Applied Optics

Hybrid attack on an optical cryptosystem based on phase-truncated Fourier transforms and a random amplitude mask

Y. Xiong, A. He, Chenggen Quan

Published Jul 12, 2018• 32 citations

Abstract

In this paper, the security of a cryptosystem based on phase-truncated Fourier transforms (PTFTs) and a random amplitude mask (RAM) is evaluated. In the cryptosystem, fake keys used as encryption keys in the second PTFT-based structure are generated by the first PTFT-based structure in which the RAM is encoded by random phase masks (RPMs) used as public keys. Compared to the classical PTFT-based encryption scheme, the security level of the cryptosystem is improved by using cascaded PTFTs to encode the encryption keys and the plaintext simultaneously. However, it is found that a known plaintext-ciphertext pair can provide enough constraints in the iterative process to retrieve the fake keys, which then can be used to retrieve unknown arbitrary plaintext from the corresponding ciphertext. Based on the analysis, we propose a specific attack based on hybrid iterative processes to break the cryptosystem. Two iterative processes with different constraints are involved in the proposed attack. The first known-plaintext-attack (KPA)-based iterative process is used to retrieve two fake keys with the help of two public keys and a known plaintext-ciphertext pair, while the second amplitude-phase retrieval algorithm-based iterative process with a median filter is employed to retrieve the plaintext from the corresponding ciphertext using two retrieval fake keys. To the best of our knowledge, it is the first time that the cryptosystem is attacked by the KPA-based iterative algorithm successfully. Numerical simulation results validate the feasibility and effectiveness of the proposed attack.

DOI: 10.1364/ao.57.006010

Related papers

Security analysis and enhancement of a cryptosystem based on phase truncation and a designed amplitude modulator

Y. Xiong, A. He, Chenggen Quan

In this paper, the security of a cryptosystem based on phase truncation and a designed amplitude modulator (AM) is evaluated. In the cryptosystem, an undercover AM used as an additional key is added to modulate the amplitude information of the spectrum in the Fourier plane. Compared to the conventional phase-truncated Fourier transform (PTFT)-based cryptosystem, the security of the cryptosystem is improved by increasing the number of unknown keys. However, it is found that the designed AM is irrelative to the plaintext, and one of the parameters in the designed AM contributes less to the security enhancement of the cryptosystem due to low key sensitivity. Based on the analysis, a special attack containing two iterative processes is proposed to crack the cryptosystem, in which the known-plaintext-attack-based iterative process I with a specific normalization operator is used to retrieve the designed AM and the amplitude-phase-retrieval-technique-based iterative process II is used to retrieve the corresponding plaintext from the arbitrarily given ciphertext with the help of the retrieved AM. In addition, an inherent drawback widely existing in PTFT-based cryptosystems is reported for the first time: most information of the original image could be retrieved using two correct phase keys (or only the first phase key) generated in the encryption process, even without the corresponding ciphertext in PTFT-based cryptosystems. To address this issue, a security-enhanced cryptosystem is proposed in this paper. Numerical simulation is carried out to demonstrate the effectiveness and feasibility of the proposed attack and cryptosystem.

Applied OpticsJan 16, 201912 citations

Hybrid plaintext attack for a cryptosystem based on interference and the phase-retrieval technique

Y. Xiong, Jie Gu, Ravi Kumar

In this paper, the security strength of an enhanced cryptosystem based on interference and the phase-retrieval technique is evaluated. The security strength of the optical cryptosystem was improved through the phase-retrieval technique used to generate a phase-only mask (POM) as the ciphertext. Due to the complex mathematical model of the phase-retrieval technique, it seems that a silhouette problem existing in the conventional interference-based scheme was removed. However, we noted that the random phase mask (RPM) regarded as the only private key was fixed in the encryption path, which is not related to the plaintext and makes it possible to be recovered using a known-plaintext attack (KPA). Moreover, we also found that the RPM has high key sensitivity, and it should be recovered precisely to retrieve information of plaintexts during the attack. Thus, a hybrid KPA where three pairs of known plaintexts and their ciphertexts are regarded as the amplitude and phase constraints to obtain the precise estimation of the RPM is proposed. Then, with the help of the estimated private key, information of the original plaintexts encoded using the cryptosystem under study could be retrieved from an arbitrarily given ciphertext without any knowledge of the private key. Our cryptoanalysis shows that the cryptosystem based on interference and the phase-retrieval technique is vulnerable to the proposed attack, and there is a security leak in it. Numerical simulations have been carried out to demonstrate the performance of our proposed attack.

Applied OpticsMay 9, 20234 citations

Amplitude-phase retrieval attack free cryptosystem based on direct attack to phase-truncated Fourier-transform-based encryption using a random amplitude mask

Xiaogang Wang, Daomu Zhao

We propose a simple amplitude-phase retrieval attack free cryptosystem based on direct attack to phase-truncated Fourier-transform-based encryption using a random amplitude mask (RAM). The RAM that is not saved during the encryption provides extremely high security for the two private keys, and no iterative calculations are involved in the nonlinear encryption process. Lack of enough constraints makes the specific attack based on iterative amplitude-phase retrieval algorithms unusable. Numerical simulation results are given for testing the validity and security of the proposed approach.

Optics LettersSep 12, 201382 citations

Security Analysis on an Optical Encryption and Authentication Scheme Based on Phase-Truncation and Phase-Retrieval Algorithm

Yi Xiong, Ravi Kumar, Chenggen Quan

In this paper, the security of the cryptosystem based on phase-truncation Fourier transform (PTFT) and Gerchberg-Saxton (G-S) algorithm is analyzed. In this cryptosystem, the phase key generated using phase-truncated (PT) operation is bonded with the phase key generated in G-S algorithm to form the first private key, which improves the complexity of the first private key. In addition, since the second private key is generated using the G-S algorithm, the number of known constraints decreases compared to the traditional PTFT-based cryptosystem, which will lead the non-convergence of special attacks. However, it has been found that two private keys generated in the cryptosystem based on PTFT and G-S algorithm are related to one phase key generated in the G-S algorithm, which provides an additional constraint to retrieve the other private key when one private key is disclosed. Based on this analysis, two iterative processes with different constraints are proposed to crack the cryptosystem based on PTFT and G-S algorithm. This is the first time to report the silhouette problem existing in the cryptosystem based on PTFT and G-S algorithm. Numerical simulations are carried out to validate the feasibility and effectiveness of our analysis and proposed iterative processes.

IEEE photonics journalAug 22, 201920 citations

Discussion on comparative analysis and a new attack on optical asymmetric cryptosystem

Areeba Fatima, Naveen Kumar Nishchal

This paper presents two different aspects of cryptanalysis of the optical phase-truncated Fourier transform (PTFT)-based cryptosystem. In the first part, a comparative study is carried out for a specific attack on the PTFT-based scheme in different optical transformation domains. In the second part, a new attack algorithm is proposed. The existing attack algorithms devised for the PTFT-based cryptosystem require knowledge of both the encryption keys for successful retrieval of phase through phase-retrieval algorithms to extract information about the plaintext. The proposed new attack method eliminates the requirement of one of the encryption keys to carry out the attack on the PTFT-based scheme. The numerical results support the proposed method.

Journal of the Optical Society of America ASep 15, 201620 citations

Hybrid attack for the optical cryptosystem based on interference and additional fixed phase masks

Yi Xiong, Jiashuai Liu, Hongjie Xu +1 more

This paper presents a security analysis of the optical image encryption scheme based on interference and fixed phase masks. Unlike the traditional interference-based scheme, which uses only one phase-only mask (POMs) generated during the encryption process as the private key, the improved system incorporates fixed phase masks as the additional private keys. While it appears that the security strength of the interference-based scheme is enhanced by expanding the key space, our analysis reveals that these fixed phase masks are independent of the plaintext and can be recovered through a known-plaintext attack (KPA). Once these additional private keys are obtained, the number of unknown private keys is reduced to one, allowing the plaintext information encrypted by the improved interference-based scheme to be recovered from any arbitrarily given ciphertexts without any knowledge of the private key. To show the vulnerability of this cryptosystem, we propose a hybrid attack combining the KPA and ciphertext-only attack (COA) which can break the improved interference-based cryptosystem. Numerical simulations have been performed to confirm the feasibility and effectiveness of the proposed hybrid attack.

Applied OpticsDec 9, 20251 citation