Towards Secure Gigabit Passive Optical Networks - Signal Propagation based Key Establishment

Malina, Lukáš; Münster, Petr; Hajný, Jan; Horváth, Tomáš

doi:10.5220/0005559903490354

Cited by 7 publications

(6 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…PONs commonly enforce only the Registration ID-based Authentication, a mechanism in which the OLT compares a static pre-shared secret, against a secret sent by the ONU. The research community [3]- [6] has pointed out the issues of this mechanism, as it does not authenticate the OLT to the ONU. Moreover, the preshared secret is sent before a secure channel is established, compromising the secret, if a malicious OLT sniffs upstream bursts.…”

Section: A State Of the Artmentioning

confidence: 99%

“…Aiming at improving the security of PONs, Malina et al [3] and Li et al [4] proposed the use of Public-Key Cryptography (PKC) for SMA based on Diffie-Hellman. Malina et al focused on ITU Gigabit Passive Optical Network (GPON).…”

Section: A State Of the Artmentioning

confidence: 99%

“…ii) The implementation of the proposed PQCbased SMA mechanism in a simulation. iii) To the best of our knowledge, the first performance evaluation of the proposed PQC-based SMA mechanism against a baseline SMA from the XG-PON [7] and a state-of-the-art SMA based on Diffie-Hellman, as proposed by Malina et al [3] and Li et al [4].…”

Section: B Contributionmentioning

confidence: 99%

“…The works by Malina et al [3] and Li et al [4] proposed the use of SMA based on PKC in PONs. The authors use Diffie-Hellman to securely negotiate a shared secret between the OLT and ONU, which is later used in MSK derivation.…”

Section: Problem Definitionmentioning

confidence: 99%

See 3 more Smart Citations

Post-Quantum Cryptography Based Secure Mutual Authentication Mechanism for TDM-PONs

Serna,

Roßmeier,

Wosinska

et al. 2023

2023 IEEE Future Networks World Forum (FNWF)

View full text Add to dashboard Cite

Passive Optical Networks (PONs) are widely used in fixed-access networks for delivering connectivity to domestic, commercial and industrial users. Authentication and encryption are required in PONs, because of their vulnerability to Optical Network Unit (ONU) impersonating or downstream data sniffing attacks. The research community has pointed out the vulnerabilities of the authentication mechanisms enforced in PON, and has proposed Shared Mutual Authentication (SMA) using Public-Key Cryptography (PKC) based on Diffie-Hellman. However, this last is vulnerable to attacks from quantum computers. This work proposes using Post-Quantum Cryptography (PQC) for SMA in Time-Division Multiplexing (TDM)-PONs. Kyber is selected for the proposed SMA mechanism. This algorithm is the finalist in the PQC standardization process of the National Institute of Standards and Technology (NIST). The feasibility of the proposed Kyber SMA mechanism is shown in a simulation, and it is compared against a baseline SMA from the 10-Gigabitcapable Passive Optical Network (XG-PON) and a state-of-theart SMA based on Diffie-Hellman. The proposed Kyber SMA mechanism requires more random bytes, has a longer execution time than the baseline and its overhead is similar to the state-ofthe-art mechanism with similar security features but based on classical cryptography. According to the presented evaluations, the proposed approach is feasible and offers an SMA resistant to threats from traditional and quantum computers.

show abstract

Section: A State Of the Artmentioning

confidence: 99%

Section: A State Of the Artmentioning

confidence: 99%

Section: B Contributionmentioning

confidence: 99%

Section: Problem Definitionmentioning

confidence: 99%

See 2 more Smart Citations

Post-Quantum Cryptography Based Secure Mutual Authentication Mechanism for TDM-PONs

Serna,

Roßmeier,

Wosinska

et al. 2023

2023 IEEE Future Networks World Forum (FNWF)

View full text Add to dashboard Cite

show abstract

“…During the measurement, secure communication was enabled. The definition of reached states in which communication security can be performed and the prerequisites for negotiating the key are given in [33][34][35]. The entire process is started with the PLOAM message, "request password" containing "Ident Superframe Counter: 499318309."…”

Section: Gpon Frame Structure and Activation Process Analysismentioning

confidence: 99%

Deployment of PON in Europe and Deep Data Analysis of GPON

Horváth¹,

Münster²,

Vojtěch³

2019

Telecommunication Systems - Principles and Applications of Wireless-Optical Technologies

Self Cite

View full text Add to dashboard Cite

This chapter discusses the extensibility of fiber to the x (FTTx) households, specifically in the territory of the European Union. The Czech Republic has made a commitment to other member states to provide connectivity of at least 100 Mbit/s for half of the households by 2020. Although Internet access in the Czech Republic is mostly dominated by wireless fidelity (WiFi), this technology is not capable of meeting the demanding current demands at a reasonable price. As a result, passive optical networks are on the rise in access networks and in mobile cell networks by fiber to the antenna (FTTA). Passive optical networks use much more complex networks. In cooperation with Orange Slovakia, the analysis of the transmitted data was conducted. The optical network unit management and control interface (OMCI) channel data, as well as the activation data associated with specific end units, were analyzed. We propose a complete analysis of the end-unit-related activation process, download, and initialization of the data image for setting the end units and voice over Internet protocol (VoIP) parameters. Finally, we performed an analysis of the transmission of dying gasp messages.

show abstract