Search

The feasibility of persistent fault analysis relies on special faults which can persist in all the rounds of block ciphers. This prerequisite can be positioned as a good fit into the FPGA scenario, which however has not been carefully exploited ever before. In this paper, we propose the persistent fault attack on the block cipher AES-128 implemented in FPGA where a new type of persistent fault is induced with the technique of Block RAM (BRAM) modification. The details of persistent fault injection are elaborated, especially on how the target bits of AES in BRAM can be identified and how they can be altered. Our experimental results show that: with the proposed attack, a simple statistical analysis can extract the secret key of AES-128 with S-Box implemented in BRAMs and protected by the countermeasure of inversive decryption based dual modular redundancy.

The block cipher LED is well suited for resource-constrained scenarios. However, it is vulnerable to the recent fault attacks and different results have been achieved even under the same fault model. In this paper, a comprehensive investigation is conducted on the fault analysis on LED. A novel differential fault analysis is proposed, which is based on the so-called constraint equations. The proposed attack can combine constraint equations at different levels, pushing the differential fault analysis on LED towards its limit in terms of the time complexity, the data complexity and the remained key search space. Under random nibble fault model, SINGLE fault injection can reduce the key search space of LED-64 to 27.90within 1.89s, compared to 217.65within 7 minutes in prior finest contributions. As to DFA on LED-128, TWO fault injections can reduce the key search space to 215.82 within 247.88s, compared to 221.96within 16 minutes in previous work. To the best of our knowledge, the scheme that we proposed is the most efficient fault attack on LED cryptosystems.

This paper proposed an advanced round modification fault analysis (RMFA) at the theoretical level on AEGIS-128, which is one of seven finalists in CAESAR competition. First, we clarify our assumptions and simplifications on the attack model, focusing on the encryption security. Then, we emphasize the difficulty of applying vanilla RMFA to AEGIS-128 in the practical case. Finally we demonstrate our advanced fault analysis on AEGIS-128 using machine-solver based algebraic techniques. Our enhancement can be used to conquer the practical scenario which is difficult for vanilla RMFA. Simulation results show that when the fault is injected to the initialization phase and the number of rounds is reduced to one, two samples of injections can extract the whole 128 key bits within less than two hours. This work can also be extended to other versions such as AEGIS-256.

In January 2016, Li et al. introduced an impossible differential fault analysis on the LED cryptosystem. If one random nibble fault is injected into the preantepenultimate round of LED, 48 fault injections are required to recover the secret key. In this comment, we provide an improved scheme with theoretical analysis and experimental results. Under the same fault model, our analysis can reduce the key search space of LED to 27:92 on average with only ONE fault. The key extraction takes about 13.84 seconds on average.

Recent lightweight cryptographic algorithms are vulnerable to side channel attacks (SCA), requiring a careful design of implementations. In this paper, we carefully investigate the “Low-Entropy Masking Scheme” (LEMS) on the block cipher LED in the context of resource-constrained environments. We propose an improved LEMS called “iM-LED”, so as to satisfy two different yet unified design goals: to maintain the entropy of the masking at one bit, meanwhile, to enhance first-order SCA-resistance against advanced SCAs such as correlation-enhanced collision attack (CCA). The security of the implementation has been evaluated based on the SASEBO-W board, which proves that iM-LED has boosted its mitigation against SCA with limited overheads.

In this paper, we present a wideband mobile antenna with two modes that can produce dual-polarized omni-directional radiation patterns using a segmented loop element. The two different modes are designed to operate at neighbouring frequencies to realize the wideband property. The segmented loop itself induces one mode and radiates H-polarized radiation pattern. In the meantime, the loop element excites the ground plane which operates as a radiator and radiates V-polarized radiation pattern. The results confirm that the proposed antenna covers the WiMAX and WLAN bands with a 10-dB impedance bandwidth of 0.74 GHz (2.12 GHz – 2.86 GHz). The mobile antenna achieves the average realized gain and radiation efficiency of 2.9 dBi and 84% over the entire operating bands, respectively.

GOST is a well-known block cipher as the official encryption standard for the Russian Federation. A special feature of GOST is that its eight S-boxes can be secret. However, most of the researches on GOST assume that the design of these S-boxes is known. In this paper, the security of GOST against side-channel attacks is examined with algebraic fault analysis (AFA), which combines the algebraic cryptanalysis with the fault attack. Three AFAs on GOST, which have different attack goals in different scenarios, are investigated. The results show that 8 fault injections are required to recover the secret key when the full design of GOST is known, which is less than 64 fault injections required in previous work. 64 fault injections are required to recover the eight unknown S-boxes assuming the key is known. 270 fault injections are required to recover the key and the eight S-boxes when both are unknown. The results prove that AFA is very effective and keeping some components in a cipher secret cannot guarantee its security against fault attacks.

According to the National classified protection of information system security requirements, the cloud computing systems classified above rank 3 is important information system, playing vital roles from the point of view of National Security. This paper develops a conceptual framework with which to address the protection of integrality protection named 'Dual Systems Architecture' to protect computing environments. While attempting to be logical and rigorous, formalism is avoided.

This paper proposes a fault analysis technique on LED by combining algebraic cryptanalysis and differential fault analysis (DFA). The technique is called algebraic differential fault analysis (ADFA). In ADFA on LED, we use DFA to deduce the possible fault differences of the correct and faulty S-Box input in the last round, and convert them into algebraic equations. We then combine the equation set of LED with the injected fault and use the CryptoMiniSat solver to recover the secret key. Our experiments show that, on a common PC, ADFA can succeed on LED under the nibble-based fault model within three minutes and with only one fault injection, which is more efficient than previous DFA work. To evaluate DFA on LED, we first propose an improved evaluation algorithm of DFA, then provide a modified ADFA approach to compute the solutions for the secret key. The results are more accurate than previous work. We also successfully extend ADFA on LED to other fault models using a single fault injection, where traditional DFAs are difficult to launch.

In this paper, the networked freeway ramp metering problem is addressed using a novel macroscopic traffic scheduling approach. In the proposed method, reference mainstream densities are macroscopically scheduled for each local ramp metering controller. These reference density signals are tracked by the corresponding local controllers using the feedback based algorithm. The considered time is divided into macroscopic time periods. Within each period, reference mainstream density signals are scheduled for local controllers. The optimal networked ramp metering problem is considered as an optimization problem, where these reference signals are regarded as decision variables. The particle swarm optimization (PSO) algorithm is used to find the optimal reference signals, which minimizes the total time spent (TTS) by vehicles within the whole network. The efficiency of the proposed method is demonstrated in case studies. Furthermore, the proposed approach has the advantages of structural simplicity and low implementation cost, and the capability of local feedback based strategy in dealing with realtime traffic conditions is retained.

A C-band high temperature superconducting (HTS) diplexer is presented for the module of a multiplexer. The diplexer consists of a common node and two bandpass filters. The common node is designed by an open-loop microstrip line, which resonates at the frequency of 3995 MHz. Both channel filters consist of four rectangular spiral line resonators. The diplexer is fabricated by DyBa 2 Cu 3 O 7 (DBCO) thin films on MgO substrate with a dimension of 30 mm × 10 mm. Experiments are performed in a cryocooler at 77K. The measured insertion loss is less than 0.1 dB for two channels. The isolation between the two channels is about 50 dB. Good agreements are achieved between measurement and simulation.

In this paper, two TS-type fuzzy logic controllers (FLC) in direct and incremental forms are constructed for freeway local ramp metering tasks. The values of consequent part of fuzzy rules are optimized with a particle swarm optimization algorithm (PSO). The optimization process under PSO is carried out on PARAMICS microscopic traffic simulation platform. FLC methods and the traditional ALINEA control method are examined and compared on the traffic density performance. Simulation results on PARAMICS show the applicability and efficiency of the proposed FLC.

In this work, we apply iterative learning control to address ramp metering in a macroscopic level freeway environment. By formulating the original ramp metering problem as a output tracking and disturbance rejection problem, iterative learning control can be applied and improve the traffic response. The learning mechanism is based on traffic flow. To mimic a real traffic environment, a simulator is built on the PARAMICS platform. The control design and simulations are carried within the platform under on-ramp constraints. The effectiveness of the new approach is verified through PARAMICS-based simulations.

This paper proposes an iterative learning control approach for the traffic control problem and the objective of control is to derive a proper control signal through iterative learning process to achieve the freeway mainline density tracking task in the presence of unknown but repeated environment and disturbance. The performance of the proposed approach is evaluated based on simulation results on the microscopic traffic simulation software PARAMICS and comparison with the local feedback controller ALINEA. The paper concludes that iterative learning control based ramp metering can drive the density of traffic flow to track a reference output in the presence of unknown but repeated disturbance.

According to wavelet de-noising and the Hilbert transform theory, a boxed-milk metamorphism rapid detection device and identification method are proposed. Wavelet de-noising method is used to eliminate signal noise, then the use of Hilbert transform for envelope Ways to achieve signal envelope curve, and then for the system damping ratio. Under the case that the package of liquid boxed milk is not destroyed, the change in the quality of the liquid milk can be estimated indirectly with the help of the damping ratio of the system. The experimental results with the use of conventional damping identification methods the results were compared, because of an increase of wavelet de-noising process, greatly improving the detection system damping ratio of detection accuracy.

In order to improve the detecting accuracy of the fast-detection device of the UHT(Ultra Heat Treated) box milk quality, the method of wavelet de-noising is applied to the free damped torsional vibration signals produced by the liquid milk box. And by getting the envelope demodulation using the Hilbert transform, the damping ratio of the system is finally calculated. Under the case that the package of liquid box milk is not destroyed, the change in the quality of the liquid milk can be estimated indirectly with the help of the damping ratio of the system. The theoretical and experimental results indicate that the detecting accuracy of the damping ratio of the system is improved significantly in contrast with the traditional calculation method of the damping ratio. This is due to the application of the additional two filtering process namely, the wavelet de-noising and the Hilbert transform for the envelope. The distributing range of the detecting results of the detection device for box milk quality adopting this calculation method also gets well controlled.