Usage of Mixed Private-key Cryptography in the Safe Operation of Digital Library

韩懿,周宗恒,肖复军,施伯乐,楼荣生

DOI: https://doi.org/10.3969/j.issn.1000-3428.2001.07.014

2001-01-01

Abstract:Based on the PKI and symmetric key cryptography, we can work out mixed key cryptography, this article discussed how to use it for the digital library's safe operation. ;

What problem does this paper attempt to address?

An Implementation Suite for a Hybrid Public Key Infrastructure

Jason Chia,Swee-Huay Heng,Ji-Jian Chin,Syh-Yuan Tan,Wei-Chuen Yau

DOI: https://doi.org/10.3390/sym13081535

2021-08-20

Symmetry

Abstract:Public key infrastructure (PKI) plays a fundamental role in securing the infrastructure of the Internet through the certification of public keys used in asymmetric encryption. It is an industry standard used by both public and private entities that costs a lot of resources to maintain and secure. On the other hand, identity-based cryptography removes the need for certificates, which in turn lowers the cost. In this work, we present a practical implementation of a hybrid PKI that can issue new identity-based cryptographic keys for authentication purposes while bootstrapping trust with existing certificate authorities. We provide a set of utilities to generate and use such keys within the context of an identity-based environment as well as an external environment (i.e., without root trust to the private key generator). Key revocation is solved through our custom naming design which currently supports a few scenarios (e.g., expire by date, expire by year and valid for year). Our implementation offers a high degree of interoperability by incorporating X.509 standards into identity-based cryptography (IBC) compared to existing works on hybrid PKI–IBC systems. The utilities provided are minimalist and can be integrated with existing tools such as the Enterprise Java Bean Certified Authority (EJBCA).
Heterogeneous Signcryption Scheme Supporting Equality Test from PKI to CLC toward IoT

Yingzhe Hou,Xin Huang,Yanan Chen,Sachin Kumar,Hu Xiong

DOI: https://doi.org/10.1002/ett.4190

IF: 3.6

2020-12-10

Transactions on Emerging Telecommunications Technologies

Abstract:<p>The prosperity of Internet of Things (IoT) has brought numerous advantages to individuals and organizations. Since the transmission channel is usually considered as untrusted, the notion of signcryption seems to be the desired method to ease the defect. Nevertheless, this primitive inevitably faces the new obstacle that how to search the required data without decrypting it. Therefore, inheriting the excellence of signcryption and equality test, we present a heterogeneous signcryption protocol supporting the equality test from public key infrastructure (PKI) to certificateless cryptosystem (CLC) toward IoT environment (PK‐CLET). In this way, the introduced construction not only preserves the integrity, confidentiality and unforgeability of data, but also allows the cloud server to perform the equality test on different ciphertexts. Moreover, the security of PK‐CLET as well as the performance evaluation are both shown that it is more suitable for IoT.</p>

telecommunications
Implementation of License File Scheme Through Modified Digital Signature Scheme Based on PKI

YANG Zhi-cun,XU Xi-bing,LI Yun-zhou,DING Guo-peng

DOI: https://doi.org/10.3969/j.issn.1005-1228.2011.02.011

2011-01-01

Abstract:There are two main methods,i.e.License Key and License File in software copyrights protection area based on soft mode.This paper constructed digital signature adopting public key cryptography technique and Hashing,and then proposed a new license flie generation and validation system,and also gave detailed design and implemention based on Libgcrypt which belongs to GNU.This system is easier and safer to use.
Integration of Quantum-Safe Algorithms into X.509v3 Certificates

Weijia Xue,Congli Wang,Jingran Wang

DOI: https://doi.org/10.1109/ICETCI57876.2023.10176713

2023-05-26

Abstract:Public key cryptography has become an essential tool for protecting today’s network traffic. Algorithms such as RSA and ECC, based on the mathematical problems of integer factorization or discrete logarithm, are commonly used However, these problems can be solved in polynomial time on a large-scale quantum computer with Shor’s algorithm. To counter this threat, the cryptography community is actively developing post-quantum cryptography (PQC). To enable public key cryptography algorithms, including PQC algorithms, it is necessary to solve a problem of associating the cryptographic key with the entity it belongs to, usually done through public key infrastructure (PKI) and digital certifica In this paper, we explore how to integrate quantum-safe algorithms into X.509v3 certificates, analyze the schemes for migrating to quantum-safe certificates, compare them, and provide migration recommendations.

Computer Science
The LDAP-based application within PKI for campus networks

骆俐倩,安常青,李学农

DOI: https://doi.org/10.3969/j.issn.1000-7024.2002.03.015

2002-01-01

Abstract:With the rapid growth of internet and enterprises on a global scale,the use of directories as accessible repositories provides a flexible and scaleable solution for gathering,storing and accessing information. The function of directories within a PKI is to provide rapid,easy access to the information necessary for the secure identification and verification of any entity within a network area. This article will do some discussion and research on a LDAP-based application within PKI designed for campus networks.
Application of PKI Technology to Kunming Power Supply Bureau

ZHAO Yang

DOI: https://doi.org/10.3969/j.issn.1672-4844.2012.09.018

2012-01-01

Abstract:To reduce security risks of business application systems at a maximum extent, and fully ensure them security, this paper describes the construction of a unified PKI/CA digital identity certification system with the Public Key Infrastructure (PKI) technology as the core. The system uses a unified identity certification method for information system accesses, effectively integrates the PKI/CA system with information application systems, and solves complex security management problems for business systems. The system has been put into operation in Kunming power supply bureau, which builds an information security basis platform for enterprise’s applications, and provides a reliable security standard for enterprise informatization construction and application system development.
Public Key Authenticated Encryption with Designated Equality Test and Its Applications in Diagnostic Related Groups

Yuanhao Wang,Qiong Huang,Hongbo Li,Jianye Huang,Guomin Yang,Willy Susilo

DOI: https://doi.org/10.1109/access.2019.2940646

IF: 3.9

2019-01-01

IEEE Access

Abstract:Due to the massive growth of data and security concerns, data of patients would be encrypted and outsourced to the cloud server for feature matching in various medical scenarios, such as personal health record systems, actuarial judgments and diagnostic related groups. Public key encryption with equality test (PKEET) is a useful utility for encrypted feature matching. Authorized tester could perform data matching on encrypted data without decrypting. Unfortunately, due to the limited terminology in medicine, people within institutions may illegally use data, trying to obtain information through traversal methods. In this paper we propose a new PKEET notion, called public-key authenticated encryption with designated equality test (PKAE-DET), which could resist this kind of attacks launched by an inside adversary, known as offline message recovery attacks (OMRA). We propose a concrete construction of PKAE-DET, which only requires one single server to perform the feature matching job securely, and does not require any group mechanism. We prove its security based on some simple mathematical assumptions. Experimental results show that our scheme has efficiency comparable with those PKEET schemes which do not resist OMRA attacks or require group mechanism. We further show how our scheme could be effectively used in diagnostic related groups in medicine, demonstrating its practicability.
A novel method for generating public keys involving matrix operations

Xin Sun,Jiajia Han,Bang Lv,Changhua Sun,Cheng Zeng

DOI: https://doi.org/10.1371/journal.pone.0312690

IF: 3.7

2024-10-31

PLoS ONE

Abstract:With the rise of the Internet of things, the limitations of traditional PKI certificate authentication technology have progressively emerged. Hence, identity-based public key algorithms have been proposed. In this paper, we propose a new approach to generate an identity key, named identity public key (IPK). IPK identity key generation protocol is based on SM2 elliptic curve cryptography and random matrix theory. It builds upon the concept of combined public key (CPK) and resolves the linear collusion issue of CPK as well as the authenticity verification problem of the declared public key of the simplified TF-CPK by enhancing the identity mapping approach. Another main aim of this paper is to prove the security of the IPK identity key generation protocol. Roughly speaking, we verify the security of each part of the private key and the security of the composite private key. We also increase the function and performance comparison with other schemes, such as IBC(SM9) and TF-CPK. Our scheme has the lowest computation cost, which demonstrates its rationality.

multidisciplinary sciences
Public Key Encryption With Equality Test Supporting Flexible Designated Authorization in Cloud Storage

Hao Lin,Fei Gao,Hua Zhang,Zhengping Jin,Wenmin Li,Qiaoyan Wen

DOI: https://doi.org/10.1109/jsyst.2021.3106701

IF: 4.802

2022-03-01

IEEE Systems Journal

Abstract:In cloud storage, public key encryption with equality test (PKEET) is suitable for testing whether two ciphertexts generated from different public keys contain the same message without decryption. Recently, (Y. J. Wang et al., 2019) have proposed a public key signcryption scheme with designated equality test (PKS-DET). In this scheme, since the public key of the tester is used in the encryption, the tester needs to use its secret key to test the ciphertexts. Without trapdoor, PKS-DET prevents the attacker from testing the user's ciphertexts with the stolen trapdoor. Therefore, the privacy of the user can be protected. However, if the user in the PKS-DET wants to authorize the other tester to test his/her ciphertexts for some reason, the message needs to be encrypted again by the public key of the other tester. This will lead to higher computational complexity. Hence, the PKS-DET is not flexible to authorize multiple testers. In this article, we propose a construction of PKEET supporting flexible designated authorization (PKEET-FDA). The user in our PKEET-FDA can adaptively authorize multiple testers to test his/her ciphertexts, and each authorized tester must use its secret key to perform equality test for the ciphertexts. More importantly, the user does not need to encrypt the message repeatedly any more. We demonstrate the security of PKEET-FDA under two types of adversaries. Compared with the related efficient PKEET schemes, PKEET-FDA satisfies high efficiency from the point of view of the user. In terms of storage requirement, our construction is superior to the PKS-DET.

computer science, information systems,telecommunications,engineering, electrical & electronic,operations research & management science
Design and Implementation of an X. 509 Certificate Library

曾凤萍,潘爱民

DOI: https://doi.org/10.3969/j.issn.1001-3695.2004.04.046

2004-01-01

Abstract:The Internet is an open system where the identity of the communicating partners is not easy to define. One solution is to use X. 509 certificate to assure that the communication is happening between the desired endpoints. This paper designs an X. 509 certificate library to afford support to applications which have the needs.
Securing Key Issuing in Peer-to-peer Networks.

Cong Tang,Ruichuan Chen,Zhuhua Cai,Anmin Xie,Jian-bin Hu,Liyong Tang,Zhong Chen

DOI: https://doi.org/10.1145/1529282.1529298

2009-01-01

Abstract:Compared with the public key infrastructure (PKI) technique, identity based cryptography (IBC) can simplify the key management process in peer-to-peer (P2P) networks significantly. The identity of a peer (e.g., peer identifier or peer geometric coordinate) in P2P overlay networks is used to create its public key, thus avoiding the use of any certificates. These IBC-based systems are scalable, simple to administer, and each user can carry out anytime/anywhere encryption, establish secure communication channels, prove its identity to other nodes, verify protected messages and produce a form of signature with non-repudiation properties.
Blindfold: Keeping Private Keys in PKIs and CDNs out of Sight

Hisham Galal,Mohammad Mannan,Amr Youssef

DOI: https://doi.org/10.1016/j.cose.2022.102731

2022-07-19

Abstract:Public key infrastructure (PKI) is a certificate-based technology that helps in authenticating systems identities. HTTPS/TLS relies mainly on PKI to minimize fraud over the Internet. Nowadays, websites utilize CDNs to improve user experience, performance, and resilience against cyber attacks. However, combining HTTPS/TLS with CDNs has raised new security challenges. In any PKI system, keeping private keys private is of utmost importance. However, it has become the norm for CDN-powered websites to violate that fundamental assumption. Several solutions have been proposed to make HTTPS CDN-friendly. However, protection of private keys from the very instance of generation; and how they can be made secure against exposure by malicious (CDN) administrators and malware remain unexplored. We utilize trusted execution environments to protect private keys by never exposing them to human operators or untrusted software. We design Blindfold to protect private keys in HTTPS/TLS infrastructures, including CAs, website on-premise servers, and CDNs. We implemented a prototype to assess Blindfold's performance and performed several experiments on both the micro and macro levels. We found that Blindfold slightly outperforms SoftHSM in key generation by 1% while lagging by 0.01% for certificate issuance operations.

Cryptography and Security
Study on Electronic Signature Technology Based on Combined Public Key

范志强,李成,马兆丰,芦效峰,钮心忻

DOI: https://doi.org/10.3969/j.issn.1009-8054.2011.07.044

2011-01-01

Abstract:With the development of e-government and e-commerce,the electronic documents have gradually replaced traditional paper-based documentation. Thus,how to ensure the security of the electronic document has become the key to the farther successful application of e-government and e-business.？The adoptions of CPK（Combined Public Key） in the design of electronic signature system and ID certificate in digital signature and verification,could make any two users confirm public key information only by their own identity labels with any dependence the trusted third party validation,thus simplifying the key exchange agreement,ensuring the documents integrity,confidentiality and undesirability,and realizing the efficient safe electronic signature system.
DESIGN OF TECHNOLOGY FOR SECURE FILE STORAGE BASED ON HYBRID CRYPTOGRAPHY METHODS: SHORT OVERVIEW

Abusaid Manap,Gulnar Abitova,Gulzhan Uskenbayeva,Aigul Shaikhanova

DOI: https://doi.org/10.52167/1609-1817-2023-129-6-205-215

2023-12-22

Вестник КазАТК

Abstract:In the era of pervasive digital data, ensuring secure file storage has become a paramount concern. This paper explores the significance of hybrid cryptography in the development of information technology for secure file storage. Hybrid cryptography, combining symmetric and asymmetric encryption, offers robust protection against unauthorized access, tampering, and data loss. The article reviews recent cryptography literature, highlighting the importance of secure file storage in today's interconnected world and examining the benefits of hybrid cryptography. The analysis of articles on cryptography reveals emerging trends and challenges. Post-quantum cryptography addresses concerns about quantum threats, while blockchain-based cryptography enhances security in IoT data sharing. Homomorphic encryption enables computations on encrypted data, and privacy-preserving cryptographic protocols facilitate secure multi-party computation. Machine learning's intersection with cryptanalysis introduces efficiency but raises ethical considerations. The paper further discusses advancements and trends in cryptography techniques, including post-quantum cryptography, homomorphic encryption, zero-knowledge proofs, post-quantum key exchange, secure multi-party computation, and post-quantum signature schemes. These developments aim to ensure long-term security against quantum attacks, enable privacy-preserving computations, and enhance the confidentiality, integrity, and authentication of digital communication and data storage. In conclusion, the paper advocates for the adoption of hybrid cryptography in secure file storage systems. Its combination of symmetric and asymmetric encryption, along with its adaptability to evolving security landscapes, positions hybrid cryptography as a formidable approach to data protection. By embracing hybrid cryptography and staying informed about the latest advancements, organizations can navigate the digital age with confidence, ensuring the confidentiality, integrity, and availability of stored files.

English Else
Certificateless Public Key Encryption Scheme with Hybrid Problems and Its Application to Internet of Things

Rui Guo,Qiaoyan Wen,Huixian Shi,Zhengping Jin,Hua Zhang

DOI: https://doi.org/10.1155/2014/980274

IF: 1.43

2014-01-01

Mathematical Problems in Engineering

Abstract:Certificateless cryptography aims at combining the advantages of public key cryptography and identity based cryptography to avoid the certificate management and the key escrow problem. In this paper, we present a novel certificateless public key encryption scheme on the elliptic curve over the ring, whose security is based on the hardness assumption of Bilinear Diffie-Hellman problem and factoring the large number as in an RSA protocol. Moreover, since our scheme requires only one pairing operation in decryption, it is significantly more efficient than other related schemes. In addition, based on our encryption system, we also propose a protocol to protect the confidentiality and integrity of information in the scenario of Internet of Things with constrained resource nodes.

engineering, multidisciplinary,mathematics, interdisciplinary applications
Leakage-Resilient Hybrid Signcryption in Heterogeneous Public-key Systems

Ting-Chieh Ho,Yuh-Min Tseng,Sen-Shan Huang

DOI: https://doi.org/10.15388/24-infor546

2024-03-08

Informatica

Abstract:Signcryption integrates both signature and encryption schemes into single scheme to ensure both content unforgeability (authentication) and message confidentiality while reducing computational complexity. Typically, both signers (senders) and decrypters (receivers) in a signcryption scheme belong to the same public-key systems. When signers and decrypters in a signcryption scheme belong to heterogeneous public-key systems, this scheme is called a hybrid signcryption scheme which provides more elastic usage than typical signcryption schemes. In recent years, a new kind of attack, named side-channel attack, allows adversaries to learn a portion of the secret keys used in cryptographic algorithms. To resist such an attack, leakage-resilient cryptography has been widely discussed and studied while a large number of leakage-resilient schemes have been proposed. Also, numerous hybrid signcryption schemes under heterogeneous public-key systems were proposed, but none of them possesses leakage-resilient property. In this paper, we propose the first hybrid signcryption scheme with leakage resilience, called leakage-resilient hybrid signcryption scheme, in heterogeneous public-key systems (LR-HSC-HPKS). Security proofs are demonstrated to show that the proposed scheme provides both authentication and confidentiality against two types of adversaries in heterogeneous public-key systems.

computer science, information systems,mathematics, applied
PKI Technology for Data Encryption

Zhu Zhenfang

Abstract:These PKI is a kind of follow the standard use of public key encryption technology for the development of e-commerce to provide a secure foundation platform technology and specifications. The application of digital certificates is under the network environment to solve the problem such as identity authentication, access control, and information protection. This thesis mainly studied the part of the problem, this paper introduced the basic knowledge of cryptography and PKI theory foundation and basic system, of several common PKI trust model had carried on the detailed introduction, designed the distributed network environment, interconnection security platform of authentication and information encryption module.

Computer Science,Engineering
A Restrained Paillier Cryptosystem and Its Applications for Access Control of Common Secret

Xiaojuan Dong,Weiming Zhang,Mohsin Shah,Bei Wang,Nenghai Yu

DOI: https://doi.org/10.48550/arXiv.1912.09034

2019-12-19

Abstract:The modified Paillier cryptosystem has become extremely popular and applied in many fields, owning to its additive homomorphism. This cryptosystem provides weak private keys and a strong private key. A weak private key only can decrypt ciphertexts under the corresponding public key. The strong private key can decrypt all ciphertexts even under different public keys. When the modified Paillier cryptosystem is applied in a system, the member, often the system administrator, has the strong private key and can decrypt all ciphertexts. If this system administrator is attacked or compromised, the security of the application system absolutely break down. Thus, it is important to stop the decryption of the strong private key. To address this issue, we propose an restrained version of the modified Paillier cryptosystem (Restrained-Paillier), by endowing the multiplicative homomorphism. We perform the additive encryption on the multiplicative ciphertext and generate the mixed ciphertext, which can not be decrypted by the strong private key. Based on this Restrained-Paillier, we develop two applications. Firstly, we realize access control of common secret of two owners. In our scheme, only one owner cannot access secret. Secondly, we present three protocols for identity distribution and key management, identity authentication and private key recovery. Security analysis shows that the Restrained-Paillier cryptosystem can resist the chosen plaintext attack. The experimental results illustrate the utility and efficiency of the proposed protocols.

Cryptography and Security
A Mixed Encryption Algorithm Used in Internet of Things Security Transmission System

Mingyuan Xin

DOI: https://doi.org/10.1109/cyberc.2015.9

2015-09-01

Abstract:Internet of things has be broadly applied for home, industry, and many other applications. For these applications, secure information transmission becomes a critical issue to ensure the system safety. Hybrid encryption technique is a new cryptographic paradigm and it can be applied to the Internet of Things. It provides the benefit of the symmetric key and asymmetric key performance. It enables strong security and low computational complexity. In this paper, we proposed a mixed encryption algorithm to provide information integrity, confidentiality, non-repudiation on the data transmission for Internet of Things. We demonstrate the security efficiency with the comparison with traditional encryption algorithms.

Usage of Mixed Private-key Cryptography in the Safe Operation of Digital Library

An Implementation Suite for a Hybrid Public Key Infrastructure

Heterogeneous Signcryption Scheme Supporting Equality Test from PKI to CLC toward IoT

Implementation of License File Scheme Through Modified Digital Signature Scheme Based on PKI

Integration of Quantum-Safe Algorithms into X.509v3 Certificates

The LDAP-based application within PKI for campus networks

Application of PKI Technology to Kunming Power Supply Bureau

Public Key Authenticated Encryption with Designated Equality Test and Its Applications in Diagnostic Related Groups

A novel method for generating public keys involving matrix operations

Public Key Encryption With Equality Test Supporting Flexible Designated Authorization in Cloud Storage

Design and Implementation of an X. 509 Certificate Library

Securing Key Issuing in Peer-to-peer Networks.

Blindfold: Keeping Private Keys in PKIs and CDNs out of Sight

Study on Electronic Signature Technology Based on Combined Public Key

DESIGN OF TECHNOLOGY FOR SECURE FILE STORAGE BASED ON HYBRID CRYPTOGRAPHY METHODS: SHORT OVERVIEW

Certificateless Public Key Encryption Scheme with Hybrid Problems and Its Application to Internet of Things

Leakage-Resilient Hybrid Signcryption in Heterogeneous Public-key Systems

PKI Technology for Data Encryption

A Restrained Paillier Cryptosystem and Its Applications for Access Control of Common Secret

A Mixed Encryption Algorithm Used in Internet of Things Security Transmission System