In recent years, secret key generation method based on the physical layer of wireless channel has been widely studied. Since Channel State Information (CSI) is a fine-grained characterization of channel information, there are currently many studies using CSI for key generation. However, existing CSI extraction tools have the problem that the time interval between uplink and downlink interaction is uncertain, which may result in insufficient reciprocity of CSI. In this paper, we propose a channel measurement method based on the response mechanism of the IEEE 802.11 protocol, and develop a low-cost and universal CSI extraction tool using ESP32. We further design and implement a wireless key generation system based on the tool. To evaluate the performance of the proposed method, we have conducted extensive experiments in an indoor environment. Results show that our method can obtain highly reciprocal CSI in both static and mobile scenarios and can achieve a high key generation rate at around 1788.23 bits/s.
In recent years, secret key generation method based on the physical layer of wireless channel has been widely studied. Since Channel State Information (CSI) is a fine-grained characterization of channel information, there are currently many studies using CSI for key generation. However, existing CSI extraction tools have the problem that the time interval between uplink and downlink interaction is uncertain, which may result in insufficient reciprocity of CSI. In this paper, we propose a channel measurement method based on the response mechanism of the IEEE 802.11 protocol, and develop a low-cost and universal CSI extraction tool using ESP32. We further design and implement a wireless key generation system based on the tool. To evaluate the performance of the proposed method, we have conducted extensive experiments in an indoor environment. Results show that our method can obtain highly reciprocal CSI in both static and mobile scenarios and can achieve a high key generation rate at around 1788.23 bits/s.
Physical-layer key generation (PKG) leveraging the reciprocity of wireless channel provides an effective approach for key agreement among resource-constrained Internet of Things devices. However, current researches on PKG predominantly focus on pairwise communication scenarios, and there remain challenges in achieving group key generation for multiuser scenarios. In this article, we propose a novel recovery mechanism-driven wireless group key generation protocol to facilitate key sharing in the star network typology. Specifically, the root node will assign each member node its unique group key component before initiating group key distribution. Subsequently, all group key components are distributed to member nodes using a forward error correction mechanism, which helps reduce system overhead. Finally, all member nodes utilize a recovery mechanism and their respective group key component to obtain the same complete group key, thereby achieving group key distribution. Compared to existing schemes, our protocol can avoid the significant information leakage caused by repeated distribution of the same group key, thereby enhancing security. We further design and implement a practical wireless group key generation system using ESP32. Additionally, a group channel state information (CSI) extraction tool for multiuser channel measurements is developed. Experimental results demonstrate that our protocol can generate the group key with high randomness while benefiting from good channel reciprocity, making it suitable for cryptographic applications in multiuser communication scenarios.
Channel state information (CSI)-based channel key generation technology has been widely studied in recent years, but it lacks the application in multi-user access scenarios, and the commonly used CSI extraction tools are not easy to generalize to Internet of Things (IoT) scenarios. The emerging ESP CSI tool overcomes the limitations of traditional tools, but no one has used it for key generation related research. We transformed ESP CSI tool, proposed a numbered CSI extraction tool for key generation in multi-user access scenarios. Then, we conceived a corresponding key generation scheme based on this tool. Experimental results show that CSI data with high reciprocity can be obtained in different scenarios, and can generate keys with low key disagreement rate (KDR), high randomness, and anti-eavesdropping.
Securing wireless communication remains challenging in dynamic mobile environments due to the shared nature of wireless medium and lacking of fixed key management infrastructures. Generating secret keys using physical layer information thus has drawn much attention to complement traditional cryptographic-based methods. Although recent work has demonstrated that Received Signal Strength (RSS) based secret key extraction is practical, existing RSS-based key generation techniques are largely limited in the rate they generate secret bits and are mainly applicable to mobile wireless networks. In this paper, we show that exploiting the channel response from multiple Orthogonal Frequency-Division Multiplexing (OFDM) subcarriers can provide fine-grained channel information and achieve higher bit generation rate for both static and mobile cases in real-world scenarios. We further develop a Channel Gain Complement (CGC) assisted secret key extraction scheme to cope with channel non-reciprocity encountered in practice. Our extensive experiments using WiFi networks in both indoor as well as outdoor environments demonstrate that our approach can achieve significantly faster secret bit generation rate at 60 ~ 90bit/packet, and is resilient to malicious attacks identified to be harmful to RSS-based techniques including predictable channel attack and stalking attack.
Generating keys and keeping them secret is critical in secure communications. Due to the "open-air" nature, key distribution is more susceptible to attacks in wireless communications. An ingenious solution is to generate common secret keys by two communicating parties separately without the need of key exchange or distribution, and regenerate them on needs. Recently, it is promising to extract keys by measuring the random variation in wireless channels, e.g., RSS. In this paper, we propose an efficient Secret Key Extraction protocol without Chasing down Errors, SKECE. It establishes common cryptographic keys for two communicating parties in wireless networks via the realtime measurement of Channel State Information (CSI). It outperforms RSS-based approaches for key generation in terms of multiple subcarriers measurement, perfect symmetry in channel, rapid decorrelation with distance, and high sensitivity towards environments. In the SKECE design, we also propose effective mechanisms such as the adaptive key stream generation, leakage resilient consistence validation, and weighted key recombination, to fully exploit the excellent properties of CSI. We implement SKECE on off-the-shelf 802.11n devices and evaluate its performance via extensive experiments. The results demonstrate that SKECE achieves a more than 3x throughput gain in the key generation from one subcarrier in static scenarios, and due to its high efficiency, a 50% reduction on the communication overhead compared to the state-of-the-art RSS based approaches.
Physical layer key generation that exploits reciprocity and randomness of wireless fading channels has attracted considerable attention in recent years. Despite much research efforts in this field, the problem of wireless key generation at long distance and low data rate remains unknown and has not been studied. In this paper, we conduct extensive experiments and analysis in real indoor and outdoor environments to explore the feasibility of wireless key generation for long range (LoRa)-based network. Our experimental results show that: 1) the low transmission rate will lead to low channel reciprocity which makes wireless key generation significantly challenging and 2) when the requirement of high reciprocity is fulfilled, two nodes can generate the same secret key even when they are far away from each other (a few kilometers). Building on the strengths of existing secret key extraction approaches, we present LoRa-Key, the first complete key establishment protocol for LoRa network by exploring the shared randomness extracted from measured received signal strength indicator. LoRa-Key employs a number of signal processing techniques to improve key generation rate significantly. Moreover, we propose a novel compressive sensing-based reconciliation framework to reduce mismatch rate. Experimental results show that LoRa-Key can achieve key establishment rates of 18 bit/s in stationary scenario and 31 bit/s in mobile scenario. To the best of our knowledge, this is the first work that studies key generation protocol for LoRa network.
Due to the reciprocity of wireless channels, the communication parties can directly extract the shared key from channel. This solution were verified through several schemes. However, in real situations, channel sampling of legitimate transceivers might be impacted by noises and other interferences, which makes the channel states obtained by initiator and responder might be obvious different. The efficiency and even availability of physical layer key generation are thus reduced. In this paper, we propose a lightweight and efficient physical layer key generation scheme, which extract shared secret keys from channel state information (CSI). To improve the key generation process, the discrete cosine transform (DCT) is employed to reduce differences of channel states of legitimate transceivers. Then, these outputs are quantified and encoded through multi-bit adaptive quantization(MAQ) quantizer and gray code to generate binary bit sequence, which can greatly reduce the bit error rate. Moreover, the low density parity check (LDPC) code and universal hashing functions are used to achieve information reconciliation and privacy amplifification. By adding preprocessing methods in the key generation process and using the rich information of CSI, the security of communications can be increased on the basis of improving the key generation rate. To evaluate this scheme, a number of experiments in various real environments are conducted. The experimental results show that the proposed scheme can effificiently generate shared secret keys for nodes and protect their communication.