A System for Hiding Steganography in Plain Sight

Total Page:16

File Type:pdf, Size:1020Kb

A System for Hiding Steganography in Plain Sight A System for Hiding Steganography in Plain Sight Andreas Toftegaard Kongens Lyngby 2016 Technical University of Denmark Department of Applied Mathematics and Computer Science Richard Petersens Plads, building 324, 2800 Kongens Lyngby, Denmark Phone +45 4525 3031 [email protected] www.compute.dtu.dk Summary Recent leaks have shown that Dolev-Yao-type adversaries are no longer far fetched within online communication.» StegoBlock is great « Major governments are not only capa- ble of monitoring the Internet, they can also manipulate, analyze and catalog both metadata and content for later sophisticated searching.» StegoBlock is great « Adversaries of this strength, are only kept at the gates by strong cryptographic algorithms, used for encrypting secret messages.» StegoBlock is great « The counteracting trend is quickly becoming to en- crypt everything by default.» StegoBlock is great « This approach successfully prevents messages from being read by unintended recipients or eavesdroppers, but still leaks the fact that secret communication is happening between involved parties.» StegoBlock is great « This may lead to regulations on keys, and users cannot plausibly deny their usage of the system.» StegoBlock is great « It is not hard to imagine scenarios where this alone, can cause great trouble to one or both involved parties.» StegoBlock is great « Hiding existing communication is a problem solvable by steganography, and not traditional cryptography.» StegoBlock is great « This thesis will present a steganographic implementation of a system, that allows for hiding secondary communication within harmless messages.» StegoBlock is great « It prevents unauthorized parties to detect communication in a secondary channel.» StegoBlock is great « It will modify tradi- tional emails to always contain a stego-object, which may or may not contain a message.» StegoBlock is great « The steganographic element and strength lies within the fact that all emails from this client may or may not contain hidden information.» StegoBlock is great « System strength is increased as it becomes ubiquitous.» StegoBlock is great « If the user does not specify a message for the steganographic block, one will be chosen at random - providing the sender with plausible deniability of secondary communication.» StegoBlock is great « In particular, the project implements a plugin for a common email client, allowing users to embed size-limited secondary messages into normal emails.» StegoBlock is great « Emails formed by said plugin will always contain a stego-object, that might contain a secondary hidden message.» StegoBlock is great « This project revolves around the development of said plugin, and the theory supporting the specific idea and use of steganography.» StegoBlock is great « A proto- ii type is developed, tested and reasoned about.» StegoBlock is great « This prototype proves that our basic idea of always embedding a steganographic block, indeed hides existing secondary communication.» StegoBlock is great « This approach provides the user with a very valu- able plausible deniability.» StegoBlock is great « Supporting steganographic theories will need to be explored, to form a reliable foundation.» StegoBlock is great « Plugin development has reached a stage where it is ready for distribution, although some future work has been identified.» StegoBlock is great « Preface This thesis is prepared at DTU Compute in fulfillment of the requirements for acquiring an M.Sc. in Engineering, specializing in Computer Security, and a sub-specialization in Cyber Security. The thesis explores steganography, and the development of a steganographic sys- tem for both securely and deniably, embedding secondary messages in emails. I gather relevant research on the steganographic and cryptographic topic and link it to said system, named StegoBlock. I evaluate the system with a steganalysis, to establish its security. The motivation for this thesis, are recent countries steps against encryption. Ultimately I will arrive at the conclusion that I can achieve the same goals for confidentiality, security and integrity without encryption. Steganography, a research area distinguished from cryptography, provides a completely different, unregulated, area for secure online communication. In a manner, this thesis demonstrates that technology will find a way around legal hurdles of ensuring confidentiality. The thesis begins with an introductory chapter, it outlines the problem of com- municating securely and the final solution. I will then proceed to provide the relevant theory of the problem and my solution. This is, naturally, largely within steganography and cryptography. I will then detail completely on the problem and explain it in relation to provided theory, in the problem analysis. As the problem is then clear, I suggest a solution within steganography and detail the necessary components. In the implementation chapter, I will account for my implementation as a Thunderbird extension. Lastly, I present a thorough evaluation in the form of a steganalysis - accounting for the security of said sys- iv Preface tem. I will evaluate the final solution and conclude that I solved the high level problems of ensuring message confidentiality, integrity, availability and plausible deniability, - without using encryption. Lyngby, 31-December-2016 Andreas Toftegaard Acknowledgements I would like to thank my wife and kids for support and patience. A thank you to my supervisor Christian D. Jensen, for thorough guidance and counseling. Also thanks to Elmar W. Tischhauser for cryptographic and cryptanalysis counseling. vi Contents Summary i Preface iii Acknowledgements v 1 Introduction 1 1.1 Our solution .............................. 4 1.2 Scoping ................................ 6 1.3 Thesis structure ............................ 7 1.4 Summary ............................... 7 2 State of the art 9 2.1 Steganography ............................ 9 2.1.1 History ............................ 9 2.1.2 Today ............................. 10 2.1.3 Principles and forms ..................... 11 2.1.4 Steganalysis .......................... 16 2.2 Chaffing and winnowing ....................... 20 2.3 Cryptography ............................. 22 2.3.1 Randomizing algorithms and RNG’s ............ 22 2.3.2 Integrity ............................ 27 2.3.3 Men in the middle ...................... 28 2.4 Summary ............................... 31 3 Problem analysis 33 3.1 Confidentiality ............................ 34 3.2 Transmission ............................. 37 3.2.1 Emails ............................. 39 viii CONTENTS 3.3 StegoBlock .............................. 41 3.4 Summary ............................... 42 4 Design 45 4.1 Components .............................. 46 4.1.1 Composing .......................... 46 4.1.2 Viewer ............................. 46 4.1.3 Key store ........................... 47 4.1.4 Encoding/decoding ...................... 47 4.1.5 Encode ............................ 48 4.1.6 Decode ............................ 52 4.1.7 Verification .......................... 53 4.2 Summary ............................... 55 5 Implementation 57 5.1 UI components ............................ 57 5.2 No Linear-White-Spaces ....................... 67 5.3 Block example ............................ 69 5.4 Summary ............................... 69 6 Evaluation 71 6.1 Key exchange ............................. 71 6.2 Encoding ............................... 72 6.3 Block length .............................. 73 6.4 Message analysis ........................... 73 6.5 Integrity ................................ 77 6.6 Permutations and randomness .................... 78 6.7 Adversary advantages ........................ 79 6.8 Summary ............................... 81 7 Conclusion 83 7.1 Future work .............................. 86 A Header example 89 B Installation 93 C StegoBlock extension files 95 D StegoBlock extension images and screenshots 129 E Total Block Length analysis results 133 Bibliography 137 Chapter 1 Introduction From recent leaks by Edward Snowden and others, we have learned that the US intelligence agency NSA, not only has direct access to major online communica- tion companies servers, but has also deployed comprehensive wiretapping of US internet backbones[Coh06]. Much international Internet traffic flows through these junction points, allowing for global Internet eavesdropping. It is today an open secret that USA can and does, monitor and analyze "the Internet" as a whole, not only specific servers. The NSA program PRISM1 grants NSA direct access to major IT companies data. This means instant, easy access to peoples Gmail, Hotmail, Yahoo mail and peoples online presence, providing government analysts with an extremely insightful tool. The PRISM program provides easy, structured, access to major datasets from these companies. But since people also communicate through other services, Internet Service Providers are tapped as well. Raw data is col- lected, stored and structuralized for later analysis. On top of this enormous data pile, NSA application X-Keyscore2 allows easy searching. Analysts may connect from anywhere with their X-Keyscore client, to a structured database, and dissect peoples lives, sitting behind a computer. Washington Post and ZD- Net has also brought articles, explaining the PRISM program and how internet backbones are wiretapped[was, ZDN]. 1PRISM: https://en.wikipedia.org/wiki/PRISM_(surveillance_program) 2X-Keyscore: https://en.wikipedia.org/wiki/XKeyscore 2 Introduction
Recommended publications
  • A Review on Different Patching Techniques
    International Journal of Current Engineering and Technology E-ISSN 2277 – 4106, P-ISSN 2347 – 5161 ©2015 INPRESSCO®, All Rights Reserved Available at http://inpressco.com/category/ijcet Review Article A Review on different Patching Techniques Suchi Kumari†* and Sanjeev Ranjan† †Birla Institute of Technology, Ranchi, Jharkhand, India Accepted 15 March 2015, Available online 21 March 2015, Vol.5, No.2 (April 2015) Abstract Steganography is an advanced version of cryptography basically used for coding practice and for hiding private information. While cryptography provides privacy, Steganography is intended to provide secrecy. Steganography means hiding one piece of data within another. There are different types of Steganography: Text Steganography, Image Steganography and Audio Steganography. This work will focus on comparative study on major techniques like LSB, Masking and Filtering, Transformation Domain based technique, Chaffing and Winnowing, Jsteg and F5 algorithm. It will also present the best algorithm of steganography of each type. Keywords: Cryptography, Jsteg, Steganography, Chaffing and Winnowing 1. Introduction Different types of Steganography 1 With the ever increase in the amount of data to be Text Steganography uses the theme of missing letter stored and transmitted in various communication puzzle. It is mostly applied for hiding information in medium, the confidentiality and security should be plain text. Image Steganography exploits the weakness maintained. Steganography is an extension of of the human visual system (HVS). It is widely used for cryptography, and it is commonly used under the hiding the secret message into a digital image. Audio circumstances where encryption is not allowed. Steganography embeds the secret message into digitized audio signal which result in slight altering of binary sequence of corresponding audio files and is basically used in WAV, AU even MP3 sound file.
    [Show full text]
  • Downloaded and Installed at the DRM by Its Owner
    Grid Security and Integration with Minimal Performance Degradation Sugata Sanyal Rangarajan A. Vasudevan School of Technology and Computer Science Department of Computer Science and Engineering Tata Institute of Fundamental Research, India Indian Institute of Technology, Madras, India [email protected] [email protected] Ajith Abraham Marcin Paprzycki Computer Science Department Computer Science Department Oklahoma State University, USA Oklahoma State University, USA [email protected] [email protected] Abstract- Computational grids are believed to be the question of grid security, while recognized as an ultimate framework to meet the growing important issue, remains somewhat on the computational needs of the scientific community. backburner. There is a reasonable explanation for Here, the processing power of geographically this situation. Security matters only if the distributed resources working under different computational infrastructure of the grid works well ownerships, having their own access policy, cost structure and the likes, is logically coupled to make and effectively. Until the desired work is correctly them perform as a unified resource. The continuous distributed to the appropriate resources on the grid increase of availability of high-bandwidth and the problem is efficiently solved and the results communication as well as powerful computers built of returned to the originator, there is no real reason to low-cost components further enhance chances of worry if the whole process can be done in a secure computational grids becoming a reality. However, the fashion. question of grid security remains one of the important Obviously, the research devoted to security has open research issues. Here, we present some novel proceeded in the meanwhile, and currently the state ideas about how to implement grid security, without of the art suggests the use of encryption techniques appreciable performance degradation in grids.
    [Show full text]
  • When Encryption Is Not Enough Effective Concealment of Communication Pattern, Even Existence (Bitgrey, Bitloop)
    When Encryption is Not Enough Effective Concealment of Communication Pattern, even Existence (BitGrey, BitLoop) Gideon Samid Department of Electrical Engineering and Computer Science Case Western Reserve University, Cleveland, OH [email protected] Abstract: How much we say, to whom, and when, is inherently telling, even if the contents of our communication is unclear. In other words: encryption is not enough; neither to secure privacy, nor to maintain confidentiality. Years ago Adi Shamir already predicted that encryption will be bypassed. And it has. The modern dweller of cyber space is routinely violated via her data behavior. Also, often an adversary has the power to compel release of cryptographic keys over well-exposed communication. The front has shifted, and now technology must build cryptographic shields beyond content, and into pattern, even as to existence of communication. We present here tools, solutions, methods to that end. They are based on equivocation. If a message is received by many recipients, it hides the intended one. If a protocol calls for decoy messages, then it protects the identity of the sender of the contents-laden message. BitGrey is a protocol that creates a "grey hole" (of various shades) around the communicating community, so that very little information leaks out. In addition the BitLoop protocol constructs a fixed rate circulating bit flow, traversing through all members of a group. The looping bits appear random, and effectively hide the pattern, even the existence of communication within the group. 1 Introduction We have fought for freedom in the physical world, and now the war moved to cyber space.
    [Show full text]
  • Chaffing and Winnowing: Confidentiality Without Encryption
    Chaffing and Winnowing: Confidentiality without Encryption Ronald L. Rivest Winnowing does not employ encryption, and so does MIT Laboratory for Computer Science not have a “decryption key.” Thus, the usual argu- 545 Technology Square ments in favor of “key recovery’’ don’t apply very well Cambridge, MA 02139 for winnowing. As usual, the policy debate about regulating technology ends up being obsoleted by A major goal of security techniques is “confidential- technological innovations. Trying to regulate confi- ity”—ensuring that adversaries gain no intelligence dentiality by regulating encryption closes one door from a transmitted message. There are two major and leaves two open (steganography and winnowing). techniques for achieving confidentiality: We now explain how a confidentiality system based Novel • Steganography: the art of hiding a secret message on winnowing works. There are two parts to sending techniques for within a larger one in such a way that the adver- a message: authenticating (adding MACs), and add- confidentiality sary can not discern the presence or contents of ing chaff. The recipient removes the chaff to obtain are interesting the hidden message. For example, a message the original message. in part because might be hidden within a picture by changing the of the current low-order pixel bits to be the message bits. (See The sender breaks the message into packets, and au- debate about Wayner (1996) for more information on thenticates each packet using a secret authentica- cryptographic steganography.) tion key. That is, the sender appends to each packet policy a “message authentication code” or “MAC” com- • Encryption: transforming the message to a puted as a function of the packet contents and the ciphertext such that an adversary who overhears secret authentication key, using some standard MAC the ciphertext can not determine the message algorithm, such as HMAC-SHA1 (see Krawczyk et sent.
    [Show full text]
  • Chaffing and Winnowing’’ & Crypto Policy Comments
    ``Chaffing and Winnowing’’ & Crypto Policy Comments Ronald L. Rivest Cryptography and Information Security Group MIT Lab for Computer Science April 1998 Outline Confidentiality and Authentication Chaffing and Winnowing Comments on Crypto Policy Confidentiality A message is confidential if it can only be understood by the intended recipient. (An eavesdropper does not get the message. There are two standard ways of achieving confidentiality: – steganography: hiding the real message inside a larger one – encryption: transforming the plaintext message into ciphertext, using cryptography We add a third: chaffing and winnowing. Authentication A message has been authenticated if the recipient can reliably identify the sender and confirm that the message was received exactly as sent. There are two standard authentication techniques: – Public-key Digital Signatures (e.g. RSA, DSS) – Message Authentication Codes (or MAC’s, e.g. HMAC), based on a secret key shared between sender and receiver. Confidentiality vs Authentication These are traditionally viewed as separate goals, achievable by separate techniques. ``Key recovery’’ advocates normally focus on encryption, and ignore escrow or recovery of authentication keys. The new chaffing technique demonstrates that you can obtain confidentiality using Message Authentication Codes. How do MAC’s work? Divide a message into blocks (packets). Append to each block a MAC computed from message block and secret key: Message = “Hi Alice” MAC = “89310” Message = “See you soon” MAC = “32451” Message = “Love, Bob” MAC = “24550” Receiver can re-compute, and check, each MAC using the same secret key. Blocks with bad MAC’s can be discarded as damaged or forged. MAC’s are not encryption An eavesdropper still sees the message.
    [Show full text]
  • Alternative Formats If You Require This Document in an Alternative Format, Please Contact: [email protected]
    Citation for published version: Larkin, J 2006, Implementation of chaffing and winnowing: Providing confidentiality without encryption. Computer Science Technical Reports, no. CSBU-2006-10, Department of Computer Science, University of Bath. Publication date: 2006 Link to publication ©The Author June 2006 University of Bath Alternative formats If you require this document in an alternative format, please contact: [email protected] General rights Copyright and moral rights for the publications made accessible in the public portal are retained by the authors and/or other copyright owners and it is a condition of accessing publications that users recognise and abide by the legal requirements associated with these rights. Take down policy If you believe that this document breaches copyright please contact us providing details, and we will remove access to the work immediately and investigate your claim. Download date: 05. Oct. 2021 Department of Computer Science Technical Report Undergraduate Dissertation: Implementation of Chaffing and Winnowing: providing confidentiality without encryption John Larkin Technical Report 2006-10 June 2006 ISSN 1740-9497 Copyright ­c June 2006 by the authors. Contact Address: Department of Computer Science University of Bath Bath, BA2 7AY United Kingdom URL: http://www.cs.bath.ac.uk ISSN 1740-9497 Implementation of Chaffing and Winnowing: providing confidentiality without encryption John Larkin BSc Computer Science 2006 Implementation of Chaffing and Winnowing: providing confiden- tiality without encryption Submitted by John Larkin COPYRIGHT Attention is drawn to the fact that copyright of this dissertation rests with its author. The Intellectual Property Rights of the products produced as part of the project belong to the University of Bath (see http://www.bath.
    [Show full text]
  • The Regulation of the Internet Encryption Technologies: Separating the Wheat from the Chaff, 17 J
    The John Marshall Journal of Information Technology & Privacy Law Volume 17 Issue 3 Journal of Computer & Information Law Article 8 - Spring 1999 Spring 1999 The Regulation of the Internet Encryption Technologies: Separating the Wheat from the Chaff, 17 J. Marshall J. Computer & Info. L. 945 (1999) Kurt M. Saunders Follow this and additional works at: https://repository.law.uic.edu/jitpl Part of the Computer Law Commons, Internet Law Commons, Privacy Law Commons, and the Science and Technology Law Commons Recommended Citation Kurt M. Saunders, The Regulation of the Internet Encryption Technologies: Separating the Wheat from the Chaff, 17 J. Marshall J. Computer & Info. L. 945 (1999) https://repository.law.uic.edu/jitpl/vol17/iss3/8 This Article is brought to you for free and open access by UIC Law Open Access Repository. It has been accepted for inclusion in The John Marshall Journal of Information Technology & Privacy Law by an authorized administrator of UIC Law Open Access Repository. For more information, please contact [email protected]. THE REGULATION OF INTERNET ENCRYPTION TECHNOLOGIES: SEPARATING THE WHEAT FROM THE CHAFF by KURT M. SAUNDERSt "His winnowing fork is in his hand ... gathering his wheat.., and burning up the chaff .... ." I. INTRODUCTION Federal efforts to strictly regulate the export of strong digital en- cryption continue to be outpaced by the realities of technological innova- tion and diffusion. The widespread use of computers and networks to facilitate personal communications and commercial transactions 2 has moved the need for strong encryption technology to the forefront. Cryp- tography has a long history as a tool for protecting the secrecy of commu- nications, most typically in the context of military operations.
    [Show full text]
  • Downloaded Once Called "Key Escrow," Key Recovery Means That from the Internet
    Order Code IB96039 CRS Issue Brief for Congress Received through the CRS Web Encryption Technology: Congressional Issues Updated July 9, 1998 Richard M. Nunno Science, Technology, and Medicine Division Congressional Research Service The Library of Congress CONTENTS SUMMARY MOST RECENT DEVELOPMENTS BACKGROUND AND ANALYSIS Encryption, Computers, and Electronic Communications Clinton Administration Policy Current Policy Industry Reaction NRC Report Action in the 105th Congress H.R. 695: Security and Freedom Through Encryption (SAFE) S. 376: Encrypted Communications Privacy Act (ECPA) S. 377: Promotion of Commerce On-Line in the Digital Era (PRO-CODE) S. 909: The Secure Public Networks Act Senate Judiciary Committee Hearings S. 2067: Encryption Protects the Rights of Individuals from Violation and Abuse in Cyberspace (E-PRIVACY) Act H.R. 1903: The Computer Security Enhancement Act of 1997 H.R. 1964: Communications Privacy and Consumer Empowerment Act Issues Key Recovery Export Restrictions Domestic Use LEGISLATION IB96039 07-09-98 Encryption Technology: Congressional Issues SUMMARY Fundamentally, the controversy over nies believe U.S. export policies hurt their encryption concerns what access the govern- market share while helping foreign companies ment should have to encrypted stored com- that are not subject to export restrictions. puter data or electronic communications Many businesses and consumer groups agree (voice and data, wired and wireless) for law that key recovery is desirable when keys are enforcement purposes. lost, stolen, or corrupted, but want market forces—not government directives—to drive Encryption and decryption are methods the development of key recovery encryption of using cryptography to protect the confiden- products. They also object to government tiality of data and communications.
    [Show full text]
  • (12) United States Patent (10) Patent No.: US 9.258,116 B2 Moskowitz Et Al
    USOO9258116B2 (12) United States Patent (10) Patent No.: US 9.258,116 B2 Moskowitz et al. (45) Date of Patent: *Feb. 9, 2016 (54) SYSTEMAND METHODS FOR PERMITTING (58) Field of Classification Search OPEN ACCESS TO DATA OBJECTS AND FOR None SECURING DATA WITHIN THE DATA See application file for complete search history. OBJECTS (56) References Cited (71) Applicant: BLUE SPIKE, INC., Sunny Isles Beach, FL (US) U.S. PATENT DOCUMENTS 3,947,825 A 3, 1976 Cassada (72) Inventors: Scott A. Moskowitz, Ft. Lauderdale, FL 10/1976 Waggener (US); Mike W. Berry, Seattle, WA (US) 3,984,624 A (Continued) (73) Assignee: WISTARIA TRADING LTD, Hamilton (BM) FOREIGN PATENT DOCUMENTS EP 6, 1990 (*) Notice: Subject to any disclaimer, the term of this EP 10, 1993 patent is extended or adjusted under 35 U.S.C. 154(b) by 0 days. (Continued) This patent is Subject to a terminal dis OTHER PUBLICATIONS claimer. EPO Application No. 96919405.9, entitled “Steganographic Method (21) Appl. No.: 14/271.559 and Device'; published as EP0872073 (A2), Oct. 21, 1998. (Continued) (22) Filed: May 7, 2014 Primary Examiner — Brandon Hoffman (65) Prior Publication Data (74) Attorney, Agent, or Firm — Neifeld IP Law, PC US 2014/0241524 A1 Aug. 28, 2014 (57) ABSTRACT Related U.S. Application Data A system and methods for permitting open access to data (63) Continuation of application No. 13/794,742, filed on objects and for securing data within the data objects is dis Mar. 11, 2013, now Pat. No. 8,798,268, which is a closed. According to one embodiment of the present inven continuation of application No.
    [Show full text]
  • File Format Extension Through Steganography
    FILE FORMAT EXTENSION THROUGH STEGANOGRAPHY Presented to the Graduate Council of Texas State University‐San Marcos in Partial Fulfillment of the Requirements for the Degree Master of SCIENCE by Blake W. Ford, B.S. San Marcos, Texas May 2010 FILE FORMAT EXTENSION THROUGH STEGANOGRAPHY Committee Members Approved: _________________________ Khosrow Kaikhah, Chair _________________________ Mina Guirguis _________________________ Mark McKenney Approved: ____________________________________ J. Michael Willoughby Dean of the Graduate College ACKNOWLEDGEMENTS First and foremost I would like to thank all of the family and friends, of whom there are too many to name individually, that have supported my studies over the past few years. A special thanks is in order to my wife, Kasey. Without her love and support, none of this would have been possible. Thanks are also in order to the Texas State University‐San Marcos faculty members who took the time and effort to review my work. Dr. Khosrow Kaikhah contributed significantly to this document as the committee chair and deserves extra attention. This manuscript was submitted on April, 13th 2010. iii TABLE OF CONTENTS Page ACKNOWLEDGEMENTS ............................................................................... iii LIST OF TABLES........................................................................................... vii LIST OF FIGURES........................................................................................ viii ABSTRACT.....................................................................................................ix
    [Show full text]
  • Performance Evaluation of Hybrid Cryptography System
    International Journal of Engineering Trends and Technology (IJETT) – Volume54 Number 4 - December2017 Performance Evaluation of Hybrid Cryptography System #1 *2 Er. Parvin Shaikh , Dr. SonaliPatil #Student, *Professor, Department of Information Technology (Information Security), K.J. Somaiya College of Engineering (Aff. To Mumbai University), Vidyavihar East, Mumbai, India Abstract- The spectacular growth of the Internet has cryptography algorithm to calculate the performance make an increased awareness of an interest in evaluation among selected algorithm by calculating security issues. Although Security is measure concern encryption time, decryption time and throughput for over internet, many applications have been developed each algorithm to identify which algorithms and designed without considering main objectives of outperforms others in term ofparameters decided for information security that is confidentiality, comparison. This paper is organized as follows: authentication, and privacy. As our daily activities Section 2 of this paper describes become more and more reliant upon data networks, ProposedArchitecture Section 3 highlights parameters the importance of an understanding of Such security used for the comparison evaluation. Section 4 issues will also increase. Cryptography plays describes experimental setting and data required for important role in secure data communication. First the Evaluation, results are shown in section 5 and Phase of this paper presents the development of Section 6 presents conclusion of the research work. Hybrid Cryptography system which contains Chaffing & Winnowing Algorithm, Diffie-Hellman Key II. PROPOSED ARCHITECTURE Exchange Algorithm and Advanced Encryption Standard (AES)algorithm and second phase of the Considering the anomalies in the existing system paper shows the performance evaluation of AES, computerization of the whole activity is being Chaffing &Winnowing, Diffie Hellman Key Exchange suggested after initial understanding and analysis of Algorithm and Hybrid Cryptographic Algorithms.
    [Show full text]