Information-theoretical analysis of two Shannon's ciphers

Boris Ryabko

DOI: https://doi.org/10.1109/red.2016.7779346

2016-09-01

Abstract:We describe generalized running key ciphers and apply them for analysis of two Shannon's methods. In particular, we suggest some estimation of the cipher equivocation and the probability of correct deciphering without key.

What problem does this paper attempt to address?

Hiding Symbols and Functions: New Metrics and Constructions for Information-Theoretic Security

Flavio du Pin Calmon,Muriel Médard,Mayank Varia,Ken R. Duffy,Mark M. Christiansen,Linda M. Zeger

DOI: https://doi.org/10.48550/arXiv.1503.08513

2015-03-30

Abstract:We present information-theoretic definitions and results for analyzing symmetric-key encryption schemes beyond the perfect secrecy regime, i.e. when perfect secrecy is not attained. We adopt two lines of analysis, one based on lossless source coding, and another akin to rate-distortion theory. We start by presenting a new information-theoretic metric for security, called symbol secrecy, and derive associated fundamental bounds. We then introduce list-source codes (LSCs), which are a general framework for mapping a key length (entropy) to a list size that an eavesdropper has to resolve in order to recover a secret message. We provide explicit constructions of LSCs, and demonstrate that, when the source is uniformly distributed, the highest level of symbol secrecy for a fixed key length can be achieved through a construction based on minimum-distance separable (MDS) codes. Using an analysis related to rate-distortion theory, we then show how symbol secrecy can be used to determine the probability that an eavesdropper correctly reconstructs functions of the original plaintext. We illustrate how these bounds can be applied to characterize security properties of symmetric-key encryption schemes, and, in particular, extend security claims based on symbol secrecy to a functional setting.

Information Theory
Universal Coding for Shannon Ciphers under Side-Channel Attacks

Yasutada Oohama,Bagus Santoso

2024-05-13

Abstract:We study the universal coding under side-channel attacks posed and investigated by Oohama and Santoso (2022). They proposed a theoretical security model for Shannon cipher system under side-channel attacks, where the adversary is not only allowed to collect ciphertexts by eavesdropping the public communication channel, but is also allowed to collect the physical information leaked by the devices where the cipher system is implemented on such as running time, power consumption, electromagnetic radiation, etc. For any distributions of the plain text, any noisy channels through which the adversary observe the corrupted version of the key, and any measurement device used for collecting the physical information, we can derive an achievable rate region for reliability and security such that if we compress the ciphertext with rate within the achievable rate region, then: (1) anyone with secret key will be able to decrypt and decode the ciphertext correctly, but (2) any adversary who obtains the ciphertext and also the side physical information will not be able to obtain any information about the hidden source as long as the leaked physical information is encoded with a rate within the rate region.

Information Theory
Estimators in Cryptography

Nicolae Constantinescu

DOI: https://doi.org/10.48550/arXiv.1202.5921

2012-02-28

Abstract:One of the main problems in cryptography is to give criteria to provide good comparators of cipher systems. The security of a cipher system must include the security of the algorithm, the security of the key generator and management module (see [BM94], [CM97],[Mau92a]) and the security of the cryptographic key agreement protocol (see [Mau93a],[MC94],[Mau93b],[Mau92b]). This paper gives show the necessary mathematical background to estimate the most important cryptographic measures of the key generators and of the unconditionally key agreement protocols. These cryptographic measures are the Shannon entropy (for the key generator module) and Renyi entropy of order alpha for the key agreement protocol.

Cryptography and Security
Beyond Countable Alphabets: an Extension of the Information-Spectrum Approach.

Shengtian Yang,Thomas Honold,Zhaoyang Zhang

DOI: https://doi.org/10.1109/wcsp.2016.7752489

2016-01-01

Abstract:A general approach is established for deriving one-shot performance bounds for information-theoretic problems on general alphabets beyond countable alphabets. It is mainly based on the quantization idea and a novel form of "likelihood ratio". As an example, one-shot lower and upper bounds for random number generation from correlated sources on general alphabets are derived.
Bounds on Guessing Numbers and Secret Sharing Combining Information Theory Methods

Emirhan Gürpınar

2023-10-19

Abstract:This paper is on developing some computer-assisted proof methods involving non-classical inequalities for Shannon entropy. Two areas of the applications of information inequalities are studied: Secret sharing schemes and hat guessing games. In the former a random secret value is transformed into shares distributed among several participants in such a way that only the qualified groups of participants can recover the secret value. In the latter each participant is assigned a hat colour and they try to guess theirs while seeing only some of the others'. The aim is to maximize the probability that every player guesses correctly, the optimal probability depends on the underlying sight graph. We use for both problems the method of non-Shannon-type information inequalities going back to Z. Zhang and R. W. Yeung. We employ the linear programming technique that allows to apply new information inequalities indirectly, without even writing them down explicitly. To reduce the complexity of the problems of linear programming involved in the bounds we extensively use symmetry considerations. Using these tools, we improve lower bounds on the ratio of key size to secret size for the former problem and an upper bound for one of the ten vertex graphs related to an open question by Riis for the latter problem.

Information Theory
Universal Hashing for Information Theoretic Security

Himanshu Tyagi,Alexander Vardy

DOI: https://doi.org/10.48550/arXiv.1412.4958

2016-03-22

Abstract:The information theoretic approach to security entails harnessing the correlated randomness available in nature to establish security. It uses tools from information theory and coding and yields provable security, even against an adversary with unbounded computational power. However, the feasibility of this approach in practice depends on the development of efficiently implementable schemes. In this article, we review a special class of practical schemes for information theoretic security that are based on 2-universal hash families. Specific cases of secret key agreement and wiretap coding are considered, and general themes are identified. The scheme presented for wiretap coding is modular and can be implemented easily by including an extra pre-processing layer over the existing transmission codes.

Information Theory
Finite-Length Analysis of Wiretap Codes using Universal Hash Functions

Kagan Akcay

2024-05-10

Abstract:This paper investigates the relation between the second-order coding rate, where the second-order turns out to be strictly larger than $\sqrt{n}$, and the mutual information as the leaked information for a fixed error probability by using wiretap codes constructed by universal$_2$ hash functions. We first generalize the upper bound on $\epsilon$-smooth max information in \cite{tyagi} and use it in our analysis where we adopt the method in \cite{hayashi-tan}, which uses universal hashing for compressing a source and making it secure from another correlated source, and apply it to the wiretap channel. We prove first- and second-order achievability results by assuming that the conjecture we state holds true.

Information Theory
An Information-Theoretic Analysis of the Security of Communication Systems Employing the Encoding-Encryption Paradigm

Frederique Oggier,Miodrag J. Mihaljevic

DOI: https://doi.org/10.48550/arXiv.1008.0968

2010-08-05

Abstract:This paper proposes a generic approach for providing enhanced security to communication systems which encode their data for reliability before encrypting it through a stream cipher for security. We call this counter-intuitive technique the {\em encoding-encryption} paradigm, and use as motivating example the standard for mobile telephony GSM. The enhanced security is based on a dedicated homophonic or wire-tap channel coding that introduces pure randomness, combined with the randomness of the noise occurring over the communication channel. Security evaluation regarding recovery of the secret key employed in the keystream generator is done through an information theoretical approach. We show that with the aid of a dedicated wire-tap encoder, the amount of uncertainty that the adversary must face about the secret key given all the information he could gather during different passive or active attacks he can mount, is a decreasing function of the sample available for cryptanalysis. This means that the wire-tap encoder can indeed provide an information theoretical security level over a period of time, but after a large enough sample is collected the function tends to zero, entering a regime in which a computational security analysis is needed for estimation of the resistance against the secret key recovery.

Cryptography and Security
Source-Channel Secrecy for Shannon Cipher System

Lei Yu,Houqiang Li,Weiping Li

DOI: https://doi.org/10.1109/tit.2017.2669188

2016-01-01

Abstract:Recently, a secrecy measure based on list-reconstruction has been proposed [1], in which a wiretapper is allowed to produce a list of 2 (m R L) reconstruction sequences and secrecy is measured by the minimum distortion over the entire list. In this paper, we show that this list secrecy problem is equivalent to one with secrecy measured by a new quantity lossy-equivocation, which is proven to be the minimum optimistic 1-achievable source coding rate of the source with the wirtapped signal as two-sided information, and also can be seen as an extension of conventional equivocation to lossy case. Upon this (or list) secrecy measure, we study source-channel secrecy problem in the discrete memoryless Shannon cipher system with noisy wiretap channel. Two inner bounds and an outer bound on the achievable region of secret key rate, list rate, wiretapper distortion, and distortion of legitimate user are given. The inner bounds are derived by using an uncoded scheme and a (operationly) separate scheme, respectively. Thanks to the equivalence between lossy-equivocation secrecy and list secrecy, the information spectrum method is leveraged to prove the outer bound. As special cases, the admissible region for the cases of degraded wiretap channel or lossless communication for legitimate user has been characterized completely. For both these two cases, separate scheme is proven to be optimal. Interestingly, however, separation indeed suffers performance loss for other certain cases. Besides, we also extend our results to characterize the achievable region for Gaussian communication case. As a side product optimistic lossy source coding has also been addressed.
One-Shot Min-Entropy Calculation And Its Application To Quantum Cryptography

Rong Wang,H. F. Chau

2024-06-21

Abstract:In quantum Shannon theory, various kinds of quantum entropies are used to characterize the capacities of noisy physical systems. Among them, min-entropy and its smooth version attract wide interest especially in the field of quantum cryptography as they can be used to bound the information obtained by an adversary. However, calculating the exact value or non-trivial bounds of min-entropy are extremely difficult because the composite system dimension may scale exponentially with the dimension of its subsystem. Here, we develop a one-shot lower bound calculation technique for the min-entropy of a classical-quantum state that is applicable to both finite and infinite dimensional reduced quantum states. Moreover, we show our technique is of practical interest in at least two situations. First, it gives an alternative tight finite-data analysis for the well-known BB84 quantum key distribution protocol. More importantly, it provides a security proof for a novel source-independent continuous-variable quantum random number generation protocol. These show the effectiveness and wide applicability of our approach.

Quantum Physics
An Application Study to the Ciphers Weighed in Faithful Transmission

lan luo,qiong hai dai,chun xiang xu,shao quan jiang

DOI: https://doi.org/10.4028/www.scientific.net/AMM.128-129.637

2012-01-01

Applied Mechanics and Materials

Abstract:The cipher algorithms are categorized by block cipher, stream cipher and HASH, and they are weighed in faithful transmission which is known as independent condition. In faithful transmission, the ciphers are studied because of their root cipher. Intelligent application of ciphers is a direction that uses Bayesian model of cognition science. Bayesian inference is a rational engine for solving such problems within a probabilistic framework, and consequently is the heart of most probabilistic models of weighing the ciphers. The approach of this paper is that ciphers, which are considered as a suitable weight cipher to kinds of networks, are ranged based on root ciphers. This paper shows the other kinds of transformation among the different cipher algorithms themselves.
Information-theory Analysis for a Two-step Quantum Secure Direct Communication Protocol

周南润,黄鹏,刘晔,龚黎华

DOI: https://doi.org/10.3969/j.issn.1007-6654.2008.04.008

2008-01-01

Acta Sinica Quantum Optica

Abstract:The security of a typical scheme of the two-step quantum direct determinant communication is analyzed from the aspect of information theory.The amount of information which the eavesdropper and the legal receiver can get is calculated,which can serve as a criteria for checking Eve and estimating the security of quantum direct communication between legal communicators.
Unconditionally secure ciphers with a short key for a source with unknown statistics

Boris Ryabko

2023-03-27

Abstract:We consider the problem of constructing an unconditionally secure cipher with a short key for the case where the probability distribution of encrypted messages is unknown. Note that unconditional security means that an adversary with no computational constraints can obtain only a negligible amount of information ("leakage") about an encrypted message (without knowing the key). Here we consider the case of a priori (partially) unknown message source statistics. More specifically, the message source probability distribution belongs to a given family of distributions. We propose an unconditionally secure cipher for this case. As an example, one can consider constructing a single cipher for texts written in any of the languages of the European Union. That is, the message to be encrypted could be written in any of these languages.

Cryptography and Security,Information Theory
Impossibility of Indifferentiable Iterated Blockciphers from 3 or Less Primitive Calls.

Chun Guo,Lei Wang,Dongdai Lin

DOI: https://doi.org/10.1007/978-3-031-30634-1_14

2023-01-01

Abstract:Virtually all modern blockciphers are iterated. In this paper, we ask: to construct a secure iterated blockcipher “non-trivially”, how many calls to random functions and permutations are necessary? When security means indistinguishability from a random permutation, optimality is achieved by the Even-Mansour scheme using 1 call to a public permutation. We seek for the arguably strongest security indifferentiability from an ideal cipher, a notion introduced by Maurer et al. (TCC 2004) and popularized by Coron et al. (JoC, 2014). We provide the first generic negative result/lower bounds: when the key is not too short, no iterated blockcipher making 3 calls is (statistically) indifferentiable. This proves optimality for a 4-call positive result of Guo et al. (Eprint 2016). Furthermore, using 1 or 2 calls, even indifferentiable iterated blockciphers with polynomial $$\text {keyspace}$$ are impossible. To prove this, we develop an abstraction of idealized iterated blockciphers and establish various basic properties, and apply Extremal Graph Theory results to prove the existence of certain (generalized) non-random properties such as the boomerang and yoyo.
Cryptanalysis of Two McEliece Cryptosystems Based on Quasi-Cyclic Codes

Ayoub Otmani,Jean-Pierre Tillich,Leonard Dallot

DOI: https://doi.org/10.48550/arXiv.0804.0409

2010-01-04

Abstract:We cryptanalyse here two variants of the McEliece cryptosystem based on quasi-cyclic codes. Both aim at reducing the key size by restricting the public and secret generator matrices to be in quasi-cyclic form. The first variant considers subcodes of a primitive BCH code. We prove that this variant is not secure by finding and solving a linear system satisfied by the entries of the secret permutation matrix. The other variant uses quasi-cyclic low density parity-check codes. This scheme was devised to be immune against general attacks working for McEliece type cryptosystems based on low density parity-check codes by choosing in the McEliece scheme more general one-to-one mappings than permutation matrices. We suggest here a structural attack exploiting the quasi-cyclic structure of the code and a certain weakness in the choice of the linear transformations that hide the generator matrix of the code. Our analysis shows that with high probability a parity-check matrix of a punctured version of the secret code can be recovered in cubic time complexity in its length. The complete reconstruction of the secret parity-check matrix of the quasi-cyclic low density parity-check codes requires the search of codewords of low weight which can be done with about $2^{37}$ operations for the specific parameters proposed.

Cryptography and Security,Discrete Mathematics
Information Leakage of Heterogeneous Encoded Correlated Sequences over Eavesdropped Channel

R Balmahoon,L Cheng

DOI: https://doi.org/10.48550/arXiv.1501.04478

2015-01-23

Abstract:Correlated sources are present in communication systems where protocols ensure that there is some predetermined information for sources. Here correlated sources across an eavesdropped channel that incorporate a heterogeneous encoding scheme and their effect on the information leakage when some channel information and a source have been wiretapped is investigated. The information leakage bounds for the Slepian-Wolf scenario are provided. Thereafter, the Shannon cipher system approach is presented. Further, an implementation method using a matrix partition approach is described.

Information Theory
Entropy estimation of symbol sequences

Thomas Schürmann,Peter Grassberger

DOI: https://doi.org/10.1063/1.166191

2002-03-21

Abstract:We discuss algorithms for estimating the Shannon entropy h of finite symbol sequences with long range correlations. In particular, we consider algorithms which estimate h from the code lengths produced by some compression algorithm. Our interest is in describing their convergence with sequence length, assuming no limits for the space and time complexities of the compression algorithms. A scaling law is proposed for extrapolation from finite sample lengths. This is applied to sequences of dynamical systems in non-trivial chaotic regimes, a 1-D cellular automaton, and to written English texts.

Statistical Mechanics,Computation and Language,Information Theory,Data Analysis, Statistics and Probability,Machine Learning
The double-padlock problem: Is secure classical information transmission possible without key exchange?

James M. Chappell,Lachlan J. Gunn,Derek Abbott

DOI: https://doi.org/10.1142/s201019451460355x

2014-01-01

Abstract:The idealized Kish-Sethuraman (KS) cipher is theoretically known to offer perfect security through a classical information channel. However, realization of the protocol is hitherto an open problem, as the required mathematical operators have not been identified in the previous literature. A mechanical analogy of this protocol can be seen as sending a message in a box using two padlocks; one locked by the Sender and the other locked by the Receiver, so that theoretically the message remains secure at all times. We seek a mathematical representation of this process, considering that it would be very unusual if there was a physical process with no mathematical description. We select Clifford's geometric algebra for this task as it is a natural formalism to handle rotations in spaces of various dimension. The significance of finding a mathematical description that describes the protocol, is that it is a possible step toward a physical realization having benefits in increased security with reduced complexity.
A Method Of Block Ciphers Weigh In Nonparametric Bayesian Models

L Luo,YL Ye,QH Dai

2012-01-01

Abstract:For optional application of block ciphers, we precisely weigh the block ciphers according to the key size, main structure, modes and standards of algorithms. To predict the survival period of block cipher's key, we weigh the block ciphers according to its key size with Beta processes. We study the different structures of block cipher's main function to explain the design philosophy of SP and Feistel at vary conditions. The novel idea of this paper is that the block ciphers are weighed in nonparametric Bayesian models include the key size at Beta process, Gaussian process of main function design and the intelligent application of standardized modes. Meanwhile, the block ciphers intelligent fuse in kinds of networks. The extension method is suitable to Civil Engineering either.
On the Structure of Information

Sebastian Gottwald,Daniel A. Braun

2024-09-30

Abstract:Shannon information and Shannon entropy are undoubtedly the most commonly used quantitative measures of information, cropping up in the literature across a broad variety of disciplines, often in contexts unrelated to coding theory. Here, we generalize the original idea behind Shannon entropy as the cost of encoding a sample of a random variable in terms of the required codeword length, to arbitrary loss functions by considering the optimally achievable loss given a certain level of knowledge about the random variable. By formalizing knowledge in terms of the measure-theoretic notion of sub-$\sigma$-algebras, we arrive at a general notion of uncertainty reduction that includes entropy and information as special cases: entropy is the reduction of uncertainty from no (or partial) knowledge to full knowledge about a random variable, whereas information is uncertainty reduction from no (or partial) knowledge to partial knowledge. As examples, we get Shannon information and entropy when measuring loss in terms of message length, variance for square error loss, and more generally, for the Bregman loss, we get Bregman information. Moreover, we show that appealing properties of Shannon entropy and information extend to the general case, including well-known relations involving the KL divergence, which are extended to divergences of proper scoring rules.

Information Theory

Information-theoretical analysis of two Shannon's ciphers

Hiding Symbols and Functions: New Metrics and Constructions for Information-Theoretic Security

Universal Coding for Shannon Ciphers under Side-Channel Attacks

Estimators in Cryptography

Beyond Countable Alphabets: an Extension of the Information-Spectrum Approach.

Bounds on Guessing Numbers and Secret Sharing Combining Information Theory Methods

Universal Hashing for Information Theoretic Security

Finite-Length Analysis of Wiretap Codes using Universal Hash Functions

An Information-Theoretic Analysis of the Security of Communication Systems Employing the Encoding-Encryption Paradigm

Source-Channel Secrecy for Shannon Cipher System

One-Shot Min-Entropy Calculation And Its Application To Quantum Cryptography

An Application Study to the Ciphers Weighed in Faithful Transmission

Information-theory Analysis for a Two-step Quantum Secure Direct Communication Protocol

Unconditionally secure ciphers with a short key for a source with unknown statistics

Impossibility of Indifferentiable Iterated Blockciphers from 3 or Less Primitive Calls.

Cryptanalysis of Two McEliece Cryptosystems Based on Quasi-Cyclic Codes

Information Leakage of Heterogeneous Encoded Correlated Sequences over Eavesdropped Channel

Entropy estimation of symbol sequences

The double-padlock problem: Is secure classical information transmission possible without key exchange?

A Method Of Block Ciphers Weigh In Nonparametric Bayesian Models

On the Structure of Information