Using SEED Cipher Algorithm with SRTP Seokung Yoon (KISA) Goal / - PowerPoint PPT Presentation

Sep 23, 2022 •218 likes •294 views

Using SEED Cipher Algorithm with SRTP Seokung Yoon (KISA) Goal / Motivation Goal : The SEED cipher algorithm would be the default cipher together with AES in SRTP Motivation In Korea, many companies provide VoIP service and we

Using SEED Cipher Algorithm with SRTP Seokung Yoon (KISA)
Goal / Motivation • Goal : The SEED cipher algorithm would be the default cipher together with AES in SRTP • Motivation – In Korea, many companies provide VoIP service and we predict the VoIP market could grow to as much as $10 billion by the year 2009 – Our agency developed a VoIP phone to support secure communications for user privacy, and adopted SRTP for confidentiality to the RTP traffic – We add two algorithms for multimedia data encryption • AES – default cipher in SRTP and SEED – national standard – The SEED cipher algorithm is a national industrial association standard and is widely used in South Korea for electronic commerce and financial services that are operated on wired and wireless communications.
The SEED Cipher Algorithm (1/2) • developed by KISA in 1999 • Standard status - TTA Standard in Korea  TTAS.KO-12.0004, “128-bit Symmetric Block Cipher (SEED)” - IETF Standard  RFC 4269, The SEED Encryption Algorithm  RFC 4010, Use of the SEED Encryption Algorithm in CMS  RFC 4162, Addition of SEED Cipher Suites to TLS  RFC 4196, The SEED Cipher Algorithm and Its Use with IPSec - ISO/IEC Standard  JTC 1/SC 27 N3979, “IT Security technique – Encryption Algorithm – Part3 : Block ciphers”
The SEED Cipher Algorithm (2/2) • Feature - Block cipher with DES-like(Feistel) structure - The size of input/output bit is fixed 128-bit (Padding is required by SEED to maintain a 16-octet blocksize) - A strong round function against known attacks - The number of rounds is fixed 16 - Mixed XOR and Modular addition operation
Example • The initial value, IV, shall be defined by the SSRC, the SRTP packet index i, and the SRTP session salting key k_s, as below: IV = (k_s * 2^16) XOR (SSRC * 2^64) XOR (i * 2^16) or shall be generated randomly <AES-CM> <SEED>
Next Steps • Comments or Questions ?? • Working Group Item??

Download Presentation

Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

CS 241 Data Organization Ciphers March 22, 2018 Cipher In cryptography, a cipher (or

CS 241 Data Organization Ciphers March 22, 2018 Cipher In cryptography, a cipher (or cypher) is an algorithm for performing encryption or decryption. When using a cipher, the original information is known as plaintext , and the

449 views • 41 slides

HOST DES ECE 495/595 DES Block Cipher DES: A remarkable well-engineered algorithm, thats old

HOST DES ECE 495/595 DES Block Cipher DES: A remarkable well-engineered algorithm, thats old but had a powerful influ- ence on cryptography (still used in ATM machines) In 1972, NBS (now NIST) solicited for an encryption algorithm -- IBM

320 views • 4 slides

PRF , Block Ciphers MAC Lecture 6 One-time CPA-secure RECALL SKE with a Stream-Cipher m

PRF , Block Ciphers MAC Lecture 6 One-time CPA-secure RECALL SKE with a Stream-Cipher m (stream) Enc One-time Encryption with a stream-cipher: SC K Generate a one-time pad from a short seed Can share just the seed as the key Mask

1.33k views • 102 slides

DTLS-SRTP Key Transport (KTR) AVT Working Group draft-wing-avt-dtls-srtp-key-transport-03

DTLS-SRTP Key Transport (KTR) AVT Working Group draft-wing-avt-dtls-srtp-key-transport-03 Dan Wing, dwing@cisco.com IETF74, San Francisco, March 2009 draft-wing-avt-dtls-srtp-key-transport-03 1 Status Third presentation to AVT

477 views • 10 slides

Problem 1 k zero bits n bits IV Block Block Block Block Cipher Cipher Cipher Cipher

Problem 1 k zero bits n bits IV Block Block Block Block Cipher Cipher Cipher Cipher removed January 27, 2011 Practical Aspects of Modern Cryptography 2 Problem 1 IV Inverse Inverse Inverse Inverse Cipher Cipher Cipher Cipher

464 views • 20 slides

Vigenre Cipher Like Csar cipher, but use a phrase Example Message THE BOY HAS THE

Vigenre Cipher Like Csar cipher, but use a phrase Example Message THE BOY HAS THE BALL Key VIG Encipher using Csar cipher for each letter: key VIGVIGVIGVIGVIGV plain THEBOYHASTHEBALL cipher OPKWWECIYOPKWIRG May

304 views • 26 slides

Caesar Cipher If he had anything confidential to say, he wrote it in cipher, that is, by so

Caesar Cipher If he had anything confidential to say, he wrote it in cipher, that is, by so changing the order of the letters of the alphabet, that not a word could be made out. If anyone wishes to decipher these, and get at their meaning, he

1.03k views • 5 slides

Symmetric-Key Encryption: constructions Lecture 5 PRF , Block Cipher PRG from One-Way RECALL

Symmetric-Key Encryption: constructions Lecture 5 PRF , Block Cipher PRG from One-Way RECALL Permutations One-bit stretch PRG, G k : {0,1} k {0,1} k+1 k k G R 1 Increasing the stretch Can use part of the PRG output as a new seed

1.31k views • 107 slides

Classical Ciphers Playfair Cipher Polyalphabetic Ciphers Cryptography Vigen` ere Cipher

Cryptography Classical Ciphers Caesar Cipher Monoalphabetic Ciphers Classical Ciphers Playfair Cipher Polyalphabetic Ciphers Cryptography Vigen` ere Cipher Vernam Cipher One Time Pad School of Engineering and Technology CQUniversity

687 views • 64 slides

Classical Ciphers Playfair Cipher Polyalphabetic Ciphers Cryptography Vigen` ere Cipher

Cryptography Classical Ciphers Caesar Cipher Monoalphabetic Ciphers Classical Ciphers Playfair Cipher Polyalphabetic Ciphers Cryptography Vigen` ere Cipher Vernam Cipher School of Engineering and Technology One Time Pad CQUniversity

1.02k views • 64 slides

Tweakable Block Cipher Secure Beyond the Birthday Bound in the Ideal Cipher Model Jooyoung Lee ,

Tweakable Block Cipher Secure Beyond the Birthday Bound in the Ideal Cipher Model Jooyoung Lee , Byeonghak Lee KAIST Tweakable Block Cipher A tweakable block cipher accepts an additional input "tweak - Tweaks are publicly used

519 views • 30 slides

SEED INDUSTRY PERSPECTIVES ON THE NATIONAL NATIVE SEED STRATEGY ROBBY HENES SOUTHWEST SEED

SEED INDUSTRY PERSPECTIVES ON THE NATIONAL NATIVE SEED STRATEGY ROBBY HENES SOUTHWEST SEED DOLORES, CO LOCATED ON THE INCOMPARABLE COLORADO PLATEAU AND A STONES THROW FROM THE LOVELY UNCOMPAGHRE PLATEAU NATIVE SEED STRATEGIES OBJECTIVES

396 views • 21 slides

Extending the Hill Cipher Two secure modifications of the classic cipher John Chase Matt Davis

Introduction SVK Hill Cipher TF Hill Cipher Summary Extending the Hill Cipher Two secure modifications of the classic cipher John Chase Matt Davis Cryptography 625.480 December 2, 2010 / Final Paper Presentation Introduction SVK Hill

1.31k views • 90 slides

The Seed System Production and Quality Management Hemispheric Conference Low Level Presence in

The Seed System Production and Quality Management Hemispheric Conference Low Level Presence in Seed San Jose, Costa Rica June 12, 2013 Patty Townsend, Canadian Seed Trade Association Wendelyn Jones, DuPont Pioneer The Seed System The Seed

516 views • 23 slides

Comparison of Cipher implementations from cipher authors 256-bit stream ciphers D. J.

Comparison of Cipher implementations from cipher authors 256-bit stream ciphers D. J. Bernstein Timing tools Thanks to: (De Canni` ere) University of Illinois at Chicago Denmark Technical University

602 views • 13 slides

Vigenre Cipher - a polyalphabetic version of the shift cipher Key: (k 1 ,k 2 ,,k m ) Z

Vigenre Cipher - a polyalphabetic version of the shift cipher Key: (k 1 ,k 2 ,,k m ) Z 26m , where m is the key length Encryption in blocks: (x 1 , x 2 , , x m ) (x 1 +k 1 , x 2 +k 2 , , x m +k m ) Z 26m Example: encrypt

413 views • 10 slides

B.b) Block Ciphers 2 B.24 Definition An encryption algorithm Enc: {0,1} n K {0,1} n

1 B.b) Block Ciphers 2 B.24 Definition An encryption algorithm Enc: {0,1} n K {0,1} n is called a block cipher . The positive integer n denotes the block size ( block length ). 3 B.25 Remark and Convention The encryption

709 views • 67 slides

The 128-bit Blockcipher CLEFIA Taizo Shirai 1 , Kyoji Shibutani 1 , Toru Akishita 1 Shiho

The 128-bit Blockcipher CLEFIA Taizo Shirai 1 , Kyoji Shibutani 1 , Toru Akishita 1 Shiho Moriai 1 , Tetsu Iwata 2 1 Sony Corporation 2 Nagoya University Direction for designing a new blockcipher Priority for Choosing an algorithm 1.

464 views • 19 slides

1 X.800 Security Services X.800 Security Services X.800 Security Services Data integrity

Course Overview Course Requirements EECS 498-7/8 Cryptography and Network Security: www.citi.umich.edu/u/honey/security Principles and Practice (Third Edition) Computer Security Monday & Friday, 9:00 10:30 William Stallings

670 views • 19 slides

Counter-in-Tweak: Authenticated Encryption Modes for Tweakable Block Ciphers Thomas Peyrin 1

TBCs and AE NSIV Generic Composition EPWC MAC CTRT Encryption Conclusion Counter-in-Tweak: Authenticated Encryption Modes for Tweakable Block Ciphers Thomas Peyrin 1 Yannick Seurin 2 1 NTU, Singapore 2 ANSSI, France August 15, 2016

1.29k views • 102 slides

Cryptanalysis of the counter mode of operation Ferdinand Sibleyras joint work with Gatan

Introduction The counter mode Missing difference problem Cryptanalysis Conclusion Cryptanalysis of the counter mode of operation Ferdinand Sibleyras joint work with Gatan Leurent Inria, quipe SECRET April 10, 2018 1 / 29 Introduction

975 views • 74 slides

Skinny A Family of Lightweight Tweakable Block Ciphers for the IoT C. Beierle, J. Jean, S.

Skinny A Family of Lightweight Tweakable Block Ciphers for the IoT C. Beierle, J. Jean, S. Klbl, G. Leander, A. Moradi, T. Peyrin, Y. Sasaki, P. Sasdrich, S.M. Sim Horst Grtz Institute for IT-Security, Ruhr University Bochum, Germany

1.18k views • 41 slides

The Simeck Family of Lightweight Block Ciphers Gangqiang Yang , Bo Zhu, Valentin Suder, Mark D.

The Simeck Family of Lightweight Block Ciphers Gangqiang Yang , Bo Zhu, Valentin Suder, Mark D. Aagaard, and Guang Gong Electrical and Computer Engineering, University of Waterloo Sept 15, 2015 Yang, Zhu, Suder, Aagaard, Gong Simeck Family

537 views • 30 slides

Encrypting/Decrypting, cont CS 161: Computer Security Prof. Vern Paxson TAs: Jethro Beekman,

Encrypting/Decrypting, cont CS 161: Computer Security Prof. Vern Paxson TAs: Jethro Beekman, Mobin Javed, Antonio Lupher, Paul Pearce & Matthias Vallentin http://inst.eecs.berkeley.edu/~cs161/ March 14, 2013 Announcements / Goals For

459 views • 9 slides