang, Kang Dai, Weiqi Jin, Hai Huazhong Univ Sci & Technol Sch Comp Sci & Technol Serv Comp Technol & Syst Lab Wuhan 430074 Peoples R China Huazhong Univ Sci & Technol Sch Comp Sci & Technol Cluster & Grid Comp Lab Wuhan 430074 Peoples R China

cryptographic functions, such as encryption/decryption libraries, are common and important tools for applications to enhance confidentiality of the data. However, these functions could be compromised by subtle attacks launched by untrusted operating system or other applications, and sensitive keys or cryptographic procedures could then be compromised. In this paper, based on virtualization technology, we propose a novel approach that outsources the cryptographic functions in one virtual machine (VM) into another dedicated VM, so that sensitive keys and the cryptographic procedures are only contained by this VM with specific purpose. We also propose a prototype, called cryptographic function assurance (CFA), to enhance the security of cryptographic functions. Taking OpenSSL as an example, CFA allows those applications that use OpenSSL library to transparently utilize CFA to protect the cryptographic functions. We present the detailed implementation, as well as the security analysis of CFA. We also give the performance evaluation for OpenSSL's interfaces and Apache httpd, to show the overhead caused by the integration of CFA. Copyright (C) 2015 John Wiley & Sons, Ltd.

关键词： cryptographic functions virtualization untrusted OS outsourced computing

来源：评论

学校读者我要写书评

暂无评论

Partitioned security processor architecture on FPGA platform

引用

IET COMPUTERS AND DIGITAL TECHNIQUES 2018年第5期12卷 216-226页

作者： Paul, Rourab Shukla, Sandeep Indian Inst Technol Kanpur Comp Sci Engn Dept Kanpur Uttar Pradesh India

Internet protocol security (IPSec), secure sockets layer (SSL)/transport layer security (TLS) and other security protocols necessitate high throughput hardware implementation of cryptographic functions. In recent literature, cryptographic functions implemented in software, application specific integrated circuit (ASIC) and field programmable gate array (FPGA). They are not necessarily optimized for throughput. Due to the various side-channel based attacks on cache and memory, and various malware based exfiltration of security keys and other sensitive information, cryptographic enclave processors are implemented which isolates the cryptographically sensitive information like keys. We propose a partitioned enclave architecture targeting IPSec, TLS and SSL where the partitioned area ensures that the processor data-path is completely isolated from the secret-key memory. The security processor consists of a Trivium random number generator, Rivest-Shamir-Adleman (RSA), advanced encryption standard (AES) and KECCAK cryptos. We implement three different optimized KECCAK architectures. The processing element (PE) handles all communication interfaces, data paths, and control hazards of network security processor. The memory of KECCAK and AES communication is done via a direct memory access controller to reduce the PE overhead. The whole system is demonstrated by FPGA implementation using Vivado 2015.2 on Artix-7 (XC7A100T, CSG324). The performances of the implemented KECCAKs are better in terms of security, throughput and resource than the existing literature.

关键词： field programmable gate arrays cryptographic protocols reconfigurable architectures coprocessors application specific integrated circuits cache storage invasive software partitioned security processor architecture FPGA platform Internet protocol security IPsec secure sockets layer transport layer security TLS network security protocols cryptographic functions application specific integrated circuit ASIC field programmable gate array FPGA side channel based attacks malware based exfiltration sensitive information security keys cryptographic enclave processors processor data-path partitioned enclave architecture SSL security protocols processor data path secret key memory Trivium random number generator RSA advanced encryption standard KECCAK crypto blocks optimised architectures KECCAK coprocessor processing element communication interfaces control signal hazards AES core communication direct memory access controller PE overhead reduction Vivado 2015 2 Artix-7 FPGA platform

来源：评论

学校读者我要写书评

暂无评论

Crypto-based algorithms for secured medical image transmission

引用

IET INFORMATION SECURITY 2015年第6期9卷 365-373页

作者： Al-Haj, Ali Abandah, Gheith Hussein, Noor Princess Sumaya Univ Comp Engn Amman 11941 Jordan Univ Jordan Comp Engn Amman Jordan Balqa Appl Univ Comp Engn Salt Jordan

Booming telemedicine applications makes it deemed necessary to provide security services for such applications. The algorithms proposed in this field can be grouped into three classes: watermarking-based algorithms, crypto-based algorithms and hybrid algorithms. In this study, the authors propose two crypto-based algorithms capable of providing confidentiality, authenticity and integrity services to medical images exchanged in telemedicine applications. Strong cryptographic functions with internally generated symmetric keys and hash codes are used. The advanced encryption standard-Galois counter mode is used with the whirlpool hash function to provide confidentiality and authenticity, and the elliptic curve digital signature algorithm is used to provide authenticity and integrity. The proposed algorithms are based on the digital imaging and communication in medicine (DICOM) standard;however, unlike the standard, the algorithms provide confidentiality, authenticity and integrity for the header data, as well as for the pixel data of the DICOM images. Effectiveness of the proposed algorithms is evaluated and demonstrated through extensive experimentation using a benchmark set of DICOM images.

关键词： public key cryptography visual communication telemedicine medical image processing image watermarking crypto-based algorithm secured medical image transmission telemedicine applications watermarking-based algorithm hybrid algorithm confidentiality services authenticity services integrity services cryptographic functions symmetric keys hash codes advanced encryption standard-Galois counter mode whirlpool hash function elliptic curve digital signature algorithm digital imaging and communication in medicine standard DICOM standard header data pixel data

来源：评论

学校读者我要写书评

暂无评论

Small low-depth circuits for cryptographic applications

引用

CRYPTOGRAPHY AND COMMUNICATIONS-DISCRETE-STRUCTURES BOOLEAN functions AND SEQUENCES 2019年第1期11卷 109-127页

作者： Boyar, Joan Find, Magnus Gausdal Peralta, Rene Univ Southern Denmark Dept Math & Comp Sci Odense Denmark NIST Informat Technol Lab Gaithersburg MD 20899 USA

We present techniques to obtain small circuits which also have low depth. The techniques apply to typical cryptographic functions, as these are often specified over the field GF(2), and they produce circuits containing only AND, XOR and XNOR gates. The emphasis is on the linear components (those portions containing no AND gates). A new heuristic, DCLO (for depth-constrained linear optimization), is used to create small linear circuits given depth constraints. DCLO is repeatedly used in a See-Saw method, alternating between optimizing the upper linear component and the lower linear component. The depth constraints specify both the depth at which each input arrives and restrictions on the depth for each output. We apply our techniques to cryptographic functions, obtaining new results for the S-Box of the Advanced Encryption Standard, for multiplication of binary polynomials, and for multiplication in finite fields. Additionally, we constructed a 16-bit S-Box using inversion in GF(2(16)) which may be significantly smaller than alternatives.

关键词： Circuit size Circuit depth cryptographic functions Boolean functions See-saw method Depth-constrained circuit optimization

来源：评论

学校读者我要写书评

暂无评论

Decentralized and Permission-Aware Blockchain for Certificate Security: An Exploratory Analysis 2

Decentralized and Permission-Aware Blockchain for Certificat...

引用

2nd International Conference on Sustainable Computing and Smart Systems (ICSCSS)

作者： Gupta, Neha Negi, Shweta Rawat, Khyaty Rawat, Megha Manav Rachna Int Inst Res & Studies Sch Comp Applicat Faridabad Haryana India

ISBN: (纸本)9798350391558;9798350379990

Certificate authenticity and validity are becoming increasingly important in various fields, such as education, professional licensing, and various types of documentation. However, secure distributed systems are subject to hacker attacks and data tampering leading to failure of whole system. The paper presents the results of a detailed survey obtained from various stakeholders of certificate management to emphasize the need of decentralized, immutable, secure, and transparent permissioned blockchain network with consortium consensus to ensure that the authorized issuers can issue certificates directly on the network. Confidentiality hashing algorithms and digital signature services provide input data integrity, endorsement, and non-repudiation. The paper discusses the need of a decentralized system that can be designed using Hyperledger Fabric. The proposed system is expected to be safe for certificate management, reducing the risk of centralized systems by using decentralization and cryptographic primitives.

关键词： Certificate Security Blockchain Decentralized systems cryptographic functions Verification

来源：评论

学校读者我要写书评

暂无评论

Near Butson-Hadamard Matrices and Nonlinear Boolean functions 1

引用

1st International Conference on Number-Theoretic Methods in Cryptology (NuTMiC)

作者： Kurt, Sibel Yayla, Oguz Hacettepe Univ Beytepe Dept Math TR-06800 Ankara Turkey

ISBN: (数字)9783319766201

ISBN: (纸本)9783319766201;9783319766195

A Hadamard matrix is a square matrix with entries +/- 1 whose rows are orthogonal to each other. Hadamard matrices appear in various fields including cryptography, coding theory, combinatorics etc. This study takes an interest in gamma near Butson-Hadamard matrix that is a generalization of Hadamard matrices for gamma is an element of R boolean AND Z[zeta(m)]. These matrices are examined in this study. In particular, the unsolvability of certain equations is studied in the case of cyclotomic number fields. Winter-of et al. considered the equations for gamma is an element of Z, and by the authors for gamma is an element of R boolean AND Z[zeta(m)]. In this study, we obtain another method for checking the nonexistence cases of these equations, which uses the tool of norm from algebraic number theory. Then, the direct applications of these results to gamma near Butson-Hadamard matrices are obtained. In the second part of this study, the connection between nonlinear Boolean cryptographic functions and gamma near Butson-Hadamard matrices having small vertical bar 7 vertical bar is established. In addition, a computer search is done for checking the cases which are excluded by our results and for obtaining new examples of existence parameters.

关键词： Butson-Hadamard matrices Cyclotomic fields cryptographic functions

来源：评论

学校读者我要写书评

暂无评论

A Novel Authentication Framework for Hadoop

A Novel Authentication Framework for Hadoop

引用

International Conference on Artificial Intelligence and Evolutionary Algorithms in Engineering Systems (ICAEES)

作者： Rahul, P. K. Kumar, T. Gireesh Amrita Vishwa Vidyapeetham Tifac Core Cyber Secur Coimbatore Tamil Nadu India

ISBN: (纸本)9788132221265;9788132221258

Hadoop is an open-source file system used to process and carry Big data which is out of the reach of normal softwares to be work on. This paper analyses the data security issues in Hadoop and proposes a new authentication framework for clients. The framework uses cryptographic functions such as public key cryptography, private key cryptography, hashing functions, and random number generator. This framework will define a new key for each client and authenticate all clients and services using this key. The authentication agent offers user data protection, way for privilege separations, and basic security needs for data stored in Hadoop file system.

关键词： Hadoop distributed file system Authentication protocols Unix cryptographic functions

来源：评论

学校读者我要写书评

暂无评论

Design and Analysis of an Improved BitMessage Anti-spam Mechanism

Design and Analysis of an Improved BitMessage Anti-spam Mech...

引用

IEEE International Conference on Peer to Peer Computing (P2P)

作者： Schaub, Alexander Rossi, Dario Ecole Polytech F-91128 Palaiseau France Telecom ParisTech F-75013 Paris France

ISBN: (纸本)9781509003006

The BitMessage protocol offers privacy to its anonymous users. It is a completely decentralized messaging system, enabling users to exchange messages preventing accidental eavesdropping -a nice features in the Post-Snowden Internet Era. Not only messages are sent to every node on the network (making it impossible to understand the intended recipient), but their content is encrypted with the intended recipient public key (so that s/he only can decipher it). As these two properties combined might facilitate spamming, a proof-of-work (PoW) mechanism has been designed to mitigate this threat: only messages exhibiting properties of the PoW are forwarded on the network: since PoW is based on computationally heavy cryptographic functions, this slows down the rate at which spammers can introduce unsolicited messages in the network on the one hand, but also makes it harder to send legitimate messages for regular users on the other hand. In this paper, we (i) carry on an analysis of the current PoW mechanism, (ii) propose a very simple, yet very effective, generalization of the formula that decouples spammers vs legitimate users penalty showing that (iii) at the optimum, our proposal halves the harm spammers can do, avoiding by definition any impact for legitimate users.

关键词： cryptography unsolicited e-mail BitMessage anti-spam mechanism PoW mechanism cryptographic functions proof-of-work mechanism Cryptography Online banking Peer-to-peer computing Privacy Proposals Protocols Unsolicited electronic mail Unsolicited electronic mail cryptography Peer to peer computing Privacy protocols Messages cryptographic function spammer Consumers

来源：评论

学校读者我要写书评

暂无评论

Model-Counting Approaches for Nonlinear Numerical Constraints 1

引用

9th International NASA Formal Methods (NFM) Symposium

作者： Borges, Mateus Phan, Quoc-Sang Filieri, Antonio Pasareanu, Corina S. Imperial Coll London London England Carnegie Mellon Univ Silicon Valley Mountain View CA USA NASA Ames Mountain View CA USA

ISBN: (数字)9783319572888

ISBN: (纸本)9783319572871;9783319572888

Model counting is of central importance in quantitative reasoning about systems. Examples include computing the probability that a system successfully accomplishes its task without errors, and measuring the number of bits leaked by a system to an adversary in Shannon entropy. Most previous work in those areas demonstrated their analysis on programs with linear constraints, in which cases model counting is polynomial time. Model counting for nonlinear constraints is notoriously hard, and thus programs with nonlinear constraints are not well-studied. This paper surveys state-of-the-art techniques and tools for model counting with respect to SMT constraints, modulo the bitvector theory, since this theory is decidable, and it can express nonlinear constraints that arise from the analysis of computer programs. We integrate these techniques within the Symbolic Pathfinder platform and evaluate them on difficult nonlinear constraints generated from the analysis of cryptographic functions.

关键词： Model counting modulo theories Bitvector arithmetic Nonlinear constraints cryptographic functions

来源：评论

学校读者我要写书评

暂无评论

Enhancing Blockchain Layer in Smart Grid Edge IoT Devices to Improve Data Security 4

Enhancing Blockchain Layer in Smart Grid Edge IoT Devices to...

引用

4th International Conference on Emerging Trends in Networks and Computer Communications, ETNCC 2024

作者： Iindombo, Sakaria Chitauro, Mecy Namibia University of Science and Technology Department of Cyber Security Windhoek Namibia

ISBN: (纸本)9798350353266

With the proliferation of Internet of Things (IoT) devices in smart grid edge computing environments, ensuring robust data security has become paramount. This research explores an enhanced blockchain layer to strengthen edge IoT devices data security using lightweight security protocols. This study evaluates the efficacy of the blockchain layer in bolstering data security, focusing on its ability to mitigate risks such as unauthorized access, availability, and data breaches. Through empirical analysis and experimentation, the performance and effectiveness of the blockchain-based security measures are assessed, considering factors such as compatibility, scalability, and performance. In order to obtain a deeper understanding of the subject matter, a qualitative method is used to gather, organize, and evaluate available data from various relevant sources. The findings provide valuable insights into the practical implementation and impact of blockchain technology in securing data within smart grid edge computing environments, ultimately contributing to the advancement of secure and reliable energy infrastructures. © 2024 IEEE.

关键词： blockchain cryptographic functions IoT devices security and privacy Smart grid

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：