Website of the ENIGMA Journal http://cdciber.enigmajournal.unb.br ENIGMA — Brazilian Journal of Information Security and Cryptography Eduardo Takeo Ueda Mirela Sechi Moretti Annoni Notare Rafael Timóteo de Sousa Júnior VOLUME 1 ISSUE 1 Brasília — Brazil 2014 ENIGMA — Brazilian Journal of Information Security and Cryptography Editors Editor in Chief Eduardo Takeo Ueda Associate Editors in Chief Mirela Sechi Moretti Annoni Notare Rafael Timóteo de Sousa Júnior Editorial Board André Luiz Moura dos Santos (UECE, Brazil) Carlos Alberto Maziero (UTFPR, Brazil) Denise Hideko Goya (UFABC, Brazil) Eduardo James Pereira Souto (UFAM, Brazil) Eduardo Martins Guerra (INPE, Brazil) Leonardo Barbosa e Oliveira (UFMG, Brazil) Raul Fernando Weber (UFRGS, Brazil) Ruy José Guerra Barretto de Queiroz (UFPE, Brazil) Rafael Rodrigues Obelheiro (UDESC, Brazil) Coordinator of the National Network of Information Security and Cryptography Antônio Carlos Menna Barreto Monclaro Chief of the Cyber Defense Center General de Divisão Paulo Sergio Melo de Carvalho Chief of the Science and Technology Department General de Exército Sinclair James Mayer Brazilian Army Commander General de Exército Enzo Martins Peri Production Matheus Barbosa, Graphic Designer of Logo Marcílio Costa Bezerra, Publication Designer Aristides Sebastião Lopes Carneiro, Linguistic Reviewer SUMMARY Editorial 1 Accepted Papers Unconditionally Secure Quantum Communications via Decoherence-Free Subspaces 4 E. B. Guedes and F. M. de Assis Revocation of User Certificates in a Military Ad Hoc Network 14 J. Jormakka and H. Jormakka Synthetic Steganographic Series and Finance 24 P. C. Ritchey and V. J. Rego Securing Automation Systems against Malware Intrusion 32 R. Fitz and W. A. Halang Invited Papers Isomorphism Theorem and Cryptology 37 R. L. de Carvalho and F. L. de Mello Harnessing Nature’s Randomness: Physical Random Number Generator 47 G. A. Barbosa QC-MDPC McEliece: an Optimized Implementation of a New McEliece Variant 59 H. O. Martins and A. C. A. Nascimento Securing Web Applications: Techniques and Challenges 65 M. Vieira Best Paper of CIBSI 2013 Design of a Set of Software Tools for Side-Channel Attacks 70 A. Fuentes, L. Hernández, A. Martín and B. Alarcos Best Paper of TIBETS 2013 Content Related to Computing Security on Computer Engineering Degree According to International Professional Certificates 83 D. G. Rosado, L. E. Sanchez, D. Mellado and E. F. Medina 1 ENIGMA — Brazilian Journal of Information Security and Cryptography, Vol. 1, No. 1, Sep. 2014 ENIGMA – Brazilian Journal of Information Security and Cryptography Volume 1 Issue 1 September 2014 E. T. Ueda, Editor in Chief, M. S. M. A. Notare, Associate Editor in Chief, and R. T. de Sousa Júnior, Associate Editor in Chief 1 Abstract— This is the first issue of Volume 1 of ENIGMA – Brazilian II. ABOUT VOLUME 1, ISSUE 1 OF ENIGMA Journal of Information Security and Cryptography. Papers submissions were accepted in English, Portuguese and Spanish. In this first issue, 10 In this first issue of Volume 1 of ENIGMA – Brazilian papers are published, of which 4 were peer-reviewed while the other 6 Journal of Information Security and Cryptography – 10 papers were invited and reviwed by the editorial board of the journal. In were published, and in this section we briefly describe the addition, 2 of the 6 invited papers are Best Papers from conferences CIBSI'2013 and TIBETS'2013 respectively. contribution of each of these papers. The first paper entitled “Unconditionally Secure Quantum Keywords— Brazilian Journal, Cryptography, Information Security. Communications via Decoherence-Free Subspaces” by E. B. Guedes and F. M. de Assis, shows how to use decoherence- I. INTRODUCTION free subspaces over collective-noise quantum channels to NIGMA – Brazilian Journal of Information Security convey classical information in perfect secrecy. The results Eand Cryptography – is a technical-scientific publication obtained show how secure communication protocols can be that aims at discussing theoretical aspect contributions and simplified while reducing significantly the communication practical applications results in information security, overhead. cryptography and cyber defense as well as fundamental The second paper entitled “Revocation of User Certificates subjects in support of those issues. in a Military Ad Hoc Network” by J. Jormakka and H. The choice of the name ENIGMA for this publication is Jormakka, presents a scheme for revoking certificates in a related to the ENIGMA cryptography machine. However, the medium-small size semi ad-hoc military network. Note that main reason for this choice is to pay tribute to the the solution can also be used in the civilian applications, such mathematician and computer scientist Alan Mathison Turing as police and crisis management, among others. It describes (1912-1954), considered one of the leading scientist in the the functionalities of a protocol to handle certificates, a set of history of computing. The world as we all know today would policy rules in a node for handling certificates and an analysis probably be very different it were not Turing's scientific how the proposed mechanisms can mitigate attacks on the contributions to humanity. certificate revocation solution. This journal is directed to academia researchers, industry The paper “Synthetic Steganographic Series and Finance” professionals, members of government and military by P. C. Ritchey and V. J. Rego, provide a comprehensive organizations, and all people that have interest in the area of methodology that enables an agent to embed secret messages information security and cryptography in order to disseminate in public data that is sent or broadcasted to a receiving agent. and share their new technologies, scientific discoveries and The experiments have shown that one can develop a relatively research contributions. sophisticated and practical secret-key stego-systems for a The creation of this periodical is due the necessity to solve variety of applications including financial market based a gap represented by the lack of a technical-scientific brazilian applications. journal that emphasizes information security and The paper “Securing Automation Systems against Malware cryptography. In this manner, ENIGMA – Brazilian Journal of Intrusion” by R. Fitz and W. A. Halang, focuses on the fact Information Security and Cryptography – must provide this that computers employed for automation and control purposes demand, publishing papers of high quality within the are today more and more connected to networks, and thereby international state-of-the-art. could be endangered by malware. As such, new architectures Therefore, ENIGMA – Brazilian Journal of Information for their hardware and software as presented in this paper and Security and Cryptography – will fulfill this demand, and will proven to be necessary to solve the security problem due to publish state-of-art and original research papers and timely their intrinsic properties. review articles on the theory, design, and evaluation of all The paper entitled “Isomorphism Theorem and Cryptology” aspects of information, network and system security. by R. L. de Carvalho and F. L. de Mello, presents a theory of computational study based on recursive functions computability and presents innovative parallel mechanism 1 E. T. Ueda, Senac University Center of São Paulo, [email protected] relevant to enhance the performance of cryptography schemes. M. S. M. A. Notare, IEEE Latin America Transactions Editor in Chief, The main issue, as discussed in this paper, is closley related to IEEE South Brazil, [email protected] the Isomorphism Theorem which supports the Church-Turing R. T. de Sousa Júnior, University of Brasilia, [email protected] ENIGMA — Brazilian Journal of Information Security and Cryptography, Vol. 1, No. 1, Sep. 2014 2 thesis and provides a connection between cryptology and III. CONCLUSION linguistics. ENIGMA – Brazilian Journal of Information Security The paper entitled “Harnessing Nature's Randomness: and Cryptography – is a young publication but the beginning Physical Random Number Generator” by G. A. Barbosa, follow the best practices adopted by IEEE Transactions presents some guidelines for construction of a fast publications. It is hoped that soon this journal will become an (telecommunication speed) Physical Random Number icon of reference among the leading international publication Generator. It discusses the fundamental physical elements dedicated to information security and cryptography. involved, technicalities of signal recording, its limitations, and With the creation of this journal the Brazil a considerable the final bit extraction The need for randomness tests is step toward the future, because ENIGMA journal is an emphasized and the impossibility of guaranteeing true important tool for communication and integration of randomness of a finite sequence is discussed. knowledge between universities, research centers, industries, The paper “QC-MDPC McEliece: an Optimized government or military institutions around the world. Implementation of a New McEliece Variant” by H. O. Martins Moreover, threats to security and privacy of information are and A. C. A. Nascimento, presents the implementation of an the enemy of any nation, which justifies this creation of this optimized version of a McEliece variant. The McEliece ENIGMA journal, indeed a unique initiatives for Brazil. cryptosystem is an example of code-based cryptography ACKNOWLEDGEMENTS which is an alternative to the most popular