Journal of the Optical Society of America A

Special ciphertext-only attack to double random phase encryption by plaintext shifting with speckle correlation

Shuming Jiao, Guowei Li, Changyuan Zhou, Wenbin Zou, Xia Li

Published Oct 2, 2017• 38 citations

Abstract

In this paper, a special ciphertext-only attack (COA) scenario to the traditional double random phase encoding (DRPE) technique is proposed based on plaintext shifting. We assume the attacker can illegally manipulate the DRPE system to gain multiple ciphertexts from randomly shifted versions of the same plaintext. The plaintext image can be recovered when our proposed scenario is combined with a speckle correlation attacking method proposed in previous work. Simulation results demonstrate that our proposed scheme can successfully crack the DRPE system even when the speckle correlation method alone fails to work in the conventional single ciphertext scenario due to the small size of the plaintext image. The work in this paper reveals a severe security flaw of DRPE systems when minor position shifting of the plaintext occurs.

DOI: 10.1364/josaa.35.0000a1

Related papers

Speckle-correlation-based ciphertext-only attack on the double random phase encoding scheme

Meihua Liao, Dajiang Lu, Wenqi He +1 more

The speckle correlation technique is applied to ciphertext-only attack (COA) on optical cryptosystem based on double random phase encoding. According to the inherent merits of speckle correlation, we have revealed a fact that the ciphertext’s autocorrelation is essentially identical to the plaintext’s own autocorrelation. Then, a plaintext image can be directly reconstructed from the autocorrelation of its corresponding ciphertext by employing a iterate phase-retrieval algorithm. This could then lead to a potential security flaw because an unauthorized user could directly retrieve the plaintext from an intercepted ciphertext by performing proposed COA approach. Meanwhile, a series of numerical simulations will also be provided to verify the validity and feasibility of our proposed COA method.

Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIEFeb 10, 20171 citation

Vulnerability to ciphertext-only attack of optical encryption scheme based on double random phase encoding

Xiaoli Liu, Jiachen Wu, Wenqi He +3 more

We demonstrate in this paper that the traditional double random phase encoding (DRPE) technique is vulnerable to ciphertext-only attack (COA). In this method, an unauthorized user (or say attacker) is assumed to be able to retrieve the corresponding plaintext from the only ciphertext under some certain condition. The proposed scheme mainly relies on a hybrid iterative phase retrieval (HIPR) algorithm, which combines various phase retrieval algorithms. With an estimation of the number of nonzero pixels (NNP) in the original plaintext, an attacker could recover the plaintext in a large extent. The simulation results show that this method is feasible and validate.

Optics ExpressJul 14, 2015107 citations

Cyphertext-only attack on the double random-phase encryption: Experimental demonstration

Guowei Li, Wanqin Yang, Dayan Li +1 more

We demonstrate experimentally that the traditional double random phase encoding (DPRE) technique is vulnerable to the cyphertext-only attack (COA). With the statistical ergodic property of the speckle, we show that the plaintext image can be recovered from the cyphertext alone owing to the fact that their energy spectral density functions are identical. Our result reveals the most serious security issue with the DRPE as it suggests that even the one-time-pad does not guarantee its security. This will open up new inside understanding of current optical security techniques.

Optics ExpressApr 4, 201786 citations

Ciphertext-only attacks on the double random phase encryption based on redundancy vulnerability

Xingzhi Wu, Liwei Zhang, Haobo Chen +2 more

Abstract Background: The double random phase encoding techniques have received considerable attention from researchers in recent years because of its advantages of parallel and high speed processing capability. Meanwhile, the security of cryptosystem is also one of the major concerns. Methods : We experimentally demonstrated the ciphertext redundancy vulnerability of the coherent double random encryption system (DRPE). Based on the statistical ergodicity of speckles and the consistency of the power spectral density (ESD), we have proved that the most plaintext information can be retrieved from partial ciphertext alone. Results: In this paper, the simulation and experiment result were performed to verify whether the algorithm is effectiveness. The ciphertext redundancy of the DRPE system is analyzed from the results of ciphertext occlusion test. There is a risk of plaintext leakage of this scheme, as long as the average ESD can be estimated from the sub-images. The results will help to open up deeper understanding of limitation of current optical security techniques. Conclusions: The DRPE system has potential redundancy risk. Even one-time-pad manner is not secured in DRPE system. This vulnerability allows a cryptanalyst to estimate the plaintext information with only a half or less ciphertext.

Optical ReviewSep 22, 20212 citations

Security analysis of phase-only DRPE based on known-plaintext attack using multiple known plaintext–ciphertext pairs

Kazuya Nakano, Masafumi Takeda, Hiroyuki Suzuki +1 more

Classical double-random phase encoding (C-DRPE) is an optical symmetric-key encryption technique. C-DRPE is reported to be vulnerable to a known-plaintext attack (KPA) that uses a phase retrieval algorithm. However, although phase-only DRPE (PO-DRPE) is reported to be more resistant to KPAs than C-DRPE, it is not obvious yet that PO-DRPE is sufficiently resistant to a KPA under any condition, because the vulnerability to KPA varies depending on various factors, such as the number of the known plaintext-ciphertext pairs that are given for the KPA, or the gray level of the known-plaintext image (i.e., binary or multivalued image). In this paper, we investigate the resistance of C-DRPE and PO-DRPE to KPA under various conditions related to the number of known plaintext-ciphertext pairs and to the gray level of the known-plaintext image.

Applied OpticsSep 23, 201429 citations

Known-plaintext attack-based analysis of double random phase encoding using multiple known plaintext–ciphertext pairs

Kazuya Nakano, Hiroyuki Suzuki

Double random phase encoding (DRPE) is vulnerable to known-plaintext attacks (KPAs) based on phase retrieval algorithms. We previously analyzed DRPE resistance to KPA cryptanalysis with multiple known plaintext-ciphertext image pairs and obtained secret keys at a higher probability rate than when performing KPA cryptanalysis using one known image pair. However, the robustness of KPA in the presence of noise or occlusion in DRPE is unclear. We analyzed KPA properties in relation to DRPE when white Gaussian noise was gradually added to the Fourier amplitude or phase of a known ciphertext complex amplitude image. Additionally, we analyzed KPA properties when the Fourier phase of the known ciphertext image was gradually occluded by zero-valued pixels. The results showed that KPAs performed using multiple known plaintext-ciphertext image pairs were largely affected by noise added to the Fourier phase and thus are not always a strong tool for DRPE cryptanalysis.

Applied OpticsSep 28, 202211 citations