Home arrow Articles
SARAD A.V HOME PAGE
HomeLinksArticlesArchiveMisc.SearchDisclaimerAbout
Home
Links
Articles
Archive
Misc.
Search
Disclaimer
About

Articles
Written by Sarad   
Jan 14, 2006 at 04:16 PM
Article and Writeup Page

This section comprises a few of my write ups, mostly fun to read.

01. Attacking the Interlock Protocol.

Abstract
The Interlock Protocol is used as a mechanism to foil the Man in the Middle Attack, however by the attack proposed below, it is shown that the Interlock Protocol is insecure. It involves faking the first packet of the communication and the �man in the middle� sending forth half of the (n) th packet when he receives half of the (n+1) th packet and completes the attack.

Download: Type PDF, 83 KB

Attacking the Interlock Protocol

Interlock.pdf

02. Introduction to Diffie-Hellman and its Analog over Elliptic Curves using polynomial basis.

Download: Type PDF, 158 KB

Elliptic Curve Cryptosystem

ecc.pdf

03. Introduction to Elliptic Curves-A prequel.

Download: Type PDF, 96 KB

Elliptic Curve Cryptosystem

eccintro1.pdf

04. Man in the Middle Attack on the Analog of Massey Omura over Elliptic Curves

Abstract

The man in the middle attack (MITM) on the analog of Massey Omura over Elliptic curves may look confusing but is trivial and is as discussed.

Download: Type PDF, 54 KB

MITM on analog of Massey Omura

mo-mitm

05. Cryptanalysis of Linear Congruence Generators

Abstract

Multiplicative congruential generators have been first suggested by D.H.Lehmer as an arithmetic procedure to generate pseudo random numbers. A mild variation of it is the linear congruence generator. Over many years both these generators were widely used in simulations and reported to have good statistical properties and favorable cycle length. Cryptanalysts have come up with numerous complex methods to cryptanalyze the generators mentioned above. We present a simple method to cryptanalyze both multiplicative and linear congruence generators, which make them unsuitable as raw input to simulations and various cryptosystem.


Download: Type PDF, 136 KB

Cryptanalysis of Linear Congruence Generators

lcg.pdf

06. Mini Project on Secure E-Banking

Functionality

E-Banking is vulnerable to numerous attacks as it deals with online digital cash transactions. It is hence important to use publicly acclaimed cryptographic algorithms that have been under scrutiny and cryptanalysis for numerous years. We choose a symmetric key cryptosystem such as Blowfish for our implementation. Though encrypted, the transactions between the two banks are still vulnerable to block replay attacks by a man in the middle. To thwart this attack we use a suitable chaining mode such as Cipher Block Chain with checksum (CBCC). A separate Initialization Vector (IV) is generated for chaining each transaction, using a fast Pseudo Random Number Generator (PRNG) with a large period. We use one such PRNG known as Mersenne Twister (MT19937). The public keys of Bank A and Bank B are authenticated by a Certifying Authority (CA). The application is implemented by writing a client and server program using Berkley Sockets. This application assumes the existence of a CA and doesn�t implement any Public Key cryptosystem.

Download: Type WinZip, 529 KB(Total)

Secure E-Banking

report.zip

mt.zip

servercode.zip

clientcode.zip

testing.zip

07. RSA Encryption Algorithm in a Nut Shell

Abstract

To analyze the RSA encryption algorithm and present a working implementation in python. We discuss the mathematical results and see why the math works. The proofs of various number theoretic results subsequently discussed are available in books mentioned in the bibliography and thus omitted. Detailed discussions on big oh notation, time complexity of basic bit operations, Euclidean and extended Euclidean algorithm, time complexity of Euclidean algorithm, time complexity of extended Euclidean algorithm, linear congruences, Euler totient function, Fermats little theorem, Euler�s theorem, the Miller-Rabin test are presented. With this mathematical background we then analyze the RSA algorithm followed by a simplifed example. Finally, the documented python code for the RSA algorithm is presented and is hoped to be of use for serious programmers who intend on implementing the algorithm on a workstation. (Co-Authored with R.S)


Download: Type PDF, 392 KB

RSA Encryption Algorithm in a Nut Shell

rs.pdf

08. Applications to Chinese Remainder Theorem.

Abstract


We demonstrate the usefulness of a simple mathematical result- the Chinese Remainder Theorem (CRT). A short informal introduction is followed by a formal analysis of the Chinese Remainder Theorem. Further, we discuss its application to a simple k-threshold system for secret sharing and for clever RSA variants, namely RSA-CRT and Rebalanced-RSA-CRT.Note: The description of k-threshold scheme using chinese remainder theorem is incorrect, please refer to "C.Asmuth, J. Bloom: A modular approach to key safeguarding". IEEE Transactions on Information Theory 29(2): 208-210 (1983).

Download: Type PDF, 124 KB

Applications to Chinese Remainder Theorem.

crt.pdf

09. Cryptovirology: Threats and Countermeasures.

We describe a less common attack on standalone and networked computer systems known as CryptoViral attacks. These are however very powerful attacks, where the attacker can hold the victim�s data for ransom.


Download: Type PDF, 24 KB

Cryptovirology: Threats and Countermeasures

cv.pdf

10. Two Cryptanalysis Challenges Based on the Discrete Log Problem.

I had the good fortune to write two Crypto Challenges based on the Discrete Log Problem and I thank Nequ Marba for trying them out and solving it correctly.

Download: Type PDF, 24 KB

Cryptanalysis: Challenge based on Discrete Log Problem

cryptanalysis_01.pdf

11. Two Other Crytpo Challenges.

Two simple challenges-one related to the RSA cryptosystem and the other related to Inverting Matrices.

Download: Type PDF, 12 KB

Cryptanalysis: Two Other Crypto Challenges

cryptanalysis_00.pdf


Mambo is Free Software released under the GNU/GPL License.