Due to the unavoidable shared nature of the wireless radio spectrum, providing security for wireless communications presents unique challenges. Cryptographic keys have been used as a primary technique for securing wireless networks but are not completely secure. The symmetric keys used for cryptographic purposes are vulnerable to man-in-the-middle and brute force attacks. More recently, PHY-layer based techniques have gained significant attention, where the principle of channel reciprocity and the natural randomness of the measured wireless channel to generate secret keys is leveraged. Although, PHY-layer secret key generation has been investigated and presented in the literature before, there has been a lack of discussion in terms of obtaining symmetric keys on both ends of the link. In this work, we present a novel PHY-layer secret key generation technique that aims for symmetric encryption keys while limiting the information leaked to an eavesdropper to ensure complete secrecy and to prevent potential intelligent attacks. Our algorithm utilizes forward and backward channel state information in a given wireless link and combats the minute differences observed in these pairs by generating channel trend information. We demonstrate our technique using experimental results from a realtime SDR testbed connected to a wireless channel emulator. Our results indicate that the algorithm is successful in generating symmetric keys under various wireless environments without revealing any information pertaining to the key via the open wireless channel. Our secret key extraction rate can reach values in excess of 17.3 Kbps.
Due to the unavoidable shared nature of the wireless radio spectrum, providing security for wireless communications presents unique challenges. Cryptographic keys have been used as a primary technique for securing wireless networks but are not completely secure. The symmetric keys used for cryptographic purposes are vulnerable to man-in-the-middle and brute force attacks. More recently, PHY-layer based techniques have gained significant attention, where the principle of channel reciprocity and the natural randomness of the measured wireless channel to generate secret keys is leveraged. Although, PHY-layer secret key generation has been investigated and presented in the literature before, there has been a lack of discussion in terms of obtaining symmetric keys on both ends of the link. In this work, we present a novel PHY-layer secret key generation technique that aims for symmetric encryption keys while limiting the information leaked to an eavesdropper to ensure complete secrecy and to prevent potential intelligent attacks. Our algorithm utilizes forward and backward channel state information in a given wireless link and combats the minute differences observed in these pairs by generating channel trend information. We demonstrate our technique using experimental results from a realtime SDR testbed connected to a wireless channel emulator. Our results indicate that the algorithm is successful in generating symmetric keys under various wireless environments without revealing any information pertaining to the key via the open wireless channel. Our secret key extraction rate can reach values in excess of 17.3 Kbps.
Due to the broadcast nature of wireless channels, wireless communication is vulnerable to eavesdropping, message modification, and node impersonation. Securing the wireless communication requires the shared secret keys between the communicating entities. Traditional security schemes rely on public key infrastructures and cryptographic algorithms to manage secret keys. Recently, many physical-layer-based methods have been proposed as alternative solutions for key generation in wireless networks. These methods exploit the inherent randomness of the wireless fading channel to generate secret keys while providing information-theoretical security without intensive cryptographic computations. This article provides an overview of the existing PHY-based key generation schemes exploiting the randomness of the wireless channels. Specifically, we first introduce the fundamental and general framework of the PHY-based key generation schemes and then categorize them into two classes: received-signal-strength-based and channel- phase-based protocols. Finally, we present a performance comparison of them in terms of key disagreement probability, key generation rate, key bit randomness, scalability, and implementation issues.
Providing secure communication links between devices of low computational power has been increasingly investigated during recent years. The need for fast and easy-to-implement security for computationally weak wireless devices has lead to the development of physical layer based key generation approaches. The generation of symmetric cryptographic keys out of wireless channel properties turned out to be a promising approach comprising advantages of symmetric as well as asymmetric cryptography. Numerous quantization schemes have been proposed in previous works to increase the Key Generation Rate (KGR). Also by increasing the sampling rate, the input data can be generated faster. However, due to fast sampling rates, redundancy of subsequent bits will increase. This lowers the quality, that is, the randomness of the generated secret key and makes the system more vulnerable to brute-force attacks. We present and analyze different techniques for transforming a temporally correlated sequence into a compressed sequence of decorrelated bits and, therefore, assure non-redundant key sequences.
The use of wireless networks for communication has grown significantly in recent times, and continues to develop further. The broadcast nature of wireless communications makes them susceptible to a wide variety of security attacks. Unlike traditional solutions, which usually handle security at the application layer, the primary concern of this dissertation is to analyse and develop solutions for secure communication using channel coding techniques at the physical-layer. \nThe topic of physical layer authenticated encryption using high rate key generation through shared randomness is investigated in this work. First, a physical layer secret key generation scheme is discussed exploiting channel reciprocity in wireless systems. In order to address the susceptibility of this family of schemes to active attacks, a novel physical layer authentication encryption protocol is presented along with its extension to multi-node networks in the presence of active adversaries. Unlike previous work in the area of generating secret keys through shared randomness, it is demonstrated that the proposed scheme is semantically secure with respect to chosen plaintext and chosen cipher text attacks. \nSecondly, in order to increase the rate in bits per seconds at which agreed cryptographic keys are been generated, a multi-level quantization algorithm with public feedback is discussed. It is demonstrated that the proposed scheme is superior to direct information distillation approaches and can substantially increase the key generation rates even at low and medium SNRs. Furthermore, the employment of this low-overhead feedback at the information distillation process can largely simplify the information reconciliation process. \nThe proposed secret key generation schemes are tested for randomness such as required for cryptographic keys. The validation test is perfomed with the aid of National Institute of Standards and Technology (NIST) statistical test suite. The P-values obtained in each of the test carried out indicates that the key sequence generated by our algorithm is random.
The diverse application scenarios envisioned for sixth generation (6G) are characterized by the deep integration of sensing and ubiquitous connectivity, which imposes unprecedentedly stringent security requirements. However, due to the open nature of wireless channels, mobile communications systems always face severe information security threats such as falsification, spoofing, interception, and repudiation. Cryptography-based symmetric and asymmetric encryption techniques remain mainstream solutions for information protection. Symmetric encryption is efficient and secure for legitimate users but suffers from key-distribution difficulties over open wireless channels, whereas asymmetric encryption resolves this problem but faces increasing risks from quantum computing due to its reliance on structured mathematical hardness assumptions. In response to these limitations, physical layer security (PLS) has gained a great deal of research attention as a powerful security component that leverages the features of varying wireless channels. Existing PLS schemes can be broadly classified into two categories. The first one takes advantage of the legitimate link’s opportunistic channel-quality superiority over or different spatial-domain directions from the attacking link, which still faces many practical implementation difficulties. The second category is termed physical-layer key generation (PLKG). It extracts the unique features of the legitimate link’s channel variation, which is often reciprocal, as the source of secret key generation and therefore can naturally implement secure key distribution tasks. This advantage no doubt injects new vigor to symmetric encryption as a stronger protection approach. Following this trend, we in this paper concentrate on the PLKG techniques. Specifically, we present a comprehensive overview on existing PLKG schemes, discussing diverse secret key generation and reconciliation methods. We further investigate the model-driven and deep-learning-based approaches tailored for the scenario with imperfect channel reciprocity between the sender and receiver. After comprehensively reviewing major existing schemes, we further discuss a recently proposed PLKG design based on codeword reconstruction, which makes use of the strong error-correcting capability of the forward-error-correction (FEC) codes to effectively implement secure and consistent secret key generation between the legitimate sender and receiver. Finally, we share our opinions on the unsolved challenges and potential research directions dedicated to PLKG toward meeting the security requirements of 6G.
Abstract: Physical layer key generation, leveraging the reciprocity and randomness of wireless fading channels, has garnered significant research interest in recent years. While theoretical studies have demonstrated its potential to generate informationtheoretically secure keys, challenges remain in translating theory into practice. This paper provides an overview of the physical layer key generation process and discusses its practical challenges. Various passive and active attacks are analyzed and evaluated through numerical studies. A new key generation scheme using random probing signals and combining usergenerated randomness with channel randomness is introduced to counteract active attacks. Numerical results demonstrate that the proposed scheme achieves higher security strength than existing schemes using constant probing signals under active attacks. Secret-key generation relying on wireless channel reciprocity is an intriguing solution as it can be efficiently implemented at the physical layer of emerging wireless communication networks, while providing information-theoretic security guarantees. In this paper, we investigate and compare the secret-key capacity based on the sampling of the entire complex channel state information (CSI) or only its envelope, the received signal strength (RSS).
Due to the sensitivity of the information exchanged in Vehicle to Vehicle (V2V) and Vehicle to Infrastructure (V2I) communication, generating secret keys is critical to secure these communications. As nature is open access, distributed keys are more vulnerable to attacks in the vehicular environment. Physical layer key generation methods using wireless channel characteristics show promise in preventing such attacks, generating keys independently, and removing the need for distribution. In this paper, we present a novel key generation approach in a real vehicular environment based on Channel State Information (CSI), including a new algorithm for key bit extraction. We implemented our algorithm using USRP B210 Software-Defined Radios (SDR) and the industry-standard V2X communication protocol: IEEE 802.11p. The proposed key generation protocol uses the CSI values of each sub-carrier as a source of randomness, from which bits are extracted using a new QAM demodulator quantizer (QAM-Dem-Quan). We compared our technique to state-of-the-art Received Signal Strength (RSS)-based approaches, and show that our method achieves better performance. Moreover, we reached a min-entropy of approximately 70% for the generated keys and a key generation rate of less than150μs/key for key lengths ranging from 16 to 128 bits.