Evaluation of P2P and cloud computing as platform for exhaustive key search on block ciphers

Yoon, JunWeon; Hong, Taeyoung; Choi, Jangwon; Park, Chanyeol Y.; Kim, Kibong B.; Yu, Heonchang

doi:10.1007/s12083-018-0641-5

Cited by 6 publications

(4 citation statements)

References 15 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…At the time of writing (2019), and since the mid-nineties, 7 bytes of entropy are not sufficient for a cryptographic key [11]. Prior work has succeeded in brute forcing keys with 7 bytes of entropy with increasing efficacy, e.g., specialized hardware [34] and cloud infrastructure [54]. Furthermore, considering current best practices [8], any key with less than 14 bytes of entropy is not considered secure for symmetric encryption.…”

Section: Brute Forcing the Low Entropy Ble Long Term Keymentioning

confidence: 99%

Key Negotiation Downgrade Attacks on Bluetooth and Bluetooth Low Energy

Antonioli

Tippenhauer

Rasmussen

2020

ACM Trans. Priv. Secur.

View full text Add to dashboard Cite

Bluetooth (BR/EDR) and Bluetooth Low Energy (BLE) are pervasive wireless technologies specified in the Bluetooth standard. The standard includes key negotiation protocols used to generate long-term keys (during pairing) and session keys (during secure connection establishment). In this work, we demonstrate that the key negotiation protocols of Bluetooth and BLE are vulnerable to standard-compliant entropy downgrade attacks. In particular, we show how an attacker can downgrade the entropy of any Bluetooth session key to 1 byte, and of any BLE long-term key and session key to 7 bytes. Such low entropy values enable the attacker to brute-force Bluetooth long-term keys and BLE long-term and session keys, and to break all the security guarantees promised by Bluetooth and BLE. As a result of our attacks, an attacker can decrypt all the ciphertext and inject valid ciphertext in any Bluetooth and BLE network. Our key negotiation downgrade attacks are conducted remotely, do not require access to the victims’ devices, and are stealthy to the victims. As the attacks are standard-compliant, they are effective regardless of the usage of the strongest Bluetooth and BLE security modes (including Secure Connections), the Bluetooth version, and the implementation details of the devices used by the victims. We successfully attack 38 Bluetooth devices (32 unique Bluetooth chips) and 19 BLE devices from different vendors, using all the major versions of the Bluetooth standard. Finally, we present effective legacy compliant and non-legacy compliant countermeasures to mitigate our key negotiation downgrade attacks.

show abstract

Section: Brute Forcing the Low Entropy Ble Long Term Keymentioning

confidence: 99%

Key Negotiation Downgrade Attacks on Bluetooth and Bluetooth Low Energy

Antonioli

Tippenhauer

Rasmussen

2020

ACM Trans. Priv. Secur.

View full text Add to dashboard Cite

show abstract

“…The development of IT, including virtual reality, block chain using P2P networking, and intelligent ones based on learning algorithms, smartly solves transportation problems, environmental problems, and inefficiencies in facilities [1][2][3][4]. Social change due to rapidly changing technology is affecting elementary and middle school computer science (CS) education.…”

Section: Introductionmentioning

confidence: 99%

Development of Curriculum Design Support System Based on Word Embedding and Terminology Extraction

2020

View full text Add to dashboard Cite

The principles of computer skills have been included in primary and secondary educated since the early 2000s, and the reform of curricula is related to the development of IT. Therefore, curricula should reflect the latest technological trends and needs of society. The development of a curriculum involves the subjective judgment of a few experts or professors to extract knowledge from several similar documents. More objective extraction needs to be based on standardized terminology, and professional terminology can help build content frames for organizing curricula. The purpose of this study is to develop a smart system for extracting terms from the body of computer science (CS) knowledge and organizing knowledge areas. The extracted terms are composed of semantically similar knowledge areas, using the word2vec model. We analyzed a higher-education CS standards document and compiled a dictionary of technical terms with a hierarchical clustering structure. Based on the developed terminology dictionary, a specialized system is proposed to enhance the efficiency and objectivity of terminology extraction. The analysis of high school education courses in India and Israel using the technical term extraction system found that (1) technical terms for Software Development Fundamentals were extracted at a high rate in entry-level courses, (2) in advanced courses, the ratio of technical terms in the areas of Architecture and Organization, Programming Languages, and Software Engineering areas was high, and (3) electives that deal with advanced content had a high percentage of technical terms related to information systems.

show abstract

“…Also, we found vmTorrent (Reich et al, 2012) aims to scalably minimise time needed for cloud-based VMs to boot and load critical applications. According to Yoon et al (2018), the task running time of a peer on VM is an important factor. If the execution time of the single task is too short, the communication traffic is increased compared to the amount of calculation on the server.…”

Section: Introductionmentioning

confidence: 99%

A new overlay P2P network for efficient routing in group communication with regular topologies

Hacini

Amad

2020

IJGUC

View full text Add to dashboard Cite

This research paper gives a new overlay P2P network to provide a performant and optimised lookup process. The lookup process of the proposed solution reduces the overlay hops and consequently the latency for content lookup, between any pair of nodes. The overlay network is constructed on top of physical networks without any centralised control and with a hierarchy of two levels. The architecture is based on regular topologies which are: the pancake graphs and the skip graphs. The focus of all topology construction schemes is to reduce the cost of the lookup process (number of hops and delay) and consequently improve the search performance for P2P applications deployed on the overlay network. Performance evaluations of our proposed scheme show that results obtained are globally satisfactory.

show abstract

Evaluation of P2P and cloud computing as platform for exhaustive key search on block ciphers

Cited by 6 publications

References 15 publications

Key Negotiation Downgrade Attacks on Bluetooth and Bluetooth Low Energy

Key Negotiation Downgrade Attacks on Bluetooth and Bluetooth Low Energy

Development of Curriculum Design Support System Based on Word Embedding and Terminology Extraction

A new overlay P2P network for efficient routing in group communication with regular topologies

Contact Info

Product

Resources

About