DOCSLIB.ORG

Choosing Tokenization Or Encryption

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Choosing Tokenization Or Encryption May 2019 Volume 17 Issue 5 Trends in Security Executive Leadership and the Rise of the vCISO The Mathematics behind RSA Encryption Industrial Cybersecurity Enhancements NIST Cryptographic Algorithm and Module Validation Programs: Validating New Encryption Schemes The Python Programming Language Choosing Tokenization or Encryption CRYPTOGRAPHY Table of Contents DEVELOPING AND CONNECTING CYBERSECURITY LEADERS GLOBALLY Feature 14 Choosing Tokenization or Encryption By Jeff Stapleton – ISSA member, St. Louis Chapter This article discusses the similarities and differences between two popular cryptographic techniques: tokenization and encryption. When making the decision between protection methods, there are several things to consider, including how the data is used and the key management life cycle. 21 Trends in Security Executive Leadership and 37 NIST Cryptographic Algorithm and Module the Rise of the vCISO Validation Programs: Validating New By Donna Gallaher – ISSA member, Metro Atlanta Encryption Schemes Chapter By Eric Lankford – ISSA member, Fort Worth Chapter This article discusses the author’s personal experience The author provides a simplified overview of how and observations with starting her own business as a crytographic algorithms and modules are validated virtual CISO. according to the Cryptographic Algorithm Validation 26 The Mathematics behind RSA Encryption Program and Cryptographic Module Validation Program. By William C. Barge – ISSA member, Northeast Indiana Chapter 41 The Python Programming Language The author describes the mathematics behind the RSA By Constantinos Doskas – ISSA Senior Member, cryptosystem and a coding technique that can be used Northern Virginia Chapter to decrease the chance of the calculation resulting in an This article continues the discussion about the basic abnormal end. building blocks of the Python programming language. 31 Industrial Cybersecurity Enhancements It is the second article in the Python training series. The main topic of this article is file input/output procedures By Cevn Vibert – ISSA member, UK Chapter and date processing. This article highlights alerts and advice for end users of automation and control systems (ICS/OT/IACS/ SCADA) and selected advisory notes for practitioners of industrial cyber-physical security. Also in this Issue 3 From the President 5 Sabett’s Brief Cryptography As a Weapon 6 Women in Cybersecurity A Historical 180 for Women in Technology 7 Crypto Corner Another Quantum Breakthrough 8 Open Forum Security Engineering and Integration Principles and Myths 9 Cryptic Curmudgeon Quantum and Crypto ©2019 Information Systems Security Association, Inc. (ISSA) 10 Security in the News The ISSA Journal (1949-0550) is published monthly by 11 Association News Information Systems Security Association 36 Career Center 1964 Gallows Road, Suite 310, Vienna, VA 22182 +1 (703) 382-8205 (local/international) 2 – ISSA Journal | May 2019 From the President Hello, ISSA Members and Friends Candy Alexander, International President can hardly believe it has only been six months since I began in my role as president of our association! Like most of life’s journeys, some days it seems like it has been a long six months, and other days it seems like only yesterday. Either way, we are making some great progress I– together! A lot of work has been going on behind the scenes. Thinking of it reminds me of the duck analogy: when you see a duck swimming across a pond, it appears to take little to no effort to glide across the water. What is not visible, however, is the effort that the little legs and feet are paddling swiftly, with precision and strength under the water to move the duck forward. The same can be said with any organization – on the surface it appears as though things are slow and with no or little effort, while behind the scenes actions are being performed with precision and strength. To that point, the International Board and I have worked through putting business processes in place, such as the strategic goals that focus on our valued membership (growing and keeping members). Marc Thompson has been working hard with headquarters’ staff on back-office improvements with the Your Membership (YM) software used to manage our membership database, and a cleanup of our QuickBooks use. All of this work is necessary in preparing the association to grow and provide you and our chapters with world-class service that should be expected from an international professional association. I am also very happy to say, for the first time in my years on the Board of Directors, we are currently de- veloping a program management function with the assistance of Brian Shultz and Deb Peinert. This effort will help the Board and me to monitor and evaluate the performance of existing programs offered by the ISSA, as well as making knowledgeable decisions on proposed programs. All of this is part of the effort for ISSA International to utilize sound business practices to ensure efficiencies and quality services. You should have received the “Call for Nominations” for this year’s elections for the ISSA International Board of Directors. The election is one of the most important processes of our association that all mem- bers should participate in. Whether you are considering a run for an open seat on the International Board or you cast your vote, it is important for all members to participate! If you are choosing to become a candidate, know that it is an excellent opportunity to demonstrate your leadership and business skills in a global organization! It is an experience of a lifetime and can be very rewarding! If you are not looking to become a candidate, understand that your role in voting is just as important. Take a moment and learn what each candidate offers and is looking to accomplish before you cast your vote—your decisions pave the future for our association. For those of you who are waiting for this year’s ESG/ISSA research on the “Life and Times of the Cyber- security Professional,” we will be releasing the full report in May. Not to give away too much, but things haven’t improve in many areas for us, including CISO burnout. But you probably already knew that. What you may not know is that we have included some research around “privacy and security” and how it is effective to us as professionals. Be sure to be on watch for the release of the report, which will be available from the ISSA International’s NEW website (another back-office improvement item). I will close by saying my virtual door is always open. Please feel free to reach out by sending me an email at [email protected]. Candy Alexander, CISSP CISM ISSA International President May 2019 | ISSA Journal – 3 DEVELOPING AND CONNECTING CYBERSECURITY LEADERS GLOBALLY Now Indexed with EBSCO Editor: Thom Barrie [email protected] Advertising: [email protected] International Board Officers Board of Directors Editorial Advisory Board President Mary Ann Davidson Candy Alexander Distinguished Fellow James Adamson Distinguished Fellow Ken Dunham, CISSP, CISM, Jack Freund, Senior Member Distinguished Fellow Vice President Alex Grohmann, CISSP, CISA, CISM, Michael Grimaila, Fellow Roy Wilkinson CIPT, Fellow Distinguished Fellow Yvette Johnson Shawn Murray, C|CISO, CISSP, CRISC, Secretary/Director of Operations FITSP-A, C|EI, Senior Member John Jordan, Senior Member Anne M. Rogers Deborah Peinert Steve Kirby – Chairman CISSP, Fellow Wayne Proctor, CISSP, CISM, CISA, CRISC Mollie Krehnke, Fellow Treasurer/Chief Financial Officer Distinguished Fellow Pamela Fusco David Vaughn, C|CISO, CISSP, LPT, GSNA, Joe Malec, Fellow Distinguished Fellow Senior Member Abhinav Singh Stefano Zanero, PhD, Fellow Kris Tanaka Joel Weise Information Systems Security Association Distinguished Fellow 1964 Gallows Road, Suite 310, Vienna, VA 22182 +1 (703) 382-8205 (local/international) Branden Williams, Distinguished Fellow Rajat Varuni The Information Systems Security Association, Inc. (ISSA)® is a not-for-profit, interna- tional organization of information security professionals and practitioners. It provides educational forums, publications and peer inte raction opportunities that enhance the Services Directory knowledge, skill and professional growth of its members. Website With active participation from individuals and chapters all over the world, the ISSA is [email protected] the largest international, not-for-profit association specifically for security profession- als. Members include practitioners at all levels of the security field in a broad range of Chapter Relations industries, such as communications, education, healthcare, manufacturing, financial, [email protected] and government. The ISSA international board consists of some of the most influential people in the se- Member Relations curity industry. With an international communications network developed throughout [email protected] the industry, the ISSA is focused on maintaining its position as the preeminent trusted global information security community. Executive Director The primary goal of the ISSA is to promote management practices that will ensure the [email protected] confidentiality, integrity and availability of information resources. The ISSA facilitates interaction and education to create a more successful environment for global informa- Advertising and Sponsorships tion systems security and for the professionals involved. [email protected] The information and articles in this the best knowledge of the author and the official policy of ISSA. Articles may poration and is not
Load more

Recommended publications
  • Analysis of FOX Summary
    12/09/2008 Analysis of FOX Jorge Nakahara Jr [email protected] Presented by: Mads Rasmussen [email protected] SBSeg 2008, Gramado, RS, Brazil Summary • The FOX block cippyher family • Information leakage in FOX • Impossible-Differential Analysis • Conclusions SBSeg 2008, Gramado, RS, Brazil 1 12/09/2008 The FOX Cipher Family • Designers: P. Junod and S. Vaudenay (2004) • New name: IDEA-NXT • Owned by Mediacrypt A.G. • Lai-Massey structure, like IDEA cipher • Two main ciphers: FOX64 and FOX128 • Byte-oriented design: byte are elements of GF(2 8) = GF(2)[x]/(x8+x7+x6+x5+x4 +x3+1) SBSeg 2008, Gramado, RS, Brazil The FOX Cipher Family • Each round of FOX64 uses a bijective mapping called f32 consisting of an MDS matrix, xor with two round subkeys, and an 8x8-bit S-box • Each round of FOX128 uses a bijective mapping called f64, consisting of an MDS matrix, xor with two round subkeys and an 8x8-bit S-box • To break the round symmetry, there is a linear transformation called orthomorphism (or) at the end of each round. SBSeg 2008, Gramado, RS, Brazil 2 12/09/2008 The FOX Cipher Family Cipher Block Size Key Size #rounds (bits) (bits) FOX64 64 128 16 FOX128 128 256 16 FOX64/k/r 64 k r (0 ≤ k ≤ 256) (12 ≤ r ≤ 255) FOX128/k/r 128 k r (0 ≤ k ≤ 256) (12 ≤ r ≤ 255) SBSeg 2008, Gramado, RS, Brazil FOX64 SBSeg 2008, Gramado, RS, Brazil 3 12/09/2008 Information Leakage • Information leakage: discover (non-trivial) internal cipher data using only (known) plaintext-ciphertext pairs.
    [Show full text]
  • Encryption Block Cipher
    10/29/2007 Encryption Encryption Block Cipher Dr.Talal Alkharobi 2 Block Cipher A symmetric key cipher which operates on fixed-length groups of bits, termed blocks, with an unvarying transformation. When encrypting, a block cipher take n-bit block of plaintext as input, and output a corresponding n-bit block of ciphertext. The exact transformation is controlled using a secret key. Decryption is similar: the decryption algorithm takes n-bit block of ciphertext together with the secret key, and yields the original n-bit block of plaintext. Mode of operation is used to encrypt messages longer than the block size. 1 Dr.Talal Alkharobi 10/29/2007 Encryption 3 Encryption 4 Decryption 2 Dr.Talal Alkharobi 10/29/2007 Encryption 5 Block Cipher Consists of two algorithms, encryption, E, and decryption, D. Both require two inputs: n-bits block of data and key of size k bits, The output is an n-bit block. Decryption is the inverse function of encryption: D(E(B,K),K) = B For each key K, E is a permutation over the set of input blocks. n Each key K selects one permutation from the possible set of 2 !. 6 Block Cipher The block size, n, is typically 64 or 128 bits, although some ciphers have a variable block size. 64 bits was the most common length until the mid-1990s, when new designs began to switch to 128-bit. Padding scheme is used to allow plaintexts of arbitrary lengths to be encrypted. Typical key sizes (k) include 40, 56, 64, 80, 128, 192 and 256 bits.
    [Show full text]
  • The Effectiveness of Encryption Methods in Mitigating Information Technology Security Risks by TROY MOKOENA
    COPYRIGHT AND CITATION CONSIDERATIONS FOR THIS THESIS/ DISSERTATION o Attribution — You must give appropriate credit, provide a link to the license, and indicate if changes were made. You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use. o NonCommercial — You may not use the material for commercial purposes. o ShareAlike — If you remix, transform, or build upon the material, you must distribute your contributions under the same license as the original. How to cite this thesis Surname, Initial(s). (2012) Title of the thesis or dissertation. PhD. (Chemistry)/ M.Sc. (Physics)/ M.A. (Philosophy)/M.Com. (Finance) etc. [Unpublished]: University of Johannesburg. Retrieved from: https://ujcontent.uj.ac.za/vital/access/manager/Index?site_name=Research%20Output (Accessed: Date). The Effectiveness of Encryption Methods in Mitigating Information Technology Security Risks by TROY MOKOENA (215043290) A LIMITED SCOPE DISSERTATION submitted in fulfilment of the requirements for the degree MASTERS COMMERCII in COMPUTER AUDITING in the FACULTY OF ECONOMIC AND FINANCIAL SCIENCES at the UNIVERSITY OF JOHANNESBURG Supervisor: Jacob Mamaile Co-Supervisor: Rozanne Smith October 2016 ABSTRACT Data protection is a critical area that is currently receiving much attention worldwide. Easy access to the internet and an increase in information transfer over communication networks contributes greatly to the need for data to be protected. Reports of data breaches from corporations and government institutions across the world have increased. Data breaches are mostly executed through the internet and other networks. Data loss and breaches can have significant consequences for concerned parties, such as reputational damage and litigation, when personal information is exposed to unauthorised persons.
    [Show full text]
  • Cryptanalysis Vs. Reality
    Cryptanalysis vs. Reality Jean-Philippe Aumasson 1 / 54 Cryptanalysis is the study of methods for obtaining the meaning of encrypted information without access to the secret information that is normally required to do so. Wikipedia 2 / 54 Cryptanalysis is the study of methods for obtaining the meaning of encrypted information without access to the secret information that is normally required to do so. Wikipedia 3 / 54 The fundamental goal of a cryptanalyst is to violate one or several security notions for algorithms that claim, implicitly or explicitly, to satisfy these security notions. Antoine Joux, Algorithmic Cryptanalysis 4 / 54 Reality noun (pl. realities) 1. the state of things as they actually exist, as opposed to an idealistic or notional idea of them. 2. a thing that is actually experienced or seen. 3. the quality of being lifelike. 4. the state or quality of having exis- tence or substance. Compact Oxford English Dictionary 5 / 54 Cryptanalysis relies on an ATTACKER MODEL = assumptions on what the attacker can and cannot do All models are in simulacra, that is, simplified reflections of reality, but, despite their inherent falsity, they are nevertheless extremely useful G. Box, N. Draper, Empirical Model-Building and Response Surfaces 6 / 54 Cryptanalysis usually excludes methods of attack that do not primarily target weaknesses in the actual cryptography, such as bribery, physical coercion, burglary, keystroke logging, and social engineering, although these types of attack are an important concern and are often more effective Wikipedia 7 / 54 Cryptanalysis used to be tightly connected to reality 8 / 54 But times have changed 9 / 54 10 / 54 11 / 54 Broken in a model does not imply broken in reality! 12 / 54 Models’ language overlaps with real-world language: “attacks”, “broken” have multiple meanings Has cryptanalysis lost connection with reality? 13 / 54 Cryptography is usually bypassed.
    [Show full text]
  • Foldable Smartphones!
    www.mymobileindia.com FEBRUARYMARCH 2019 Rs 100 ® www.mymobileindia.com YOUR GATEWAY TO THE WORLD OF MOBILITY CES 2019 FACE TO FACE Tested Technology Karan Bedi Nokia 8.1 Plus, Honor RedefinedFOLDABLE COO, Blaupunkt 10 Lite, Micromax SMARTPHONES!Televisions India Infinity N12, Honor SPOTLIGHT View 20, Oppo R17 Sensible or Senseless? Pro, Asus Zenfone Tech Innovations From PHONE OF THE MONTH Max Pro M2 and HUAWEI MATE 20 PRO Apple's Orchard many more… FACE TO FACE Capt. Chanpreet Singh Country CEO and MD, Yuho Mobile Tested BOREDOM Vivo V15 Pro, Oppo BUSTER K1, Skullcandy Crusher Mobile Gaming: Wireless,@MyMobileMag Mi Soundbar The Current @MyMobileMag and@mymobilemag many more… Dominators @mymobilemag H.G.D (INDIA) RoHS Hong Guang De Technology India Pvt. Ltd. India’s Largest Mobile Phone Charger Manufacturer Multi Layer Light Fast Multiple Premium Quality Check Weight Charging Protection Microchip After 60 minutes charging 75% 64% - 2 Amp USB Charger HGD Normal Charger Charger Charges faster - 0.5 Amp USB Charger Best OEM Mobile - 1 Amp USB Charger Charger MANUFACTURER Join the HGD Family Today! | www.hgdindia.com www.hgdindia.com [email protected] +91 9990 578 181 A-55, Sector-64, Noida (UP) - INDIA FIRSTCALL he game has just begun! A game that will dawn into a new era of smartphone and its evolution over the years to reach EDITORIAL Tat a stage when we can literally see the innovations happening and taking shapes Pankaj Mohindroo | Editor-in-Chief and sizes. Right now, it evolves to come into Haider Ali Khan | Deputy Editor a foldable format with multiple displays.
    [Show full text]
  • An Improved IDEA-ECB Based on Multithread Technology Gen-Qing
    2016 International Conference on Service Science, Technology and Engineering (SSTE 2016) ISBN: 978-1-60595-351-9 An Improved IDEA-ECB Based on Multithread Technology a b,* Gen-Qing BIAN , Yu-Yao WANG School of Information and Control Engineering, Xi’an University of Architecture and Technology, Xi’an, Shannxi, China [email protected], [email protected] *Corresponding author Keywords: Data Encryption, DEA, Electronic Code Book (ECB), Multithreading. Abstract. In terms of the problem that the encryption rate of International Data Encryption Algorithm (IDEA) is low, and it’s throughout capacity is small under the ECB packet mode, this paper proposes a kind of improved IDEA-ECB based on multithread technology. Change the order flow of single thread into concurrent flow of multithread with clocking plaintext and multithread technology, which improve the encryption rate and throughout capacity, at the same time reduce the operation hours of encryption algorithm, and satisfy the demand that real time and high effectively software encryption in instant messaging. Experimental results show that if the size of plaintext is 1MB, the number of threads which is started respectively is 4,8,12,16, the speedup of improved algorithm increases 1.72~4.08 times than classical algorithm. Introduction International Data Encryption Algorithm [1, 2] (IDEA) was first proposed by Chinese young scholars Lai X who lives in Switzerland and James Massey who is a famous cryptography expert in 1990. In 1992, it was improved to strengthen the ability of anti-differential analysis and renamed International Data Encryption Algorithm. IDEA algorithm is one of the most widely used block encryption algorithms.
    [Show full text]
  • Keith Mayes Konstantinos Markantonakis Editors Second Edition
    Keith Mayes Konstantinos Markantonakis Editors Smart Cards, Tokens, Security and Applications Second Edition Smart Cards, Tokens, Security and Applications Keith Mayes • Konstantinos Markantonakis Editors Smart Cards, Tokens, Security and Applications Second Edition 123 Editors Keith Mayes Konstantinos Markantonakis Director of the Information Security Group, Smart Card Centre, Information Security Head of the School of Mathematics and Group Information Security Royal Holloway, University of London Royal Holloway, University of London Egham, Surrey Egham, Surrey UK UK ISBN 978-3-319-50498-8 ISBN 978-3-319-50500-8 (eBook) DOI 10.1007/978-3-319-50500-8 Library of Congress Control Number: 2016959517 1st edition: © Springer Science+Business Media, LLC 2008 2nd edition: © Springer International Publishing AG 2017 This work is subject to copyright. All rights are reserved by the Publisher, whether the whole or part of the material is concerned, specifically the rights of translation, reprinting, reuse of illustrations, recitation, broadcasting, reproduction on microfilms or in any other physical way, and transmission or information storage and retrieval, electronic adaptation, computer software, or by similar or dissimilar methodology now known or hereafter developed. The use of general descriptive names, registered names, trademarks, service marks, etc. in this publication does not imply, even in the absence of a specific statement, that such names are exempt from the relevant protective laws and regulations and therefore free for general use. The publisher, the authors and the editors are safe to assume that the advice and information in this book are believed to be true and accurate at the date of publication. Neither the publisher nor the authors or the editors give a warranty, express or implied, with respect to the material contained herein or for any errors or omissions that may have been made.
    [Show full text]
  • Simplified Idea Algorithm
    A SIMPLIFIED IDEA ALGORITHM NICK HOFFMAN Abstract. In this paper, a simplified version of the International Data En- cryption Algorithm (IDEA) is described. This simplified version, like simplified versions of DES [8] [12] and AES [6] [7] that have appeared in print, is intended to help students understand the algorithm by providing a version that permits examples to be worked by hand. IDEA is useful teaching tool to help students bridge the gap between DES and AES. 1. Introduction The International Data Encryption Algorithm (IDEA) is a symmetric-key, block cipher. It was published in 1991 by Lai, Massey, and Murphy [3]. IDEA is a modification of the Proposed Encryption Standard (PES) that was published in 1990 by Lai and Massy [1]; PES was designed as a replacement for the Data En- cryption Standard (DES). The algorithm was modified and published in 1991 after Biham and Shamir described the technique of differential cryptanalysis. The new algorithm was called the Improved Proposed Encryption Standard (IPES); its name changed to IDEA in 1992. IDEA is a candidate block cipher to the NESSIE Project. NESSIE is a project within the Information Societies Technology (IST) Program of the European Commission [3]. In the Second Edition (1996) of Applied Cryptography Bruce Schneier [9] de- scribes IDEA as “... the best and most secure block algorithm available to the public at this time;” however, in 1999 [10] he began to recommend newer algo- rithms because IDEA “...isn’t very fast ... [and] IDEA is patented.” Although IDEA did not replace DES, it was incorporated into Pretty Good Privacy (PGP).
    [Show full text]
  • View the Index
    INDEX OF TERMS 2013, 2 Axolotl, 11 65537, 2 Backdoor, 11 A5/0, 2 Backtracking resistance, 11 A5/1, 2 Backward secrecy, 11 A5/2, 3 Base64, 12 A5/3, 3 BassOmatic, 12 A5/4, 3 BB84, 12 Adaptive attack, 3 bcrypt, 12 AEAD (authenticated encryption Biclique cryptanalysis, 13 with associated data) , 3 BIKE (Bit Flipping Key AES (Advanced Encryption Encapsulation), 13 Standard), 4 BIP (Bitcoin improvement AES-CCM, 4 proposal), 13 AES-GCM, 5 Bit Gold, 14 AES-GCM-SIV, 5 Bitcoin, 14 AES-NI, 5 Black, 14 AES-SIV, 6 BLAKE, 14 AIM (Advanced INFOSEC Machine), 6 BLAKE2, 14 AKA, 6 BLAKE3, 14 AKS (Agrawal–Kayal–Saxena), 7 Bleichenbacher attack, 15 Algebraic cryptanalysis, 7 Blind signature, 15 Alice, 7 Block cipher, 16 All-or-nothing transform (AONT), 7 Blockchain, 16 Anonymous signature, 8 Blockcipher, 17 Applied Cryptography, 8 Blowfish, 17 Applied cryptography, 8 BLS (Boneh-Lynn-Shacham) ARC4, 8 signature, 17 Argon2, 8 Bob, 18 ARX (Add-Rotate-XOR), 9 Boolean function, 18 ASIACRYPT, 9 Boomerang attack, 18 Asymmetric cryptography, 9 BQP (bounded-error quantum Attack, 9 polynomial time), 19 Attribute-based encryption (ABE), 10 Braid group cryptography, 19 Authenticated cipher, 11 Brainpool curves, 19 Break-in recovery, 20 Cryptologia, 29 Broadcast encryption, 20 Cryptology, 29 Brute-force attack, 20 Cryptonomicon, 29 Bulletproof, 20 Cryptorchidism, 30 Byzantine fault tolerance, 21 Cryptovirology, 30 CAESAR, 21 CRYPTREC, 30 Caesar’s cipher, 22 CSIDH (Commutative Supersingular CAVP (Cryptographic Algorithm Isogeny Diffie–Hellman), 30 Validation Program), 22
    [Show full text]
  • Ts 100 289 V1.2.1 (2014-03)
    ETSI TS 100 289 V1.2.1 (2014-03) Technical Specification Digital Video Broadcasting (DVB); Support for use of the DVB Scrambling Algorithm version 3 within digital broadcasting systems 2 ETSI TS 100 289 V1.2.1 (2014-03) Reference RTS/JTC-DVB-335 Keywords broadcasting, CA, digital, DVB, security, TV, video ETSI 650 Route des Lucioles F-06921 Sophia Antipolis Cedex - FRANCE Tel.: +33 4 92 94 42 00 Fax: +33 4 93 65 47 16 Siret N° 348 623 562 00017 - NAF 742 C Association à but non lucratif enregistrée à la Sous-Préfecture de Grasse (06) N° 7803/88 Important notice The present document can be downloaded from: http://www.etsi.org The present document may be made available in electronic versions and/or in print. The content of any electronic and/or print versions of the present document shall not be modified without the prior written authorization of ETSI. In case of any existing or perceived difference in contents between such versions and/or in print, the only prevailing document is the print of the Portable Document Format (PDF) version kept on a specific network drive within ETSI Secretariat. Users of the present document should be aware that the document may be subject to revision or change of status. Information on the current status of this and other ETSI documents is available at http://portal.etsi.org/tb/status/status.asp If you find errors in the present document, please send your comment to one of the following services: http://portal.etsi.org/chaircor/ETSI_support.asp Copyright Notification No part may be reproduced or utilized in any form or by any means, electronic or mechanical, including photocopying and microfilm except as authorized by written permission of ETSI.
    [Show full text]
  • Online Testing Schemes for the IDEA NXT Crypto-Algorithm Andreea Bozeşan, Flavius Opriţoiu Computer Science Department, University Politehnica Timisoara, Romania
    Volume 56, Number 1-2, 2015 35 Online Testing Schemes for the IDEA NXT Crypto-algorithm Andreea Bozeşan, Flavius Opriţoiu Computer Science Department, University Politehnica Timisoara, Romania, Abstract—This paper presents a hardware architecture for online self-test in the context of the IDEA NXT crypto-algorithm. From the many techniques and solutions presented in the literature for increasing Built In Self-Test (BIST) capabilities, after a careful analysis of these solutions, we decided to focus our attention on solutions based on parity-prediction. In this sense we designed and implemented a parity-based error detection architecture for the Datapath and one for the Key Schedule mechanism of IDEA NXT. The solution we propose doesn't interfere in any way with the algorithm's structure, as there is a complete separation between the functional and testing channels. The proposed solution is the first of this kind for the IDEA NXT crypto-algorithm. We evaluated the performance of the proposed test strategy with different redundancy levels and formulated recommendations for the concurrent detection strategy based on the obtained experimental results. The error-detection rate of the architecture in regards to stuck-at faults was also calculated in this paper. Keywords— cryptography, IDEA NXT, crypto-algorithm, LFSR, concurrent-testing, parity-based testing Substitution-Permutation Networks based on the Feistel 1. INTRODUCTION scheme [2]. The ortomorphism represents a Feistel scheme on a single round which has the identity The Cryptographic domain is continuously trying function as a round function. IDEA NXT consists of 'n- to find ways for strengthening the means for obtaining 1' iterations of a round function called lmor64, the security of sensitive information.
    [Show full text]
  • Security and Privacy in RFID Systems
    Security and Privacy in RFID Systems THÈSE NO 5283 (2012) PRÉSENTÉE LE 10 FÉVRIER 2012 À LA FACULTÉ INFORMATIQUE ET COMMUNICATIONS LABORATOIRE DE SÉCURITÉ ET DE CRYPTOGRAPHIE PROGRAMME DOCTORAL EN INFORMATIQUE, COMMUNICATIONS ET INFORMATION ÉCOLE POLYTECHNIQUE FÉDÉRALE DE LAUSANNE POUR L'OBTENTION DU GRADE DE DOCTEUR ÈS SCIENCES PAR Khaled OUAFI acceptée sur proposition du jury: Prof. A. Lenstra, président du jury Prof. S. Vaudenay, directeur de thèse Prof. G. Avoine, rapporteur Prof. D. Naccache, rapporteur Dr Ph. Oechslin, rapporteur Suisse 2012 iii إﻟﻰ واﻟﺪي، ﺗﻘﺪﻳﺮا ﻟﻜﻞ ﻣﺎ ﻗﺪﻣﺎه ﻟﻲ. ABSTRACT is PhD thesis is concerned with authentication protocols using portable lightweight devices such as RFID tags. ese devices have lately gained a signicant attention for the diversity of the applications that could benet form their features, ranging from inventory systems and building access control, to medical devices. However, the emergence of this technology has raised concerns about the possible loss of privacy carrying such tags induce in allowing tracing persons or unveiling the contents of a hidden package. is fear led to the appearance of several organizations which goal is to stop the spread of RFID tags. We take a cryptographic viewpoint on the issue and study the extent of security and privacy that RFID-based solutions can offer. In the rst part of this thesis, we concentrate on analyzing two original primitives that were proposed to ensure security for RFID tags. e rst one, HB, is a dedicated authentica- tion protocol that exclusively uses very simple arithmetic operations: bitwise AND and XOR. HB was proven to be secure against a certain class of man-in-the-middle attacks and conjec- tured secure against more general ones.
    [Show full text]