基于可调分组的认证加密实现方案

doi:10.19678/j.issn.1000-3428.0054421

计算机工程 ›› 2020, Vol. 46 ›› Issue (6): 144-148. doi: 10.19678/j.issn.1000-3428.0054421

基于可调分组的认证加密实现方案

赵福祥

西安外事学院工学院, 西安 710077

收稿日期:2019-03-28 修回日期:2019-06-19 发布日期:2019-07-13
作者简介:赵福祥(1964-),男,副教授、博士,主研方向为密码学、网络与信息安全。
基金资助:
陕西省教育厅专项科学研究计划（17JK1106）；陕西省自然科学基础研究计划（2014JM8323）。

Authenticated Encryption Implementation Scheme Based on Tweakable Grouping

ZHAO Fuxiang

College of Engineering, Xi'an International University, Xi'an 710077, China

Received:2019-03-28 Revised:2019-06-19 Published:2019-07-13

摘要/Abstract

摘要： 针对认证加密算法在实际应用中难以生成选择明文攻击的不可区分性问题，结合硬件算法平台，应用数据包标志序号、动态可调密钥计数器等提出一种改进的可调认证加密方案。通过增加小规模硬件部件换取可调因子与加密的并行计算，支持受资源限制嵌入式设备应用，可实现算法在网络中的平稳运行。实验结果表明，该方案通过并行计算可缩短系统的运行时间，提高系统的整体运行效率。

关键词: 可调加密模式, 硬件算法, 选择明文攻击, 嵌入式安全, 物联网

Abstract: The authentication encryption algorithm is difficult to generate the indistinguishability of Chosen Plaintext Attack(CPA) in practical application.Therefore,an improved encryption scheme of adjustable authentication is proposed by means of hardware algorithm platform,sign sequence number of application data packet and dynamic adjustable key counter.The algorithm can run smoothly on the network by adding small hardware components in exchange for the parallel computation of adjustable factor and encryption,which supports the application of resource-limited embedded devices.Experimental results show that this method can shorten the whole runtime of the system and improve the overall running efficiency.

Key words: tweakable enciphering mode, hardware algorithm, Chosen Plaintext Attack(CPA), embedded security, Internet of Things(IoT)

中图分类号:

TP393.08

赵福祥. 基于可调分组的认证加密实现方案[J]. 计算机工程, 2020, 46(6): 144-148.

ZHAO Fuxiang. Authenticated Encryption Implementation Scheme Based on Tweakable Grouping[J]. Computer Engineering, 2020, 46(6): 144-148.

https://www.ecice06.com/CN/Y2020/V46/I6/144

图/表 4

参考文献

[1] MANIIFAVAS C,HATZIVASILIS G,RANTOS K.Lightweight cryptography for embedded systems——a comparative analysis[C]//Proceedings of International Workshop on Data Privacy Management and Autonomous Spontaneous Security.Berlin,Germany:Springer,2013:333-349.
[2] RALPY A,ROBIN A.Software benchmarking of the 2nd round CAESAR candidates[EB/OL].[2019-02-21].http://eprint.iacr.org/2016/740.
[3] HOMSIRIKAMOL E,DIEHL D,FEROZPURI A,et al.CAESAR hardware API[EB/OL].[2019-02-21].http://eprint.iacr.org/2016/626.
[4] GRANGER R,JOVANOVIC P.Improved masking for tweakable blockciphers with applications to authenticated encryption[C]//Proceedings of Advances in Cryptology-EUROCRYPT'16.Berlin,Germany:Springer,2016:263-293.
[5] ZHAO Fuxiang.Tweakable enciphering implementation scheme based on hardware support[J].Computer Engineering,2015,41(10),144-147,154.(in Chinese)赵福祥.基于硬件支持的可调加密实现方案[J].计算机工程,2015,41(10),144-147,154.
[6] KATZ J,LINDELL Y.Modern cryptography:principle and protocols[M].REN Wei,Translation.Beijing:National Defense Industry Press,2011:50-51.(in Chinese) KATZ J,LINDELL Y.现代密码学——原理与协议[M].任伟,译.北京:国防工业出版社,2011:50-51.
[7] MAO Wenbo.Modern cryptography:theory and practice[M].WANG Jilin,WU Qianhong,Translation.Beijing:Electronic Industry Press,2004:118-121.(in Chinese)毛文波.现代密码学——理论与实践[M].王继林,伍前红,译.北京:电子工业出版社,2004:118-121.
[8] AUAMSSON J P,HENZEN L,MEIER W,et al.Quark:a lightweight hash[J].Journal of Cryptology,2013,26(2):313-339.
[9] BERTONI G,DAEMEN J,PEETERS M,et al.Keccak implementation overview,V3.2[EB/OL].[2019-03-21].http://keccak.noekeon.org.
[10] ANDREEVA E,BILGIN B,BOGDANOV A,et al.APE:authenticated permutation-based encryption for lightweight cryptography[C]//Proceedings of FSE'14.Berlin,Germany:Springer,2014:168-186.
[11] MENNINK B.XPX:generalized tweakable even-mansour with improved security guarantees[C]//Proceedings of Advances in Cryptology-EUROCRYPT'16.Berlin,Germany:Springer,2016:64-94.
[12] BERTONI G,DAEMENL J,PEETERS M,et al.Permutation-based encryption,authentication and authenticated encryption[EB/OL].[2019-03-21].http://www.hyperelliptic.org/djb/diac/record.pdf.
[13] PEYRIN T,SEURIN Y.Counter-in-tweak:autenticated encryption modes for tweakable block cipher[C]//Proceedings of Advances in Cryptology-EUROCRYPT'16.Berlin,Germany:Springer,2016:33-63.
[14] ANDREEVA E,BOGDANOV A,LUYKX A,et al.Parallelizable and authenticated online ciphers[C]//Proceedings of Advances in Cryptology-EUROCRYPT'13.Berlin,Germany:Springer,2013:424-443.
[15] AOKI K,YASUDA K.The security of the OCB mode of operation without the SPRP assumption[C]//Proceedings of Advances in Cryptology-EUROCRYPT'13.Berlin,Germany:Springer,2013:202-220.
[16] DATTA N,NANDI M.ELmE:a misuse resistant parallel authenticated encryption[C]//Proceedings of ACISP'14.Berlin,Germany:Springer,2014:306-321.
[17] ZHANG Pei,ZHANG Wenying.Related-key impossible differential attack of QARMA algorithm[J].Computer Engineering,2019,45(1):91-95.(in Chinese)张佩,张文英.QARMA算法的相关密钥不可能差分攻击[J].计算机工程,2019,45(1):91-95.
[18] YANG Xiaodong,GAO Guojuan,ZHOU Qixu,et al.E-government data security exchange scheme based on proxy re-signature[J].Computer Engineering,2017,43(2):183-188.(in Chinese)杨小东,高国娟,周其旭,等.基于代理重签名的电子政务数据安全交换方案[J].计算机工程,2017,43(2):183-188.
[19] RODR L,FLORES G,MORALES-SANDOVAL M,et al.Compact FPGA hardware architecture for public key encryption in embedded devices[J].PLoS ONE,2018,13(1):190-193.
[20] NASROLLAHPOUR M,GHOLAMREZANEZHAD M,KAMARZARRIN M,et al.A compact and efficient implementation of modified MMF2 encryption on FPGA[J].Canadian Journal of Electrical and Computer Engineering,2018,41(1):3-7.

选择文件类型/文献管理软件名称

选择包含的内容

基于可调分组的认证加密实现方案

Authenticated Encryption Implementation Scheme Based on Tweakable Grouping

RichHTML

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

图/表 4

参考文献

相关文章 15

编辑推荐

Metrics

本文评价

[1]	黄亮, 邹鹏, 曹菁菁, 胡健, 颜泽锌, 黄小蝶. 基于虚拟网关的交通基础设施监测点位数据接入方法[J]. 计算机工程, 2024, 50(4): 50-59.
[2]	黄亮, 邹鹏, 曹菁菁, 胡健, 颜泽锌, 黄小蝶. 基于虚拟网关的交通基础设施监测点位数据接入方法[J]. 计算机工程, 2024, 50(4): 50-59.
[3]	陈纪成, 包子健, 罗敏, 何德彪. 一种面向工业物联网的远程安全指令控制方案[J]. 计算机工程, 2024, 50(3): 28-35.
[4]	蔡梓越, 谭北海, 余荣, 黄旭民, 王思明. 面向6G物联网设备协同的区块链动态分片[J]. 计算机工程, 2024, 50(1): 50-59.
[5]	余长宏, 陆雅, 王海鑫, 高明. 基于滑动时间窗的物联网设备流量分类算法[J]. 计算机工程, 2023, 49(7): 259-268.
[6]	潘雪, 袁凌云, 黄敏敏. 基于区块链和域信任度的物联网跨域信任评估模型[J]. 计算机工程, 2023, 49(5): 181-190.
[7]	田秀霞, 杨明夷. 家庭物联网中基于智能合约的访问控制机制[J]. 计算机工程, 2023, 49(3): 18-28.
[8]	顾智敏, 王梓莹, 郭静, 郭雅娟, 冯景瑜. 雾化零信任组件的5G电力失陷终端威胁检测[J]. 计算机工程, 2023, 49(2): 161-168.
[9]	苏瑞国, 阳建, 秦继伟, 武晓雄, 贾振红. 基于物联网区块链的轻量级共识算法研究[J]. 计算机工程, 2023, 49(2): 175-180.
[10]	李亚国, 李冠良, 张凯, 晋涛. 基于人工智能与边缘代理的物联网框架设计[J]. 计算机工程, 2023, 49(10): 313-320.
[11]	丁庆丰, 李晋国. 一种物联网环境下的分布式异常流量检测方案[J]. 计算机工程, 2022, 48(8): 152-159.
[12]	刘晶, 朱炳旭, 梁佳杭, 任女尔, 季海鹏. 基于主侧链合作的区块链访问控制策略[J]. 计算机工程, 2022, 48(3): 10-16,22.
[13]	黄志清, 解鲁阳, 张严心, 尹泽明. 基于区块链的物联网数据服务信誉评估模型[J]. 计算机工程, 2022, 48(1): 33-42.
[14]	李忠成, 解滨, 张文祥. 基于多元分层感知的移动物联网区域分割算法[J]. 计算机工程, 2021, 47(9): 51-58.
[15]	朱新兵, 李清宝, 张平, 陈志锋, 顾艳阳. 面向新攻击面的物联网终端固件安全威胁模型[J]. 计算机工程, 2021, 47(7): 126-134.

模态框（Modal）标题

选择文件类型/文献管理软件名称

选择包含的内容

基于可调分组的认证加密实现方案

Authenticated Encryption Implementation Scheme Based on Tweakable Grouping

RichHTML

PDF

可视化

被引次数

摘要/Abstract

引用本文

使用本文

图/表 4

参考文献

相关文章 15

编辑推荐

Metrics

本文评价