Securing wireless communication against eavesdropping is critical, particularly in dynamic and decentralized environments. We present gr-PHYSEC, a new GNU Radio out-of-tree (OOT) module for real-time physical-layer key generation. Unlike traditional key generation that relies on pre-shared secrets or computational complexity, our approach derives symmetric keys from the wireless channel's inherent randomness. We embed a trained neural network within GNU Radio to extract channel features between trusted parties (Alice and Bob) during probe exchanges. These features are quantized into binary keys, reconciled via Reed-Solomon encoding, and further secured with SHA-512 hashing. The generated keys are then directly used to encrypt data. Real-world experiments at the FAU CAAI connected robotics testbed using ADALM Pluto software-defined radios and NVIDIA Jetson Orin validate the approach with ground robotic platforms. Results demonstrate low key disagreement rates and strong randomness, as verified by the NIST test suite for random and pseudorandom number generators for cryptographic applications. This integration showcases how GNU Radio can support real-time AI-driven security solutions, pushing the boundaries of software-defined secure communication. The source code for this project is available at: https://github.com/C2A2-at-Florida-Atlantic-University/gr-PHYSEC
Securing wireless communication against eavesdropping is critical, particularly in dynamic and decentralized environments. We present gr-PHYSEC, a new GNU Radio out-of-tree (OOT) module for real-time physical-layer key generation. Unlike traditional key generation that relies on pre-shared secrets or computational complexity, our approach derives symmetric keys from the wireless channel's inherent randomness. We embed a trained neural network within GNU Radio to extract channel features between trusted parties (Alice and Bob) during probe exchanges. These features are quantized into binary keys, reconciled via Reed-Solomon encoding, and further secured with SHA-512 hashing. The generated keys are then directly used to encrypt data. Real-world experiments at the FAU CAAI connected robotics testbed using ADALM Pluto software-defined radios and NVIDIA Jetson Orin validate the approach with ground robotic platforms. Results demonstrate low key disagreement rates and strong randomness, as verified by the NIST test suite for random and pseudorandom number generators for cryptographic applications. This integration showcases how GNU Radio can support real-time AI-driven security solutions, pushing the boundaries of software-defined secure communication. The source code for this project is available at: https://github.com/C2A2-at-Florida-Atlantic-University/gr-PHYSEC
Physical layer security (PLS) can be used to pro-vide keyless and innately secure communications by exploiting the propagation characteristics of the wireless channel at the physical layer (PHY) layer to co-generate cipher keys for symmetric encryption. While existing methods use channel state information as input for secret key generation, we consider a novel approach that derives features from frequency-time domain representation of in-phase and quadrature (IQ) samples to derive initial keys with high agreement rate. A recurrent neural network (RNN) with a quadruplet loss function is trained based on spectrograms collected from bi-directional time-division duplex channel probing between the two parties and on spectrograms collected from a passive eavesdropper. Information reconciliation is achieved using Reed Solomon codes. At the last step of the protocol, a 512-bit cryptographic key is generated by feeding the reconciled bit sequence to the Secure Hash Algorithm 3. Our experiments with software-defined radios in both indoor and outdoor environments evaluate the proposed key generation system under different channel propagation environments and hardware inaccuracies. We demonstrate that the proposed RNN-assisted channel feature extractor trained on indoor channel probe data operates successfully in two outdoor setups and produces up to 70 amplified keys out of 100 probes exchanged between two trusted parties i.e., Alice and Bob, while the passive eavesdropper fails to directly predict any of the generated keys.
Physical layer key generation technology which leverages channel randomness to generate secret keys has attracted extensive attentions in long range (LoRa)-based networks recently. We in this paper develop a software-defined radio (SDR) based LoRa communications platform using GNU Radio on universal software radio peripheral (USRP) to implement and evaluate typical physical layer key generation schemes. Thanks to the flexibility and configurability of GNU Radio to extract LoRa packets, we are able to obtain the fine-grained channel frequency response (CFR) through LoRa preamble based channel estimation for key generation. Besides, we propose a low-complexity preprocessing method to enhance the randomness of quantization while reducing the secret key disagreement ratio. The results indicate that we can achieve 367 key bits with a high level of randomness through just a single effective channel probing in an indoor environment at a distance of 2 meters under the circumstance of a spreading factor (SF) of 7, a preamble length of 8, a signal bandwidth of 250 kHz, and a sampling rate of 1 MHz.
As wireless networks evolve toward 5G and 6G, securing communications in dense, dynamic, and potentially adversarial environments becomes increasingly critical. Traditional cryptographic security, relying on symmetric or asymmetric key exchanges at higher layers or pre-provisioning, imposes significant operational complexity—especially in decentralized private networks and tactical deployments where infrastructure is limited and exposure to interception or cryptanalysis is high.This work introduces an environment-aware cryptographic key derivation method that utilizes 5G NR waveforms and Integrated Sensing and Communication (ISAC) principles, accompanied by updates to the security frameworks in 5G and next-generation 6G networks. It exploits radio channel reciprocity to extract highly correlated features observable only by legitimate transceivers, while inherently excluding spatially separated eavesdroppers.Our system derives shared secret keys directly from Channel State Information (CSI), achieving high-entropy keys with a 100% agreement rate and a high key generation rate between legitimate nodes. We demonstrate its robustness using software-defined radios operating in the 5G FR1 band, across diverse environments, while constraining the amount of publicly accessible information available to potential eavesdroppers.By embedding geographical awareness, this approach provides a physically secure key generation method, making it well-suited for 5G/6G systems, private networks, and ultra-massive Machine-Type Communication (umMTC) scenarios. The results highlight the potential of physical layer security for future wireless encryption frameworks with design considerations to maximize security and limit eavesdropping feasibility.
Physical layer encryption is a promising solution to provide transmission security for Internet-of-Things (IoT). To realize physical layer encryption, channel state information (CSI) as a random source to generate secret keys should be exploited. The reciprocity of wireless channel between legitimate communication nodes which is typically assumed for time division duplex (TDD) systems, is of critical importance to ensure the consistency in generated keys at two nodes. However, in practical TDD systems, due to the asynchronous measurement of CSI, the receiver noise and the the difference in hardware, etc., the reciprocity of channel measurements between legitimate parties is hard to be guaranteed, which makes physical layer key generation approach infeasible. To address this issue, we propose a wireless key generation scheme based on deep learning techniques. Firstly, a feature extraction network, which consists of two auto-encoders trained jointly, is developed to extract the common feature from the different yet correlated channel observations at two legitimate nodes, which will be used as the source to generate keys. Then a quantizer with an adaptive guard band width is devised to output a binary secret-key sequence from the feature vector. Numerical results show that the proposed scheme achieves remarkable improvement in terms of key disagreement rate (KDR) and key generation rate (KGR) compared existing counterparts in the literature.
Two legitimate parties, referred to as Alice and Bob, wish to generate secret keys from the wireless channel in the presence of an eavesdropper, referred to as Eve, in order to use such keys for encryption and decryption. In general, the secret key rate highly depends on the coherence time of the channel. In particular, a straightforward method of generating secret keys in static environments results in ultra-low rates. In order to resolve this problem, we introduce a low-complexity method called induced randomness. In this method, Alice and Bob independently generate local randomness to be used together with the uniqueness of the wireless channel coefficients in order to enable high-rate secret key generation. In this work, two scenarios are considered: first, when Alice and Bob share a direct communication channel, and second, when Alice and Bob do not have a direct link and communicate through an untrusted relay. After exchanging the induced randomness, post-processing is done by Alice and Bob to generate highly-correlated samples that are used for the key generation. Such samples are then converted into bits, disparities between the sequences generated by Alice and Bob are mitigated, and the resulting sequences are then hashed to compensate for the information leakage to the eavesdropper and to allow consistency checking of the generated key bit sequences. We utilize semantic security measures and information-theoretic inequalities to upper bound the probability of successful eavesdropping attack in terms of the mutual information measures that can be numerically computed. Given certain reasonable system parameters this bound is numerically evaluated to be 2-31and 2-10.57in the first and the second scenario, respectively.
Wireless information security generates shared secret keys from reciprocal channel dynamics. Current solutions are mostly based on temporal per-frame channel measurements of signal strength and suffer from low key generate rate (KGR), large budget in channel probing, and poor secrecy if a channel does not temporally vary significantly. This paper designs a cross-layer solution that measures noise-free per-symbol channel dynamics across both time and frequency domain and derives keys from the highly fine-grained per-symbol reciprocal channel measurements. This solution consists of merits that: (1) the persymbol granularity improves the volume of available uncorrelated channel measurements by orders of magnitude over per-frame granularity in conventional solutions and so does KGR; 2) the solution exploits subtle channel fluctuations in frequency domain that does not force users to move to incur enough temporal variations as conventional solutions require; and (3) it measures noise-free channel response that suppresses key bit disagreement between trusted users. As a result, in every aspect, the proposed solution improves the security performance by orders of magnitude over conventional solutions. The performance has been evaluated on both a GNU SDR testbed in practice and a local GNU Radio simulator. The cross-layer solution can generate a KGR of 24.07 bits per probing frame on testbed or 19 bits in simulation, although conventional optimal solutions only has a KGR of at most one or two bit per probing frame. It also has a low key bit disagreement ratio while maintaining a high entropy rate. The derived keys show strong independence with correlation coefficients mostly less than 0.05. Furthermore, it is empirically shown that any slight physical change, e.g. a small rotation of antenna, results in fundamentally different cross-layer frequency measurements, which implies the strong secrecy and high efficiency of the proposed solution.