Privacy Amplification over a Non-Authentic Public Channel

SL Liu,HCA van Tilborg

DOI: https://doi.org/10.1109/isit.2002.1023594

2002-01-01

Abstract:We show how to apply a proper authentication code to privacy amplification to detect Eve's active attacks, when independent partially secret keys are available.

What problem does this paper attempt to address?

Privacy Amplification Against Active Attacks with Strong Robustness

SL Liu,YM Wang

DOI: https://doi.org/10.1049/el:19990262

1999-01-01

Electronics Letters

Abstract:An improvement is made to a recently proposed protocol by Wolf. Privacy amplification is achieved for communication over an insecure and non-authentic channel for sufficiently large n, the size of string S shared by the two parties, when the adversary's Renyi entropy about S exceeds only n/2 rather than 2n/3.
Authenticating Smart Home Devices Via Home Limited Channels

Xiaoyu Ji,Chaohao Li,Xinyan Zhou,Juchuan Zhang,Yanmiao Zhang,Wenyuan Xu

DOI: https://doi.org/10.1145/3399432

2020-01-01

ACM Transactions on Internet of Things

Abstract:Nowadays, most Internet of Things devices in smart homes rely on radio frequency channels for communication, making them exposed to various attacks such as spoofing and eavesdropping attacks. Existing methods using encryption keys may be inapplicable on these resource-constrained devices that cannot afford the computationally expensive encryption operations. Thus, in this article, we design a key-free communication method for such devices in a smart home. In particular, we introduce the Home-limited Channel (HLC) that can be accessed only within a house yet inaccessible for outside-house attackers. Utilizing HLCs, we propose HlcAuth, a challenge-response mechanism to authenticate the communications between smart devices without keys. The advantages of HlcAuth are low cost, lightweight as well as key-free, and requiring no human intervention. According to the security analysis, HlcAuth can defeat replay attacks, message-forgery attacks, and man-in-the-middle (MiTM) attacks, among others. We further evaluate HlcAuth in four different physical scenarios, and results show that HlcAuth achieves 100% true positive rate (TPR) within 4.2m for in-house devices while 0% false positive rate (FPR) for outside attackers, i.e., guaranteeing a high-level usability and security for in-house communications. Finally, we implement HlcAuth in both single-room and multi-room scenarios.
STPrivacy: Spatio-Temporal Privacy-Preserving Action Recognition

Ming Li,Xiangyu Xu,Hehe Fan,Pan Zhou,Jun Liu,Jia-Wei Liu,Jiahe Li,Jussi Keppo,Mike Zheng Shou,Shuicheng Yan

DOI: https://doi.org/10.1109/iccv51070.2023.00471

2023-01-01

Abstract:Existing methods of privacy-preserving action recognition (PPAR) mainly focus on frame-level (spatial) privacy removal through 2D CNNs. Unfortunately, they have two major drawbacks. First, they may compromise temporal dynamics in input videos, which are critical for accurate action recognition. Second, they are vulnerable to practical attacking scenarios where attackers probe for privacy from an entire video rather than individual frames. To address these issues, we propose a novel framework STPrivacy to perform video-level PPAR. For the first time, we introduce vision Transformers into PPAR by treating a video as a tubelet sequence, and accordingly design two complementary mechanisms, i.e., sparsification and anonymization, to remove privacy from a spatio-temporal perspective. In specific, our privacy sparsification mechanism applies adaptive token selection to abandon action-irrelevant tubelets. Then, our anonymization mechanism implicitly manipulates the remaining action-tubelets to erase privacy in the embedding space through adversarial learning. These mechanisms provide significant advantages in terms of privacy preservation for human eyes and action-privacy trade-off adjustment during deployment. We additionally contribute the first two large-scale PPAR benchmarks, VP-HMDB51 and VP-UCF101, to the community. Extensive evaluations on them, as well as two other tasks, validate the effectiveness and generalization capability of our framework.
Authentication codes from ε-ASU hash functions with partially secret keys

Shengli Liu,van Hca Henk Tilborg,Jian Weng,K Chen

IF: 1.019

2014-01-01

Chinese Journal of Electronics

Abstract:An authentication code can be constructed with a family of e-Almost strong universal (e-ASU) hash functions, with the index of hash functions as the authentication key. This paper considers the performance of authentication codes from e-ASU, when the authentication key is only partially secret. We show how to apply the result to privacy amplification against active attacks in the scenario of two independent partially secret strings shared between a sender and a receiver. Keywords: Authentication code; Information theory; Privacy amplification; Unconditional security
Thinking Inside The Box: Privacy Against Stronger Adversaries

Eldon Chung

2024-06-24

Abstract:In this thesis, we study extensions of statistical cryptographic primitives. In particular we study leakage-resilient secret sharing, non-malleable extractors, and immunized ideal one-way functions. The thesis is divided into three main chapters. In the first chapter, we show that 2-out-of-2 leakage resilient (and also non-malleable) secret sharing requires randomness sources that are also extractable. This rules out the possibility of using min-entropic sources. In the second, we introduce collision-resistant seeded extractors and show that any seeded extractor can be made collision resistant at a small overhead in seed length. We then use it to give a two-source non-malleable extractor with entropy rate 0.81 in one source and polylogarithmic in the other. The non-malleable extractor lead to the first statistical privacy amplification protocol against memory tampering adversaries. In the final chapter, we study the hardness of the data structure variant of the 3SUM problem which is motivated by a recent construction to immunise random oracles against pre-processing adversaries. We give worst-case data structure hardness for the 3SUM problem matching known barriers in data structures for adaptive adversaries. We also give a slightly stronger lower bound in the case of non-adaptivity. Lastly, we give a novel result in the bit-probe setting.

Cryptography and Security
Stream Privacy Amplification for Quantum Cryptography

Yizhi Huang,Xingjian Zhang,Xiongfeng Ma

DOI: https://doi.org/10.1103/prxquantum.3.020353

2022-01-01

PRX Quantum

Abstract:Privacy amplification is the key step to guarantee the security of quantum communication. The existing security proofs require the accumulation of a large number of raw key bits for privacy amplification. This is similar to block ciphers in classical cryptography that would delay the final key generation since an entire block must be accumulated ahead of privacy amplification. Moreover, any leftover errors after information reconciliation would corrupt the entire block. By modifying the security proof based on quantum error correction, we develop a stream privacy-amplification scheme, which resembles the classical stream cipher. This scheme can output the final key in a stream way, prevent error from spreading, and hence can put privacy amplification ahead of information reconciliation. The stream scheme can also help to enhance the security of trusted-relay quantum networks and improve the practicality of randomness extraction for quantum random number generators.
Identity Authentication over Noisy Channels

Fanfan Zheng,Zhiqing Xiao,Shidong Zhou,Jing Wang,Lianfen Huang

DOI: https://doi.org/10.3390/e17074940

IF: 2.738

2015-01-01

Entropy

Abstract:Identity authentication is the process of verifying users’ validity. Unlike classical key-based authentications, which are built on noiseless channels, this paper introduces a general analysis and design framework for identity authentication over noisy channels. Specifically, the authentication scenarios of single time and multiple times are investigated. For each scenario, the lower bound on the opponent’s success probability is derived, and it is smaller than the classical identity authentication’s. In addition, it can remain the same, even if the secret key is reused. Remarkably, the Cartesian authentication code proves to be helpful for hiding the secret key to maximize the secrecy performance. Finally, we show a potential application of this authentication technique.
Guaranteed Private Communication With Secret Block Structure

Maxime Ferreira Da Costa,Jianxiu Li,Urbashi Mitra

DOI: https://doi.org/10.1109/tsp.2024.3433527

IF: 4.875

2024-08-21

IEEE Transactions on Signal Processing

Abstract:A novel private communication framework is proposed where privacy is induced by transmitting over a channel instances of linear inverse problems that are identifiable to the legitimate receiver but unidentifiable to an eavesdropper. The gap in identifiability is created in the framework by leveraging secret knowledge between the transmitter and the legitimate receiver. Specifically, the case where the legitimate receiver harnesses a secret block structure to decode a transmitted block-sparse message from underdetermined linear measurements in conditions where classical compressed sensing would provably fail is examined. The applicability of the proposed scheme to practical multiple-access wireless communication systems is discussed. The protocol's privacy is studied under a single transmission, and under multiple transmissions without refreshing the secret block structure. It is shown that, under a specific scaling of the channel dimensions and transmission parameters, the eavesdropper can attempt to overhear the block structure from the fourth-order moments of the channel output. Computation of a statistical lower bound suggests that the proposed fourth-order moment secret block estimation strategy is near optimal. The performance of a spectral clustering algorithm is studied to that end, defining scaling laws on the lifespan of the secret key before the communication is compromised. Finally, numerical experiments corroborating the theoretical findings are conducted.

engineering, electrical & electronic
An Authentication Scheme over Non-authentic Public Channel in Information-Theoretic Secret-Key Agreement

Shengli Liu,Yumin Wang

DOI: https://doi.org/10.1007/3-540-46796-3_29

1999-01-01

Abstract:It is necessary to authenticate the messages over an insecure and non-authentic public channel in information-theoretic secretkey agreement. For a scenario where all three parties receive the output of a binary symmetric source over independent binary symmetric channels as their initial information, an authentication scheme is proposed based on coding theory, which uses the correlated strings between the two communicants to authenticate the messages over the public channel. How to select coding parameters to meet the safety requirements of the authentication scheme is described. This paper also illustrates with an example that when the adversary’s channel is noisier than the communicants’ channels during the initialization phase, such an authentication scheme always exists, and the lower bound of the length of authenticators is closely related to the safety parameters, code rate of the authentication scheme and bit error probabilities of independent noise channels in the initialization phase.
Improving Secrecy Under High Correlation Via Discriminatory Channel Estimation

Ya-Nan Du,Shuai Han,Sai Xu,Cheng Li

DOI: https://doi.org/10.1109/ICC.2018.8422837

2018-01-01

Abstract:In PHY-security, high correlation between main and wiretap channels, which are frequently observed, can cause a significant loss of secrecy. Unfortunately, signal processing techniques at Alice, such as precoding and artificial noise (AN) techniques, are ineffective. Under this circumstance, this paper focuses on a slowly fading and reciprocal channel scenario wherein Alice sends a confidential message to Bob with the transmission overheard by a passive Eve, and all of them are equipped with multiple antennas. To prevent interception and ensure secrecy, we redesign a novel scheme of discriminatory channel estimation (DCE), in which training procedures are developed to limit the channel estimation performance at Eve while producing little effect on Alice and Bob. As a result, Eve's ability to obtain the channel information would deteriorate, thereby effectively increase the difference in decoding the message between Bob and Eve. Simulation results demonstrate the proposed scheme could provide substantial gains with respect to secrecy.
Information-theoretic privacy-preserving user authentication

Narges Kazempour,Mahtab Mirmohseni,Mohammad Reza Aref

DOI: https://doi.org/10.1007/s10207-024-00917-w

2024-11-13

International Journal of Information Security

Abstract:Most of the security services in the connected world of cyber-physical systems necessitate authenticating a large number of nodes privately. In this paper, the private authentication problem is considered which consists of a certificate authority, a verifier (or some verifiers), many legitimate users (provers), and an arbitrary number of attackers. Each legitimate user wants to be authenticated (using his personal key) by the verifier(s), while simultaneously staying completely anonymous (even to the verifier). On the other hand, an attacker must fail to be authenticated. We analyze this problem from an information-theoretic perspective and propose a general interactive information-theoretic model for the problem. As a metric to measure the reliability, we consider the normalized total key rate whose maximization has a trade-off with establishing privacy. The problem is considered in two different scenarios: single-server scenario (only one verifier is considered, to which all the provers are connected) and multi-server scenario ( N verifiers are assumed, where each verifier is connected to a subset of users). For both scenarios, two regimes are considered: finite size regime (i.e., the variables are elements of a finite field) and asymptotic regime (i.e., the variables are considered to have large enough length). We propose achievable schemes that satisfy the completeness, soundness, and privacy properties in both single-server and multi-server scenarios. In the finite size regime, the main idea is to generate the authentication keys according to a secret sharing scheme. We show that the proposed scheme in the special case of multi-server authentication in the finite size regime is optimal. In the asymptotic regime, we use a random binning-based scheme that relies on the joint typicality to generate the authentication keys. Moreover, providing the converse proof, we show that our scheme achieves capacity in the asymptotic regime both in the single-server and multi-server scenarios.

computer science, information systems, theory & methods, software engineering
Multi-message Authentication over Noisy Channel with Polar Codes

Dajiang Chen,Nan Cheng,Ning Zhang,Kuan Zhang,Zhiguang Qin,Xuemin (Sherman) Shen

DOI: https://doi.org/10.1109/mass.2017.70

2017-01-01

Abstract:In this paper, we investigate multi-message authentication to combat adversaries with infinite computational capacity. An authentication framework over a wiretap channel $(W_1,W_2)$ is proposed to achieve information-theoretic security with the same key. The proposed framework bridges the two research areas in physical (PHY) layer security: secure transmission and message authentication. Specifically, the sender Alice first transmits message $M$ to the receiver Bob over $(W_1,W_2)$ with an error correction code; then Alice employs a hash function (i.e., $\varepsilon$-AWU$_2$ hash functions) to generate a message tag $S$ of message $M$ using key $K$, and encodes $S$ to a codeword $X^n$ by leveraging an existing strongly secure channel coding with exponentially small (in code length $n$) average probability of error; finally, Alice sends $X^n$ over $(W_1,W_2)$ to Bob who authenticates the received messages. We develop a theorem regarding the requirements/conditions for the authentication framework to be information-theoretic secure for authenticating a polynomial number of messages in terms of $n$. Based on this theorem, we propose an authentication protocol that can guarantee the security requirements, and prove its authentication rate can approach infinity when $n$ goes to infinity. Furthermore, we design and implement an efficient and feasible authentication protocol over binary symmetric wiretap channel (BSWC) by using \emph{Linear Feedback Shifting Register} based (LFSR-based) hash functions and strong secure polar code. Through extensive experiments, it is demonstrated that the proposed protocol can achieve low time cost, high authentication rate, and low authentication error rate.
Authentication Codes From-Asu Hash Functions with Partially Secret Keys

Liu Shengli,Henk van Tilborg,Weng Jian,Chen Kefei

IF: 1.019

2014-01-01

Chinese Journal of Electronics

Abstract:An authentication code can be constructed with a family of epsilon-Almost strong universal (epsilon-ASU) hash functions, with the index of hash functions as the authentication key. This paper considers the performance of authentication codes from epsilon-ASU, when the authentication key is only partially secret. We show how to apply the result to privacy amplification against active attacks in the scenario of two independent partially secret strings shared between a sender and a receiver.
Quantum Privacy Amplification and the Security of Quantum Cryptography over Noisy Channels.

D Deutsch,A Ekert,R Jozsa,C Macchiavello,S Popescu,A Sanpera

DOI: https://doi.org/10.1103/physrevlett.77.2818

IF: 8.6

1996-01-01

Physical Review Letters

Abstract:Existing quantum cryptographic schemes are not, as they stand, operable in the presence of noise on the quantum communication channel. Although they become operable if they are supplemented by classical privacy-amplification techniques, the resulting schemes are difficult to analyze and have not been proved secure. We introduce the concept of quantum privacy amplification and a cryptographic scheme incorporating it which is provably secure over a noisy channel. The scheme uses an ''entanglement purification'' procedure which, because it requires only a few quantum controlled-not and single-qubit operations, could be implemented using technology that is currently being developed.
Message Authentication over Noisy Channels.

Fanfan Zheng,Zhiqing Xiao,Shidong Zhou,Jing Wang,Lianfen Huang

DOI: https://doi.org/10.3390/e17010368

IF: 2.738

2015-01-01

Entropy

Abstract:The essence of authentication is the transmission of unique and irreproducible information. In this paper, the authentication becomes a problem of the secure transmission of the secret key over noisy channels. A general analysis and design framework for message authentication is presented based on the results of Wyner’s wiretap channel. Impersonation and substitution attacks are primarily investigated. Information-theoretic lower and upper bounds on the opponent’s success probability are derived, and the lower bound and the upper bound are shown to match. In general, the fundamental limits on message authentication over noisy channels are fully characterized. Analysis results demonstrate that introducing noisy channels is a reliable way to enhance the security of authentication.
Strong Secrecy From Channel Resolvability

Matthieu R. Bloch,J. Nicholas Laneman

DOI: https://doi.org/10.1109/tit.2013.2283722

IF: 2.5

2013-12-01

IEEE Transactions on Information Theory

Abstract:We analyze physical-layer security based on the premise that the coding mechanism for secrecy over noisy channels is tied to the notion of channel resolvability. Instead of considering capacity-based constructions, which associate to each message a subcode that operates just below the capacity of the eavesdropper's channel, we consider channel-resolvability-based constructions, which associate to each message a subcode that operates just above the resolvability of the eavesdropper's channel. Building upon the work of Csiszár and Hayashi, we provide further evidence that channel resolvability is a powerful and versatile coding mechanism for secrecy by developing results that hold for strong secrecy metrics and arbitrary channels. Specifically, we show that at least for symmetric wiretap channels, random capacity-based constructions fail to achieve the strong secrecy capacity, while channel-resolvability-based constructions achieve it. We then leverage channel resolvability to establish the secrecy-capacity region of arbitrary broadcast channels with confidential messages and a cost constraint for strong secrecy metrics. Finally, we specialize our results to study the secrecy capacity of wireless channels with perfect channel state information (CSI), mixed channels, and compound channels with receiver CSI, as well as the secret-key capacity of source models for secret-key agreement. By tying secrecy to channel resolvability, we obtain achievable rates for strong secrecy metrics with simple proofs.

computer science, information systems,engineering, electrical & electronic
Collusion-Tolerable Privacy-Preserving Sum and Product Calculation without Secure Channel

Taeho Jung,Xiang-Yang Li,Meng Wan

DOI: https://doi.org/10.1109/TDSC.2014.2309134

2015-01-01

Abstract:Much research has been conducted to securely outsource multiple parties' data aggregation to an untrusted aggregator without disclosing each individual's privately owned data, or to enable multiple parties to jointly aggregate their data while preserving privacy. However, those works either require secure pair-wise communication channels or suffer from high complexity. In this paper, we consider how an external aggregator or multiple parties can learn some algebraic statistics (e.g., sum, product) over participants' privately owned data while preserving the data privacy. We assume all channels are subject to eavesdropping attacks, and all the communications throughout the aggregation are open to others. We first propose several protocols that successfully guarantee data privacy under semi-honest model, and then present advanced protocols which tolerate up to k passive adversaries who do not try to tamper the computation. Under this weak assumption, we limit both the communication and computation complexity of each participant to a small constant. At the end, we present applications which solve several interesting problems via our protocols.
Improving Secrecy with Nearly Collinear Main and Wiretap Channels via a Cooperative Jamming Relay.

Shuai Han,Sai Xu,Weixiao Meng,Cheng Li

2017-01-01

Abstract: In physical layer security (PHY-security), the frequently observed high correlation between the main and wiretap channels can cause a significant loss of secrecy. This paper investigates a slow fading scenario, where a transmitter (Alice) sends a confidential message to a legitimate receiver (Bob) while a passive eavesdropper (Eve) attempts to decode the message from its received signal. It is assumed that Alice is equipped with multiple antennas while Bob and Eve each have a single antenna (i.e., a MISOSE system). In a MISOSE system, high correlation results in nearly collinear main and wiretap channel vectors, which help Eve to see and intercept confidential information. Unfortunately, the signal processing techniques at Alice, such as beamforming and artificial noise (AN), are helpless, especially in the extreme case of completely collinear main and wiretap channel vectors. On this background, we first investigate the achievable secrecy outage probability via beamforming and AN at Alice with the optimal power allocation between the information-bearing signal and AN. Then, an ingenious model, in which a cooperative jamming relay (Relay) is introduced, is proposed to effectively mitigate the adverse effects of high correlation. Based on the proposed model, the power allocation between the information-bearing signal at Alice and the AN at Relay is also studied to maximize secrecy. Finally, to validate our proposed schemes, numerical simulations are conducted, and the results show that a significant performance gain with respect to secrecy is achieved.
Exchanging Keys with Authentication and Identity Protection for Secure Voice Communication without Side-channel

Piotr Krasnowski,Jerome Lebrun,Bruno Martin

DOI: https://doi.org/10.5281/zenodo.6791340

2022-11-14

Abstract:Motivated by an increasing need for privacy-preserving voice communications, we investigate here the original idea of sending encrypted data and speech in the form of pseudo-speech signals in the audio domain. Being less constrained than military ``Crypto Phones'' and allowing genuine public evaluation, this approach is quite promising for public unsecured voice communication infrastructures, such as 3G cellular network and VoIP.A cornerstone of secure voice communications is the authenticated exchange of cryptographic keys with sole resource the voice channel, and neither Public Key Infrastructure (PKI) nor Certificate Authority (CA). In this paper, we detail our new robust double authentication mechanism based on signatures and Short Authentication Strings (SAS) ensuring strong authentication between the users while mitigating errors caused by unreliable voice channels and also identity protection against passive eavesdroppers. As symbolic model, our protocol has been formally proof-checked for security and fully validated by Tamarin Prover.

Cryptography and Security,Signal Processing

Privacy Amplification over a Non-Authentic Public Channel

Privacy Amplification Against Active Attacks with Strong Robustness

Authenticating Smart Home Devices Via Home Limited Channels

STPrivacy: Spatio-Temporal Privacy-Preserving Action Recognition

Authentication codes from ε-ASU hash functions with partially secret keys

Thinking Inside The Box: Privacy Against Stronger Adversaries

Stream Privacy Amplification for Quantum Cryptography

Identity Authentication over Noisy Channels

Guaranteed Private Communication With Secret Block Structure

An Authentication Scheme over Non-authentic Public Channel in Information-Theoretic Secret-Key Agreement

Improving Secrecy Under High Correlation Via Discriminatory Channel Estimation

Information-theoretic privacy-preserving user authentication

Multi-message Authentication over Noisy Channel with Polar Codes

Authentication Codes From-Asu Hash Functions with Partially Secret Keys

Quantum Privacy Amplification and the Security of Quantum Cryptography over Noisy Channels.

Message Authentication over Noisy Channels.

Strong Secrecy From Channel Resolvability

Collusion-Tolerable Privacy-Preserving Sum and Product Calculation without Secure Channel

Improving Secrecy with Nearly Collinear Main and Wiretap Channels via a Cooperative Jamming Relay.

Exchanging Keys with Authentication and Identity Protection for Secure Voice Communication without Side-channel