Search

This article examines the foundational principles and protocols that guide the development, implementation and use of encryption and their relevance and impact on technology law and policy. It first focuses on the technical aspects of encryption and explains the meanings of key terms and the different kinds and uses of this technology. It then expounds on the technical principles and protocols of encryption including information security, openness, provable security, and its adversarial nature. The article thereafter analyses the significance and import of these standards and rules on the proposed ghost protocol in encrypted messaging services and encryption law and policy more generally. It argues that technical principles such as information security, primacy of keys and resistance to attacks should be recognised and upheld in the development and adoption of encryption regulation. [ABSTRACT FROM AUTHOR]

This article addresses the pervasive issue of digital piracy in the movie industry. Despite substantial efforts to combat piracy, its impact remains significant, resulting in substantial financial losses for companies. Digital rights management (DRM) has been introduced as a countermeasure to counter this challenge. While the security of video applications, including commercial and military videos, has gained prominence in recent research, this paper focuses on enhancing the encryption algorithm and presenting encryption results. Specifically, it explores the AES 128 encryption algorithm's vulnerabilities in the MPEG-DASH media file and proposes a randomized algorithm for video file encryption. To bolster security, the randomized approach leverages three robust algorithms: AES 256, Two-Fish, and Serpent. The randomized algorithm demonstrated significantly higher resistance to brute-force attacks than AES 128 CBC, as exemplified by a test scenario with a key length of 32 and 100 media chunks. By utilizing this combination of unbroken algorithms, the paper offers an efficient solution for offline-protected media storage, ultimately strengthening the security and privacy of the MPEG-DASH DRM system and mitigating the risk of media file piracy. The randomized algorithm consistently outperformed AES 128 CBC in terms of execution time across multiple media files, with the randomized algorithm completing the encryption process in 34,610 milliseconds for Media File 1, compared to AES 128 CBC, which required 59,910 milliseconds, showcasing a notable enhancement in speed. [ABSTRACT FROM AUTHOR]

Our world is making its way toward complete digitization, with more and more data going to the Internet. Thus, the security of the data has become one of our utmost responsibilities. Strong and secure cryptography and steganography techniques have become the need of the hour to defend against modern adversaries. In this article, a novel scrambled data hiding approach is proposed to secure the sensitive information used in communications. The lacuna in the existing data hiding approaches is the loss of originality in the sensitive data to be attached, leading to poor information quality. This issue is addressed in the proposed approach by encrypting the data using the triple data encryption standard (DES) algorithm. The scrambled data are hidden in the audio file using the least significant bit (LSB) embedding. Experiments were conducted, and the proposed approach secured the sensitive information significantly without the loss of information quality. Furthermore, the secured information is retrieved by only the authenticated users with high quality. [ABSTRACT FROM AUTHOR]

Rapidly rising the quantity of Big Data is an opportunity to flout the privacy of people. When high processing capacity and massive storage are required for Big Data, distributed networks have been used. There are several people involved in these activities, the system may contribute to privacy infringements frameworks have been developed for the preservation of privacy at various levels (e.g. information age, information the executives and information preparing) as for the existing pattern of huge information. We plan to frame this paper as a literature survey of these classifications, including the Privacy Processes in Big Data and the presentation of the Associate Challenges. Homomorphic encryption is particularised aimed at solitary single action on the ciphered information. Homomorphic enciphering is restrained to an honest operation on the encoded data. The reference to encryption project fulfils many accurate trading operations on coded numerical data; therefore, it protects the written in code-sensible information even more. [ABSTRACT FROM AUTHOR]

This article examines the disconnect between people's social conceptions of privacy and information security in relation to encryption vis-à-vis the legal protections offered by law. It describes the social conceptions and expectations of participants based in New Zealand and contrasts these with the applicable laws and legal protections concerning privacy, information security and encryption. In light of incongruence between the social and the legal, the article recommends law and policy developments to better align and connect people's social conceptions of privacy and information security with the legal protections provided by law. This includes having greater awareness of the relevance of civil and criminal procedure rights to privacy and information security in the context of encryption and providing stronger legal protections to the right against unreasonable search and seizure and the privilege against self-incrimination. [ABSTRACT FROM AUTHOR]

This article examines the resource sharing functionality of the decryption platform of Europol. The platform supports European law enforcement agencies (LEAs) that are having difficulties accessing legally obtained encrypted evidence due to the lack of human and technical resources. The article investigates Europol's resource transmission role with sharing economy variables such as transaction cost and trust-building. The core argument of the article is that Europol's sharing platform has a strong potential to reduce the transaction cost of outsourcing the decryption services and diminish trust-related problems for national policing agencies by replacing private sector actors. However, for a more sustainable cybercrime investigation strategy, the decryption platform needs a new market-oriented model supported with robust vetting and evidence security mechanisms to encourage more private company participation. [ABSTRACT FROM AUTHOR]

This paper describes a cryptographic protection system hardware device designed to improve data encryption and decryption performance and preserve data integrity. The cryptosystem is implemented by hardware-software method, where the encryption and decryption of data are carried out in a standalone FPGA device based on non-positional polynomial number system (NPN). For data encryption the next block of text to be encrypted is divided into sub-blocks and represented as separate binary polynomials and binary polynomials-keys are assigned to them, as well as irreducible polynomials (modules). Then, split blocks are calculated in parallel and a ciphertext is formed. For this purpose, the special algorithm where calculation of NPN parameters and check on irreducibility of polynomials (modules) and the program of generation of direct and inverse keys are developed and application functional is developed that implements operations in the ring of polynomials with coefficients GF(2) using an object-oriented approach. We have developed polynomial multipliers modulo sequential and parallel action (matrix multiplier) on the basis of which data encryption and decryption are performed. [ABSTRACT FROM AUTHOR]

Social media applications (apps) use sensitive/private data in their nature. Android apps continue to share data with third parties and often transmit data unencrypted, leaking data directly and inadvertently. Internet Service Providers (ISPs) can legally collect and sell this leaked, sensitive user data. End users rely on privacy policies that have largely been absent, continue to lack detailed security methods, and have had inconsistencies with app actions. Overall, we lack a detailed understanding of the state of these privacy and security issues within sensitive settings such as social media apps. We aim to expose these apps, meticulously classifying and comparing unencrypted data transmitted with privacy policy disclosure, leveraging the Platform for Privacy Preferences (P3P) Specification. We develop an analysis framework and isolated testbed environments, leveraging open-source tools to enable accurate data collection through dynamic analysis. We then peer into privacy policy revisions, advertising/analytics libraries, and business relationships held by app companies. We report detailed inconsistencies between app behaviors and privacy disclosure. Most apps in our dataset transmitted the majority of their traffic unencrypted and several leaked personally identifiable information (PII)/sensitive data, while none detailed security methods or data transmission practices. Finalizing our study, we conduct brief follow-up experiments on several apps to note substantial changes in data transmission practices. We conclude that a failure to protect sensitive user data and a tendency for vague privacy policies continue to be prevalent, but over the last few years some apps have increased encryption use, thus beginning to combat some data leakage. [ABSTRACT FROM AUTHOR]

"The American Library Association affirms that rights of privacy are necessary for intellectual freedom and are fundamental to the ethical practice of librarianship," reads a position paper by the ALA. Protecting user privacy is a cherished ethical position held within this field. Therefore, it is worth asking whether libraries have been aggressive enough to protect this standard, given the rapid advancement of information technology, digital surveillance, cybercrime, commercial exploitation of user data, and emerging privacy threats for the individual and culture. This paper seeks to reconcile the ethical vision with the hard reality that emerging cyber threats can easily circumvent basic library efforts to protect user data. The author imagines the "black box" library, which would be the end result of radical adherence to the ethical standard. In short, the "black box" library would protect freedom of conscience for the user by adhering to extremely rigorous standards, including: Mass encryption, proxy services, legal enforcement of privacy provisions in vendor contracts, recordless inventory systems, and other strict measures. The vision is for a space where critical information flows in, but very little if any "digital exhaust" escapes it. [ABSTRACT FROM AUTHOR]

The recent legal dispute in San Bernardino pitting the Apple Corporation against the Federal Bureau of Investigation (FBI) concerned whether Apple was legally obliged to help law enforcement access the contents of a deceased terrorist's iPhone. The metonym of the “warrant” played an important role in public disputation regarding the relationship between the FBI's investigation and Apple's encryption technology. Representing a complex temporal sequence that includes the licensing of a search, a search, and a rendering of intelligible data, the metonym warrant enabled anti-encryption arguments that avoided overtly advocating decryption or public key use. The warrant metonym enabled this argumentative tactic by drawing more attention to the term's licensing feature, as it embedded the assumption that the search should be effective. Our analysis of this argumentation demonstrates how metonyms are inference-generating tools capable of instantiating normative frameworks that establish the argumentative framework for a dispute. [ABSTRACT FROM AUTHOR]

As the development of Radio Data System (RDS) technology and its applications are getting more and more attention and promotion, people concern their personal privacy and communication efficiency, and therefore compression and encryption technologies are being more important for transferring RDS data. Unlike most of the current approaches which contain two stages, compression and encryption, we proposed a new algorithm called Swapped Huffman Table (SHT) based on Huffman algorithm to realise compression and encryption in a single process. In this paper, a good performance for both compression and encryption is obtained and a possible application of RDS with the proposed algorithm in smart transportation is illustrated. [ABSTRACT FROM AUTHOR]

In this paper, a hybrid approach based on cryptography and steganography is proposed for the security of medical image over an open communication channel. In this approach, medical image information is embedded using discrete cosine transform (DCT)-singular value decomposition (SVD)-based embedding process. The medical image is encrypted using CS encryption before embedding into the standard image. This encrypted medical image is inserted into the singular values of DCT coefficients of the standard image to get the stego image. The experimental results show that the encrypted medical image is successfully extracted from the stego image under various image processing attacks at recovering side. The result analysis also shows improved imperceptibility of the stego image with a peak signal-to-noise ratio value above 60 dB for all types of medical images under consideration. Furthermore, the computation time of proposed approach is less than that of existing approaches. [ABSTRACT FROM AUTHOR]

Nowadays, big data has become ubiquitous. Big data contains great value and chance. However, big data also brings many security risks and privacy-preserving problems. Security and privacy issues are magnified by velocity, volume, and variety of big data. Then, traditional security mechanisms are not suitable for big data security. Privacy preserving is one of the major challenges in big data. This paper surveys privacy preserving in big data and its key techniques. And, legal measures and industry specifications regarding privacy preserving for big data are also addressed. Finally, some new privacy challenges in the future are summarized. [ABSTRACT FROM PUBLISHER]

Stream ciphers require the use of initialization vectors (IVs) to ensure that the same secret key produces different keystreams. It also synchronizes communication between two parties. However, there are many cryptanalytic attacks that exploit weaknesses in the IV setup of stream ciphers. In an effort to solve this problem, we introduce a chaos-based stream cipher that utilizes a new mode of synchronization called true random synchronization (TRSync). The stream cipher is designed based on spatiotemporal chaos while taking advantage of TRSync to resist various statistical attacks. The stream cipher operations also include data-dependent rotations and chaotic perturbation. As chaotic functions are inherently slow due to floating point operations, we utilize fixed point representation for higher efficiency. TRSync includes a true random number sequence (TRNS) into the synchronization process alongside the public IV. The IV is masked by the TRNS before being used to setup the cipher. Therefore, the cipher's internal state cannot be manipulated by an attacker and constantly changes even if the secret key-IV pairs are constant. TRSync can also be used to secure other stream ciphers with IVs as described in this paper. The security of the proposed chaotic cipher is thoroughly analyzed in terms of randomness, periodicity, entropy, balance, correlation, and complexity. [ABSTRACT FROM AUTHOR]

Cryptographic keys used in encryption algorithms face the disadvantages of difficulty in key management especially when it comes to keys generation, sharing, and storage. In this article, using gray level co-occurrence matrix, a textured image is partitioned into regions and textural features were extracted to produce a maximum of 120 bits cryptographic keys. Results showed that by manipulating neighboring pixels, suitable keys of varying lengths and patterns could be generated. The same key used for encryption can be reproduced consistently; this will provide a reliable and flexible method of key generation, sharing, and storage. [ABSTRACT FROM PUBLISHER]

Massive public pressure is arising to achieve data privacy and protection. One way to maintain data privacy is to perform efficient data disposal processes. This minimizes the chances of data leakage over an extended period and through irresponsible actions. That is why adequate data disposal is essential in so many governmental and critical institutions. Simply “deleting” data does not erase it. In fact, it only removes the name that refers to that piece of data, but the data itself remains. In this paper, we utilize an encryption algorithm and then perform a randomization process to dispose of data values in an irreversible approach making it difficult to retrieve the original value of data from the defaced result. [ABSTRACT FROM AUTHOR]