50 results about "S-box" patented technology

The invention discloses a dynamic S-box and cross-channel diffusion image encryption method based on six-dimensional hyper-chaos driving, and belongs to the field of information security, and the method comprises the implementation steps: 1) constructing a novel six-dimensional hyper-chaos system; 2) constructing a cross-channel diffusion scheme based on the six-dimensional hyperchaotic system; 3) constructing a dynamic S box library based on a six-dimensional hyperchaotic system; according to the invention, by introducing an inter-channel coupling mechanism, the potential safety hazard of traditional sub-channel encryption is effectively relieved. A dynamic S box generated based on chaotic system state self-adaption enhances the nonlinear confusion characteristic, and Arnodcat mapping transformation realizes global pixel scrambling. Theoretical and experimental results show that the method overcomes the limitation of a low-dimensional system, and the aspects of statistical analysis, key sensitivity, attack resistance and the like are remarkably improved.

The invention discloses a dynamic S-box generation method and test system based on a spatiotemporal chaotic system, and the method comprises the steps: constructing an iteration matrix through employing a preset m sequence, and determining a coupling object index and a disturbance symbol of each grid in an iteration process; wherein each element of the iteration matrix represents a grid; performing dynamic disturbance on the initial chaotic sequence according to the coupling object index, the disturbance symbol, the index offset and the grid coordinate to obtain a dynamic chaotic sequence; initializing the two-dimensional coupling image lattice by using a dynamic chaos sequence, and carrying out iteration to obtain an iterated coupling image lattice; removing the previous N iteration results of the coupled image lattice after iteration; and performing numerical conversion on the chaotic sequence value obtained by the (N + 1) th iteration to construct an S box. According to the S box design and test method, the safety and the attack resistance of the S box are improved, and an efficient and reliable research tool can be provided for cryptography researchers.

The invention discloses an 8-bit S box construction method based on an improved genetic algorithm, and the method comprises the following steps: (1) forming a composite chaotic system through Logistic chaotic mapping and Tent chaotic mapping, and generating an initialized population; (2) designing a fitness function by combining the nonlinearity, the difference uniformity and the strict avalanche criterion of the S box; (3) designing crossover operation for ensuring bijection of the S box; (4) designing a reverse search method to search variation points, combining a hill climbing algorithm and a random search method, designing variation operation based on 2N rounds of search, carrying out two-point variation point search in the first N rounds, adopting three-point variation point search in the last N rounds, and designing a table look-up statistical method to further evaluate and optimize the property of the S box; and (5) constructing an 8-bit password S box based on an improved genetic algorithm. The method is based on the improved genetic algorithm, and the 8-bit S box with excellent cryptographic properties can be generated.

The invention discloses a quantum optimization-oriented design method for realizing an S box circuit, which comprises the following steps of: S1, analyzing linear operation and nonlinear operation in classical implementation of an S box, and dividing a classical implementation structure of the S box; s2, designing quantum implementation of different modules in the classical implementation structure of the S box step by step; and S3, analyzing the combinability of a linear module implementation circuit in the quantum implementation of the S box to optimize the quantum implementation of the S box. The quantum implementation efficiency of the S box in the cryptographic algorithm is effectively improved, and the implementation cost of a related quantum circuit is reduced.

The invention belongs to the technical field of information security, and discloses a method for evaluating the anti-differential fault analysis capability of 5-bit S box candidates in an NIST LWC competition, which comprises the following steps of: 1, injecting a fault into the input of a 5-bit S box applied to a target lightweight encryption algorithm, deducing the input of the 5-bit S box through an output authentication tag obtained through analysis, and determining the input of the 5-bit S box according to the input of the 5-bit S box; the middle state in the password operation process is reconstructed before the 5-bit S box layer, and the key is indirectly obtained through the middle state; 2, evaluating the anti-differential fault analysis capability of the target lightweight encryption algorithm according to the differential fault attack result in the step 1; and step 3, designing the target lightweight encryption algorithm according to the anti-differential fault analysis capability evaluation result of the target lightweight encryption algorithm. According to the invention, the security of the LWC algorithm in the face of differential fault attack is improved.

The invention provides an S-box optimization method and device based on a moss growth optimization algorithm, and relates to the technical field of information security. The method comprises the following steps: generating a pseudo-random number based on a two-dimensional hyperchaotic system, constructing a Boolean function according to the pseudo-random number, and optimizing the nonlinearity of the Boolean function to generate an S box; the difference uniformity of the S box is optimized to obtain an initial optimized S box, and the overall performance of the initial optimized S box is optimized based on a moss growth optimization algorithm to obtain a final optimized S box. The device executes the method. According to the S-box optimization method and device based on the moss growth optimization algorithm provided by the embodiment of the invention, the pseudo-random number can be reasonably and efficiently generated, and the overall performance of the S-box is improved through a multi-objective optimization method.

The invention provides a symmetric cipher optimization method and system based on chaotic mapping, and the method comprises the steps: initializing a chaotic mapping parameter, and determining an initial value and a control parameter of a chaotic system; based on the initial value and the control parameter, utilizing enhanced Logistic chaotic mapping to generate a high-randomness chaotic sequence; constructing an initial S box based on the generated enhanced Logistic chaotic sequence; and carrying out optimization and structural weakness correction on the generated initial S box. According to the method, the security of the symmetric cryptographic algorithm can be remarkably improved, the anti-attack capability of the S box is greatly enhanced, the cryptographic index of the S box is ensured, and the security guarantee in a wider application scene is realized by adjusting the size of the S box through fine granularity.

The invention discloses a mobile phone USIM (Universal Subscriber Identity Module) side channel analysis method based on an outlier. The method comprises the following steps: S1, collecting a power consumption signal generated in the process of executing an AES (Advanced Encryption Standard) algorithm by a USIM card; s2, filtering and aligning the acquired power consumption signal to generate standardized side channel curve data; s3, for each key byte position participating in S box operation in the first round of AES, constructing a candidate key byte value, and calculating an S box output value; s4, recognizing recovered and uncertain key bytes by adopting a correlation energy analysis method; s5, deriving S box output byte positions influenced by the uncertain bytes in the second round; s6, calculating the correlation of the candidate value at the position, and generating a correlation feature vector; s7, inputting a local outlier factor algorithm, and calculating an outlier value; and S8, selecting the key byte with the maximum outlier as a final key byte to form a key byte set. According to the invention, the accuracy and robustness of USIM key recovery are improved in a low signal-to-noise ratio scene.

The invention relates to the technical field of data encryption, in particular to an application layer data encryption method and system based on an SM4 algorithm and abstract verification, and the method comprises the steps: obtaining to-be-encrypted text data in an application layer, and dividing the to-be-encrypted text data into a plurality of plaintext blocks; calculating the information repetition degree, the semantic association degree, the information sensitivity and the adjustment coefficient of each plaintext block; the method comprises the steps of adjusting control parameters of a chaotic mapping algorithm to obtain corresponding adjusted control parameters of each plaintext block, encrypting each plaintext block by combining the chaotic mapping algorithm and an SM4 algorithm to obtain ciphertext data, and verifying the integrity of the ciphertext data in a communication transmission process through a digital digest technology. According to the method, the S box and the round key are dynamically generated by adjusting the control parameters of the chaotic mapping algorithm, the static mode of fixing the S box and the key in the traditional SM4 algorithm is broken, the attack resistance of the plaintext block is enhanced, the risk that the plaintext block is leaked is reduced, and the encryption effect on application layer data is improved.

The invention provides an SM4 algorithm rapid implementation method and system based on a hardware extension instruction set, and the method comprises the steps: inputting a key according to 128 bits, and extending the key into a round key RK; performing data conversion on the round key RK to obtain a converted round key; the 16 input SM4 data blocks are cut and converted to obtain converted plaintext data; 32 rounds of iteration are carried out on the converted round key and plaintext data, an AVX512 instruction set instruction is used for achieving affine transformation to convert the data from a finite field where SM4 is located to a finite field where AES is located, then a VAES instruction set instruction is used for executing S box operation in the AES, and then the AVX512 instruction set instruction is used for achieving inverse affine transformation to convert the data from the finite field where the AES is located to the finite field where the SM4 is located; and performing large-end and small-end conversion on the data after the 32-round iteration process of the SM4 algorithm is executed again, taking out the data from the 512-bit register in a blocking manner, arranging the data into 16 blocks of ciphertexts corresponding to 16 blocks of plaintext data according to a specific sequence, and outputting the 16 blocks of ciphertexts.

The invention relates to a power secondary equipment fingerprint construction method and system, an electronic device and a storage medium, belongs to the field of network security, and solves the problems that the power secondary equipment is inaccurate in identity recognition, large in resource consumption and easy to be interfered by the environment. Comprising the following steps: periodically acquiring multi-dimensional features of the power secondary equipment according to an acquisition period and preprocessing the multi-dimensional features; based on the stability index value of each feature, dynamically allocating a weight for each feature, and performing tolerance mapping on the preprocessed features based on the weights to generate a robust feature character string; generating a dynamic S box exclusive to the power secondary equipment based on the plurality of high-stability characteristics of the power secondary equipment; and utilizing the exclusive dynamic S box to encrypt the robust feature character string through a lightweight encryption algorithm, carrying out Hash operation on an encryption result, and dynamically generating a fixed-length equipment fingerprint of the current acquisition period. And safe, efficient and stable identity authentication of the power secondary equipment is realized.

The invention discloses a dynamic involution block cipher S box implementation method and system. According to the method, two groups of 8-bit data can be replaced at the same time based on two rounds of Fesitel structures. In each round of Feistel structure, an F function is generated by any 8 * 8 static S box through linear recombination of private parameters. 256 S boxes depending on private parameters can be obtained in each F function. The whole dynamic S box can be kept consistent with an initial static S box in cryptographic property. Taking the static S box of the AES algorithm as an example, the dynamic S box and the S box of the AES algorithm have the same nonlinearity, difference uniformity and algebraic degree. In the average iteration output period, the S box is obviously superior to the S box of the AES algorithm. Besides, based on the symmetry of the Fesitel structure, the whole dynamic S box has involution, so that the hardware area overhead of an inverse S box does not need to be considered in the decryption process of the block cipher adopting the S box.

The invention discloses a data security processing system and method based on port information, relates to the technical field of data processing, and solves the technical problems that the security and effectiveness of data in an encryption process cannot be fully ensured, encrypted data cannot be efficiently stored, and storage resources cannot be reasonably utilized. According to the method, byte replacement operation is carried out by adopting an elaborately constructed S box, the security and effectiveness of the encryption process are ensured based on strict mathematical design and security consideration, the encryption strength and complexity are increased by carrying out grouping processing and subsequent hash value calculation and sorting processing on data, and the encryption efficiency is improved. The data is effectively prevented from being cracked and tampered, the displacement encrypted packet and the distributed storage nodes of the corresponding types are subjected to matched storage according to the data type of the displacement encrypted packet, matched storage is carried out according to the capacity interval during non-uniform distribution, the utilization rate of storage resources is increased, load balancing of the storage nodes is achieved, and storage management of the encrypted data is optimized.

The invention relates to a remote sensing image encryption method based on four-dimensional hyperchaotic mapping, and belongs to the technical field of information security. The method comprises the following steps: constructing a four-dimensional hyperchaotic system based on improved Henon and Quadratic mapping; generating an initial value of a four-dimensional hyper-chaotic system by combining the chi-square test value and the hash value of the remote sensing image to be encrypted, and performing iteration to generate a pseudo-random sequence; the method comprises the following steps: partitioning a remote sensing image to be encrypted, generating a three-dimensional random matrix by using a pseudo-random sequence to perform pixel scrambling on the partitioned image, generating four one-dimensional random matrixes by using the pseudo-random sequence, and obtaining four new S boxes for pixel replacement by combining a dynamic mask interleaving method; and combining the Gaussian function and the sine function to generate a waveform curve, and performing XOR on the waveform curve and the value of the pseudo-random sequence to realize scrambling and diffusion of pixels, and finally forming a ciphertext image. The objective of the invention is to solve the technical problem that security is difficult to guarantee due to relatively single phase space structure and obvious periodic characteristics during image encryption of traditional chaotic mapping.

The application discloses a kind of security detection method and device of cryptographic algorithm, the method includes: setting target plaintext data, and the target plaintext is processed by predefined cryptographic algorithm, and target ciphertext is obtained;The inverse operation of CBC chain operation is carried out to the target ciphertext, and intermediate ciphertext is obtained;The target plaintext data and the intermediate ciphertext are compared, and S box is cracked;According to the S box, inverse S box is constructed;According to the intermediate ciphertext and the inverse S box, solution is obtained, and decryption result is obtained;The decryption result and the target plaintext data are compared, and comparison result is obtained.The device includes memory and processor for executing the security detection method of the above cryptographic algorithm.The application provides a new direction for the security performance detection of encryption method.The application can be widely applied in the field of security detection.

The invention discloses an 8-bit S box construction method based on greedy random adaptive search, which comprises the following steps of: firstly, introducing a nonlinear term power function, a trigonometric function and a logarithmic function to construct a two-dimensional hyper-chaotic system TDHM on the basis of a benchmark test function Himelblau function; secondly, constructing a bijection initial S box based on a random number sequence generated by a two-dimensional hyper-chaotic system TDHM; and finally, respectively carrying out linearity and differential uniformity optimization on the S boxes of which the cryptographic properties do not meet the requirements, setting corresponding cost function values as optimization constraint conditions, selecting an optimized exchange strategy according to corresponding greedy rules, carrying out local search on the S boxes to optimize the linearity and differential uniformity of the S boxes, and carrying out optimization on the S boxes. And the password S box meeting the target condition is constructed. According to the method, the success rate of searching the S box meeting the target requirement is improved, and the average iteration frequency of the algorithm is effectively reduced.

The embodiment of the invention provides an automobile CAN message data security processing method and device and a vehicle, and relates to the technical field of vehicle-mounted network communication, an S box matrix for storing CAN message encryption S boxes is configured in advance, when a CAN message needs to be encrypted, a corresponding target encryption S box is matched from the S box matrix, and dynamic encryption is performed in combination with a data field and an ID of a to-be-encrypted message. According to the technical scheme provided by the invention, if the data field changes, the encryption process changes, so that it is difficult for the outside to explore and crack the rule, and the possibility of vehicle communication data leakage is significantly reduced.

The application discloses a kind of SM4 S box hardware implementation method and application based on redundant tower area, belong to information security technical field, including: using redundant tower area to express AES S box, and using little end order to express affine transformation;Give the conversion relationship between the S box of AES and SM4, and express affine transformation and constant offset using little end order;Based on step 1 and step 2, give the SM4 S box expression based on redundant tower area;Combined with the mask implementation of three-stage inverse of redundant tower area, complete the complete SM4 hardware design.The application first maps SM4 S box to the redundant tower area implementation framework of AES S box, by optimizing and merging multiple affine transformation layers and constant offset, realize high compact RTF-SM4.The S box is very easy to combine with mask class and double-track class and other gate-level side channel attack protection schemes, realize compact and anti-side channel attack SM4 hardware implementation, ensure the side channel security of encryption hardware.

The invention discloses a data decryption method and device based on an SP network structure, equipment and a medium, and relates to the technical field of information security, and the method comprises the steps: obtaining ciphertext data sent by a user side; the ciphertext data is data obtained after the user side encrypts plaintext data based on an SP network structure, a P box in the SP network structure is constructed based on a preset Vandermonde-like fusion matrix, and the Vandermonde-like fusion matrix is constructed based on an original Vandermonde matrix and a Vandermonde-like matrix obtained after the original Vandermonde matrix is transformed; acquiring encryption parameters respectively corresponding to an S box and a P box in the SP network structure; the encryption parameter comprises a Vandermonde-like fusion matrix; and performing inverse operation on the Vandermonde-like fusion matrix to obtain a target inverse matrix, determining a first decryption parameter corresponding to the P box based on the target inverse matrix, and decrypting the ciphertext data by using the first decryption parameter and a second decryption parameter corresponding to the S box to obtain plaintext data. According to the method, the inversion efficiency can be improved during decryption calculation.

The invention discloses a safety analysis method and system based on rotation symmetry and degree of freedom in S box linearization. The method comprises the following steps: step 1, obtaining an S box with rotation symmetry and a differential path probability corresponding to the S box according to a target algorithm; 2, according to the S box with rotation symmetry and the differential path probability corresponding to the S box, constructing a linearized round number inequality, and solving the linearized round number inequality; and 3, according to the solution of the linearization round number inequality, judging whether the S-box linearization technology can be utilized to attack the target algorithm or not. According to the method, whether a general target algorithm can be attacked by using an S box linearization technology or not can be quickly judged, the affine subspace of the S box can be quickly obtained and linearized, the number of rounds capable of being linearized is calculated, the method is suitable for all cryptographic algorithms with non-linear structures, the efficiency of S box linearization attack is improved, and the method has good application prospects. And resource waste is reduced.

The invention provides a self-anti-S box construction method and system based on m-sequence generation and logic optimization, and belongs to the technical field of cryptography and hardware security. The method comprises the following steps: firstly, constructing an n-level linear feedback shift register according to a set S box number n and a primitive polynomial, generating an m sequence in a non-all-zero initial state, and adding an all-zero state at the tail; a self-reverse S box lookup table is constructed through a symmetric mapping strategy, so that the ith element in the sequence and the element at the symmetric position form mapping, and the same S box is used for encryption and decryption. Thirdly, the lookup table serves as a Boolean function truth table, is simplified into a simplest expression through a logic minimization algorithm and is decomposed into a layered logic circuit; during actual processing, N data blocks are converted into a bit plane format from block type storage, then parallel operation is carried out through a hierarchical circuit, and finally a result is transposed back to block type storage. According to the method, the same S box hardware module can be reused in the encryption and decryption process, and hardware resources are remarkably saved.

The invention provides a method and a device for dynamically generating an S box on a finite field, and relates to the technical field of information security. The method comprises the following steps: inputting a first affine transformation variable and a second affine transformation variable, taking an independent variable of an S box as an initialization assignment of the S box, and performing squaring calculation on the initialization assignment in a 256-order finite field, performing first affine transformation in a second-order finite field according to a squaring calculation result, a predetermined target affine matrix and a first affine transformation variable; solving a multiplication inverse element of the first affine transformation result in a 256-order finite field, and performing second affine transformation in a second-order finite field according to the multiplication inverse element, the target affine matrix and the second affine transformation variable to obtain a numerical element of the S box; and traversing each independent variable value until reaching 255. The device executes the method. According to the method and the device provided by the embodiment of the invention, algebraic attacks can be resisted, and the dynamic S box is efficiently generated.

The invention discloses an S box, a data processing method, a computer program product, equipment and a medium, and relates to the technical field of cryptography, the S box comprises an input calculation module, an intermediate calculation module, an output calculation module and a first register block; the input calculation module is used for reading the input data, the first matrix and the first vector from the first register group, performing operation on the input data, the first matrix and the first vector to obtain a first operation result and storing the first operation result into the first register group; the intermediate calculation module is used for reading the first operation result from the first register block, performing inverse operation on the first operation result to obtain a second operation result and storing the second operation result into the first register block; and the output calculation module is used for reading the second operation result, the second matrix and the second vector from the first register block, performing operation on the second operation result, the second matrix and the second vector to obtain an output result and storing the output result in the first register block. And all modules can be subjected to parallel calculation, so that the calculation performance is improved.

The invention provides a data processing method and device based on a logic gate, and relates to the technical field of communication. The method comprises the following steps: acquiring input data, wherein the input data belongs to a finite field; the input data is processed through an S box, the S box is used for a symmetric encryption algorithm, the S box comprises a plurality of logic gates, and the plurality of logic gates comprise three input logic gates. According to the method in the embodiment of the invention, the calculation efficiency of the symmetric encryption algorithm can be improved.

The present invention discloses a data security processing system and method based on port information. The present invention relates to the field of data processing technology, and solves the technical problems of being unable to fully guarantee the security and effectiveness of data in the encryption process, efficiently storing encrypted data, and reasonably utilizing storage resources. The present invention ensures the security and effectiveness of the encryption process by adopting a carefully constructed S box to perform byte replacement operations based on strict mathematical design and security considerations. The strength and complexity of encryption are increased by grouping data, and subsequent hash value calculation and sorting processing, effectively preventing data from being cracked and tampered with. According to the data type of the displacement encryption package, it is matched and stored with the corresponding type of distributed storage nodes. When unevenly distributed, it is matched and stored according to the capacity interval, thereby improving the utilization rate of storage resources, realizing the load balancing of storage nodes, and optimizing the storage management of encrypted data.

The invention provides a method and a system for searching a password difference feature based on a weight construction SAT model. The method and the system mainly solve the problems that more Boolean variables are introduced and the efficiency of searching the password difference feature is low when an S box probability is described in the prior art. According to the implementation scheme, the method comprises the steps that a linear component of a target cryptographic algorithm is converted into a linear differential propagation assembly; according to DDT of a target algorithm S box, Boolean variables are introduced, weights are given, impossible propagation clauses are generated and simplified, and an S box differential propagation component in the SAT model is obtained; establishing an objective function according to the difference feature probability expected to be searched, and converting the objective function into an objective function part component in a conjunctive normal form by using weight sequence coding; and forming an SAT model by the components, and solving the SAT model to find out the difference feature of the target password. The method can effectively reduce the number of Boolean variables introduced for describing the S-box difference probability information, improves the efficiency of searching the difference characteristics of the cryptographic algorithm, and can be used for the design and analysis of the cryptographic algorithm.

The application relates to a power secondary equipment fingerprint construction method and system, an electronic device and a storage medium, and belongs to the network security field, and solves the problems of inaccurate power secondary equipment identity recognition, large resource consumption and easy environmental interference. The method comprises the following steps: periodically collecting multi-dimensional characteristics of power secondary equipment according to a collection period and preprocessing; based on stability index values of the characteristics, dynamically assigning weights to the characteristics, and based on the weights, performing tolerance mapping on the preprocessed characteristics to generate a robust feature string; based on a plurality of high-stability characteristics of the power secondary equipment, generating a dynamic S box special for the power secondary equipment; and using the special dynamic S box to encrypt the robust feature string through a lightweight encryption algorithm, and performing a hash operation on the encryption result to dynamically generate a fixed-length device fingerprint of the current collection period. The identity authentication of the power secondary equipment is safe, efficient and stable.

The invention discloses a security detection method and device for a cryptographic algorithm, and the method comprises the steps: setting target plaintext data, and carrying out the processing of a target plaintext through a predefined cryptographic algorithm, and obtaining a target ciphertext; performing inverse operation of CBC chain operation on the target ciphertext to obtain an intermediate ciphertext; comparing the target plaintext data with the intermediate ciphertext, and cracking to obtain an S box; constructing an inverse S box according to the S box; solving according to the intermediate ciphertext and the inverse S box to obtain a decryption result; and comparing the decryption result with the target plaintext data to obtain a comparison result. The device comprises a memory and a processor used for executing the security detection method of the cryptographic algorithm. The invention provides a new direction aiming at the security performance detection of the encryption method. The method can be widely applied to the field of security detection.

The application discloses a kind of anti side channel attack mask protection methods and systems based on circulant matrix, it is related to data security technology, including: generating random matrix, and, generating random permutation array based on the generated random matrix, wherein the random matrix only contains 1,0 element;Based on the generated random matrix, generate mask set by the cyclic shift of matrix;According to the generated random permutation array, the disorder calculation of S box is carried out in AES encryption algorithm, and based on the generated mask set, mask is added in the intermediate value in different positions.The application updates mask set by the cyclic shift of matrix, simultaneously generates permutation array using matrix, for the disorder calculation of S box, finally adds different mask on the intermediate value in different positions, achieves the purpose of protecting intermediate value.

The application discloses a kind of 8 bit S box construction method based on improved genetic algorithm, comprising the following steps: (1) by Logistic chaotic mapping and Tent chaotic mapping to form a kind of compound chaotic system, generates initialization population;(2) combined with the nonlinearity of S box, difference uniformity and strict avalanche criterion generates a multi-objective segmented weighted fitness function;(3) using the cross operation of guaranteeing S box bijectivity;(4) construct a reverse search method to search mutation point, and combined with hill climbing algorithm, random search method, generate based on 2N round search mutation operation, 2 point mutation point search is carried out in the first N rounds, 3 point mutation point search is used in the last N rounds, and a look-up table statistics method is further used to evaluate the property of optimized S box;(5) based on improved genetic algorithm constructs 8 bit password S box.The method of the application can generate 8 bit S box with excellent cryptographic properties based on improved genetic algorithm.