Attacks and Defenses for Single-Stage Residue Number System PRNGs
| Autor: | Alan J. Michaels, Amy Vennos, Kiernan B. George |
|---|---|
| Jazyk: | angličtina |
| Rok vydání: | 2021 |
| Předmět: |
Technology
Computer science 0211 other engineering and technologies 02 engineering and technology Residue number system QA76.75-76.765 Computer Science::Hardware Architecture Black box 0202 electrical engineering electronic engineering information engineering Code (cryptography) Computer software Hardware_ARITHMETICANDLOGICSTRUCTURES Computer Science::Cryptography and Security Pseudorandom number generator Conditional entropy 021110 strategic defence & security studies 020208 electrical & electronic engineering pseudorandom number generator (PRNG) reverse engineering Noise Key (cryptography) Q300-390 residue number system (RNS) White box Algorithm Cybernetics |
| Zdroj: | IoT Volume 2 Issue 3 Pages 20-400 IoT, Vol 2, Iss 20, Pp 375-400 (2021) |
| ISSN: | 2624-831X |
| DOI: | 10.3390/iot2030020 |
| Popis: | This paper explores the security of a single-stage residue number system (RNS) pseudorandom number generator (PRNG), which has previously been shown to provide extremely high-quality outputs when evaluated through available RNG statistical test suites or in using Shannon and single-stage Kolmogorov entropy metrics. In contrast, rather than blindly performing statistical analyses on the outputs of the single-stage RNS PRNG, this paper provides both white box and black box analyses that facilitate reverse engineering of the underlying RNS number generation algorithm to obtain the residues, or equivalently key, of the RNS algorithm. We develop and demonstrate a conditional entropy analysis that permits extraction of the key given a priori knowledge of state transitions as well as reverse engineering of the RNS PRNG algorithm and parameters (but not the key) in problems where the multiplicative RNS characteristic is too large to obtain a priori state transitions. We then discuss multiple defenses and perturbations for the RNS system that fool the original attack algorithm, including deliberate noise injection and code hopping. We present a modification to the algorithm that accounts for deliberate noise, but rapidly increases the search space and complexity. Lastly, we discuss memory requirements and time required for the attacker and defender to maintain these defenses. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|