Updatable Hybrid Encryption Scheme with No-Directional Key Update for Cloud Storage

In recent years, with the widely used of cloud computing, the security of network for data is more and more important. Traditional symmetric encryption requires both parties to hold the same encryption and decryption keys, which is not suitable for cloud computing environment. Asymmetric encryption also requires that each user and the system have an unique public-private key pair, making the key generation and holding costs are too high. So Ciphertext Policy Attribute-Based Encryption scheme comes in handy. After the attribute mechanism generates a public key and a master private key, it only needs to assign a set of private keys according to the attributes for each user, reducing the cost of key pairs. However, with the increase of user data, it takes more and more time for the data owner to encrypt data. How to accelerate the encryption speed also becomes the key to optimize the system. Combined with relevant research, this paper proposes an encryption scheme based on the multiplexing sub-strategy. On the basis of ensuring the original security, it optimizes the speed of multiple encryption schemes with the same sub-strategy that need to be encrypted simultaneously for the data owner, which greatly improves the computing speed.

With the development of modern communication technology, an increasing number of people are choosing to communicate end-to-end over the network. However, the risk of information leakage and data tampering has also increased, and the issue of information confidentiality has become an increasing concern. Among the existing encryption algorithms, symmetric encryption algorithms cannot securely manage the key and share the key between communication parties; ECC and other public key encryption algorithms have problems such as slow encryption and decryption speed, low encryption strength, etc. In addition, key management is still not guaranteed to be very secure; conventional hybrid encryption algorithms need to manage two different types of keys, and key management may be very complicated and prone to key leakage or theft. Based on the problems of the above algorithms, this paper proposes RSA-Co-CP-ABE Architecture, which uses socket communication, encrypts the RSA public key passed from Client to Server with CP-ABE, encrypts the confidential message with the public key passed from Client at Server, and finally sends the encrypted message to Client. This scheme has higher flexibility than the traditional symmetric encryption and public key encryption schemes, and by using CP-ABE encryption, it can realize attribute-based access control. And RSA encryption can make the scheme make a better balance between encryption and decryption efficiency and encryption strength. In addition, because the communication is transmitted in full cipher text during the communication, the scheme can effectively resist tampering or stealing by man-in-the-middle attacks.

The notion of encryption simulatability was proposed by Dent to help proving plaintext awareness, and it was claimed that a hybrid encryption scheme composed of a simulatable KEM and a simulatable DEM is simulatable. Here we prove the simulatability of IND-CCA2 secure probabilistic symmetric encryption scheme with every string in its ciphertext space being a valid ciphertext. Moreover, for such a DEM and a simulatable KEM with sparse valid ciphertext space, we show that the resulting hybrid encryption scheme is not simulatable. However, if both the KEM and DEM have sparse valid ciphertext space, or every string in the ciphertext space of the hybrid encryption scheme is a valid ciphertext, then the hybrid encryption scheme is simulatable. Thus the proof for the plaintext awareness of the Cramer-Shoup hybrid encryption scheme provided by Dent is still valid.KeywordsPlaintext awarenessencryption simulatabilityhybrid encryptiondata encapsulation mechanism

Cryptographic Primitives that Resist Backdooring and Subversion

This work presents the employment of graph theory for cryptographic applications. A Cartesian product graph (CPG) is used to propose new symmetric encryption schemes. On proposed encryption schemes, the ciphertexts of the plaintexts are sent to the receiver entity as the CPGs. The CPG is created based on two graphs G and H that are generated depending on the random choices of the plaintext bits. These bits are used as vertices of graphs G and H. The purpose of using the CPG is to increase the security level of the symmetric encryption schemes in comparison with other encryption schemes. Two study cases of the proposed symmetric Cartesian product graphic encryption (SCPGE) schemes are presented as new experimental results. The security issues of the proposed SCPGE schemes are determined. The SCPGE schemes consider as new insights for more secure communications.

Attribute-based encryption schemes with constant-size ciphertexts

Forward and backward secure updatable ElGamal encryption scheme for cloud storage

Cloud storage enables users to remotely store their data and enjoy the on-demand high quality cloud applications without the burden of local hardware and software management. Though the benefits are clear, it inevitably poses new security risks toward the correctness of the data in cloud. To address this problem, the proposed design allows users to audit the cloud storage with very lightweight communication and computation cost by utilizing the new cryptographic technique like homomorphic token and distributed erasure-coded data. By introducing the notion of parallel homomorphic encryption (PHE) schemes, which are encryption schemes that support computation over encrypted data via evaluation algorithms that can be efficiently executed in parallel. In addition, we can hide the function being evaluated with the MapReduce model runnable on Hadoop framework for element testing and keyword search. Analysis shows the proposed scheme is highly efficient and resilient against Byzantine failure, malicious data modification attack, and even server colluding attacks and attempting to strike a balance between security, efficiency and functionality using Kerberos protocol and HDFS system.

In the process of enterprise information, more and more enterprises begin to pay attention to the construction and implementation of digital archives system. At present, the storage of the digital archives system is local storage and local area network storage, it will lead to the isolation of the archives information, the high cost of construction and management, and the difficulties in the later maintenance. This paper studies and designs the digital archives cloud storage platform, the physical architecture design of the cloud platform, the architecture and planning of the cloud storage platform, the open interface and service access design, and the cloud storage security strategy. Based on the security requirements of digital archival cloud storage, a hybrid encryption mode based on symmetric encryption and asymmetric encryption is proposed, and a digital archives encryption algorithm based on RSA and AES encryption algorithm is implemented. The construction of safe digital archives cloud storage platform can popularize the consciousness of digital archives, reduce the cost of archives management, improve the level of archives management, and ultimately promote the level of modernization management.

Cloud Computing is a promising technology used by scientific and enterprise communities to access shared resources from anywhere through the internet. Users may also store their sensitive and confidential information on the cloud that requires an eminent encryption scheme and a fine-grained access policy to ensure privacy and security. Disparate obtainable symmetric, asymmetric and Attribute-Based Encryption has appreciable encryption schemes to keep secure the confidential data. In this paper, the authors have analyzed existing data encryption schemes, like RSA, KP-ABE, CP-ABE, and AES. The comparisons among them on the basis of computational cost and storage cost have been shown. Further, the authors have proposed an improving scheme to enhance the speed of RSA encryption using multi-threading concept on latest multi-core CPUs.

Safeguarding information in the M-IoT with a hybrid encryption scheme. Safeguarding private health information communicated across IoT networks while minimising computational strain and ensuring information reuse is an issue that this paradigm solves. Safe and secure data exchange between patients and medical professionals is made possible by the suggested design in situations that are both routine and emergency. An effective authentication method that reduces computing cost throughout encryption and decryption is offered by this hybrid technique, which combines symmetric security with encryption based on attributes (ABE). Additionally, the approach prevents pretending to be another man-in-the-middle, and replay assaults while ensuring the safety and security of data. The design incorporates healthcare officials overseeing security standards, encryption storage of information in the cloud, as well as node sensors that track patients’ vitals. If you’re looking for a solution for safe, large-scale M-IoT the deployments, look no farther than the hybrid approach. It beats out previous alternatives in terms of computing expenses, protection level, and encryption and decryption time. According to this chapter’s findings, the suggested paradigm improves medical IoT settings in terms of stability, safety, and user access management. When compared with Sirius and Plutus, the hybrid encryption model designed to secure medical data in the (M-IoT) outperforms them with regard to of efficiency & overall accuracy by over 97%.

QC-MDPC McEliece attracted significant attention as promising alternative public-key encryption scheme believed to be resistant against quantum computing attacks. Compared to binary Goppa codes, it achieves practical key sizes and was shown to perform well on constrained platforms such as embedded microcontrollers and FPGAs. However, so far none of the published QC-MDPC McEliece/Niederreiter implementations provide indistinguishability under chosen plaintext or chosen ciphertext attacks. Common ways for the McEliece and Niederreiter encryption schemes to achieve IND-CPA/IND-CCA security are surrounding constructions that convert them into secured schemes. In this work we take a slightly different approach presenting 1 an efficient implementation of QC-MDPC Niederreiter for ARM Cortex-M4 microcontrollers and 2 the first implementation of Persichetti's IND-CCA hybrid encryption scheme from PQCrypto'13 instantiated with QC-MDPC Niederreiter for key encapsulation and AES-CBC/AES-CMAC for data encapsulation. Both implementations achieve practical performance for embedded microcontrollers, at 80-bit security hybrid encryption takes 16.5i¾źms, decryption 111i¾źms and key-generation 386.4i¾źms.

This paper focuses on studying cloud storage data protection model and implementing encrypted storage of user data in double-key form. User data are encrypted with symmetric encryption algorithm and this secret key is encrypted with asymmetric encryption algorithm. The private key is managed and controlled by users. In this way, users guarantee the security of their own data with the sole private key. Providing effective protection for uploading and downloading of user data and good data storage and transmission support for cloud storage application through the data protection mechanism deployed at client, thus solving the biggest obstacle, i.e. security of cloud data in the application of cloud storage enterprises currently to a certain extent.

With the enhanced data amount being created, it is significant to various organizations and their processing, and managing big data becomes a significant challenge for the managers of the data. The development of inexpensive and new computing systems and cloud computing sectors gave qualified industries to gather and retrieve the data very precisely however securely delivering data across the network with fewer overheads is a demanding work. In the decentralized framework, the big data sharing puts a burden on the internal nodes among the receiver and sender and also creates the congestion in network. The internal nodes that exist to redirect information may have inadequate buffer ability to momentarily take the information and again deliver it to the upcoming nodes that may create the occasional fault in the transmission of data and defeat frequently. Hence, the next node selection to deliver the data is tiresome work, thereby resulting in an enhancement in the total receiving period to allocate the information. Blockchain is the primary distributed device with its own approach to trust. It constructs a reliable framework for decentralized control via multi-node data repetition. Blockchain is involved in offering a transparency to the application of transmission. A simultaneous multi-threading framework confirms quick data channeling to various network receivers in a very short time. Therefore, an advanced method to securely store and transfer the big data in a timely manner is developed in this work. A deep learning-based smart contract is initially designed. The dilated weighted recurrent neural network (DW-RNN) is used to design the smart contract for the Ethereum blockchain. With the aid of the DW-RNN model, the authentication of the user is verified before accessing the data in the Ethereum blockchain. If the authentication of the user is verified, then the smart contracts are assigned to the authorized user. The model uses elliptic Curve ElGamal cryptography (EC-EC), which is a combination of elliptic curve cryptography (ECC) and ElGamal encryption for better security, to make sure that big data transfers on the Ethereum blockchain are safe. The modified Al-Biruni earth radius search optimization (MBERSO) algorithm is used to make the best keys for this EC-EC encryption scheme. This algorithm manages keys efficiently and securely, which improves data security during blockchain operations. The processes of encryption facilitate the secure transmission of big data over the Ethereum blockchain. Experimental analysis is carried out to prove the efficacy and security offered by the suggested model in transferring big data over blockchain via smart contracts.

The rapid growth of internet of things (IoT) applications, especially in wireless sensor networks (WSNs), has led to the generation of large amounts of real-time data from interconnected devices. This growth leads to challenges in securing data access and managing resources efficiently. To address these challenges, we propose a dynamic trust-based access control (DTAC) model for IoT and WSN applications. The DTAC model integrates behavioral trust evaluation and context-aware decision making to dynamically adapt access permissions to network conditions in real-time. the trust scores are calculated using fuzzy logic and machine learning techniques, which enable adaptive decision-making. To increase security, the model uses a hybrid encryption scheme that combines elliptic curve cryptography (ECC) with lightweight symmetric encryption, ensuring data confidentiality with minimal computational overhead. In addition, access control decisions are refined by contextual factors such as user roles, device locations, and data sensitivity. The model includes a collaborative re-evaluation mechanism that periodically updates trust scores and isolates malicious nodes without compromising network stability. The DTAC model is evaluated on key metrics such as security resilience, energy efficiency, and latency and demonstrates better performance than existing solutions. This model provides a scalable, energy-efficient, and secure framework for IoT and WSN applications that ensures reliable data access and privacy in diverse environments.