Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Log inSign up
Challenges
Datasets
Workspaces
Papers
Discussions
Leaderboard
Blog
Job Board
Q3AS

© 2026 Aqora Quantum S.A.S.

TermsPrivacyLegal Notice

International Conference on Pattern Recognition and Artificial Intelligence (PRAI)

Study of Imperfect Key to Characterise the Security of Optical Encryption

Lingfei Zhang, Haiqing Zhang, Wenxuan Hou

Published Aug 15, 2025• 0 citations
Publisher

Abstract

In conventional symmetric encryption, it is common for the encryption/decryption key to be reused for multiple plaintexts. This gives rise to the concept of a known-plaintext attack. In optical image encryption systems, such as double random phase encoding (DRPE), this is also the case. With optical encryption, if one knows a plaintext-ciphertext pair, one can carry out a known-plaintext attack more efficiently than a bruteforce attack, using heuristics based on phase retrieval or simulated annealing. However, it is more likely that an attacker will find an imperfect encryption/decryption key using such heuristics. Such an imperfect key will work for the known plaintext-ciphertext pair, but not an arbitrary unseen plaintext-ciphertext pair using the original key. In this paper, we illustrate the problem and attempt to characterise the increase in security it affords optical encryption.

DOI
10.1109/prai67447.2025.11412931

Related papers

Study of imperfect keys to characterise the security of optical encryption

Lingfei Zhang, Thomas J. Naughton

In conventional symmetric encryption, it is common for the encryption/decryption key to be reused for multiple plaintexts. This gives rise to the concept of a known-plaintext attack. In optical image encryption systems, such as double random phase encoding (DRPE), this is also the case; if one knows a plaintext-ciphertext pair, one can carry out a known-plaintext attack more efficiently than a brute-force attack, using heuristics based on phase retrieval or simulated annealing. However, we demonstrate that it is likely that an attacker will find an imperfect decryption key using such heuristics. Such an imperfect key will work for the known plaintext-ciphertext pair, but not an arbitrary unseen plaintext-ciphertext pair encrypted using the original key. In this paper, we illustrate the problem and attempt to characterise the increase in security it affords optical encryption.

•Jan 1, 2017•0 citations

Improved Known-Plaintext Attack on Optical Encryption Based on Double Random Phase Encoding

Wan Qin, Xiang Peng, Xiangfeng Meng +1 more

This paper analysis the security of the optical encryption scheme based on the classical double random phase encoding. We describe a known-plaintext attack which can be used to successfully access the encryption key with the pre-knowledge of only one arbiturary pair of known plaintext-ciphertext. A phase retrieval algorithm is employed in this attack. Computer simulations are made to demonstrate the effectiveness. The results show that even implementing only one round of iteration in the phase retrieval, an attacker can obtain a clear decoded plaintext (a gray-scale image) from an intercept ciphertext.

Symposium on Photonics and Optoelectronics•Jun 1, 2010•13 citations

Security analysis of phase-only DRPE based on known-plaintext attack using multiple known plaintext–ciphertext pairs

Kazuya Nakano, Masafumi Takeda, Hiroyuki Suzuki +1 more

Classical double-random phase encoding (C-DRPE) is an optical symmetric-key encryption technique. C-DRPE is reported to be vulnerable to a known-plaintext attack (KPA) that uses a phase retrieval algorithm. However, although phase-only DRPE (PO-DRPE) is reported to be more resistant to KPAs than C-DRPE, it is not obvious yet that PO-DRPE is sufficiently resistant to a KPA under any condition, because the vulnerability to KPA varies depending on various factors, such as the number of the known plaintext-ciphertext pairs that are given for the KPA, or the gray level of the known-plaintext image (i.e., binary or multivalued image). In this paper, we investigate the resistance of C-DRPE and PO-DRPE to KPA under various conditions related to the number of known plaintext-ciphertext pairs and to the gray level of the known-plaintext image.

Applied Optics•Sep 23, 2014•29 citations

Quantitative analysis on key estimation by known-plaintext attacks to DRPE

Kazuya Nakano, Hiroyuki Suzuki, Masahiro Yamaguchi +2 more

Double Random Phase Encoding (DRPE), which is a typical optical encryption technique, has been reported to be vulnerable to Known Plaintext-Attacks (KPAs) using a Phase Retrieval Algorithm (PRA). But the reported case in which the encryption key is successfully estimated was that the plain image was rather simple such as the image of a character. In addition, although Phase Only DRPE (PO-DRPE) was proposed to achieve more resistance to the KPA than Complex DRPE (C-DRPE) in which both amplitude and phase components are used as an encrypted image, no quantitative results about the relationship between the vulnerability and the plaintext image. In this paper, we show the result of quantitative analysis on KPA by PRA to C-DRPE and PO-DRPE, for the plaintext images of different characteristics. As a result of experiment, KPA to C-DRPE succeeded to estimate the correct key while the probability of success became lower when the number of non-zero pixel increases in the plaintext image. However, KPA to PO-DRPE enabled to estimate only "singular" keys, which are effective for no more than given plaintext/ciphertext image pair and far different from the correct encryption key. We also conducted KPA using two plaintext-ciphertext image pairs for KPA. In the case when two plaintext-ciphertext image pairs were given to KPA, the cryptanalysis succeeded with higher probability than the case of one. Moreover, the probability of success in the KPA was high even in PO-DRPE.

Proceedings of SPIE, the International Society for Optical Engineering/Proceedings of SPIE•Aug 10, 2011•2 citations

A known-plaintext heuristic attack on the Fourier plane encryption algorithm

Unnikrishnan Gopinathan, David S. Monaghan, Thomas J. Naughton +1 more

The Fourier plane encryption algorithm is subjected to a known-plaintext attack. The simulated annealing heuristic algorithm is used to estimate the key, using a known plaintext-ciphertext pair, which decrypts the ciphertext with arbitrarily low error. The strength of the algorithm is tested by using this estimated key to decrypt a different ciphertext which was also encrypted using the same original key. We assume that the plaintext is amplitude-encoded real-valued image, and analyze only the mathematical algorithm rather than a real optical system that can be more secure. The Fourier plane encryption algorithm is found to be susceptible to a known-plaintext heuristic attack.

Optics Express•Jan 1, 2006•231 citations

Iterative phase retrieval algorithms Part II: Attacking optical encryption systems

Changliang Guo, Shi Liu, John T. Sheridan

The modified iterative phase retrieval algorithms developed in Part I [Guo et al., Appl. Opt.54, 4698 (2015)] are applied to perform known plaintext and ciphertext attacks on amplitude encoding and phase encoding Fourier-transform-based double random phase encryption (DRPE) systems. It is shown that the new algorithms can retrieve the two random phase keys (RPKs) perfectly. The performances of the algorithms are tested by using the retrieved RPKs to decrypt a set of different ciphertexts encrypted using the same RPKs. Significantly, it is also shown that the DRPE system is, under certain conditions, vulnerable to ciphertext-only attack, i.e., in some cases an attacker can decrypt DRPE data successfully when only the ciphertext is intercepted.

Applied Optics•May 14, 2015•48 citations
In conventional symmetric encryption, it is common for the encryption/decryption key to be reused for multiple plaintexts. This gives rise to the concept of a known-plaintext attack. In optical image encryption systems, such as double random phase encoding (DRPE), this is also the case. With optical encryption, if one knows a plaintext-ciphertext pair, one can carry out a known-plaintext attack more efficiently than a bruteforce attack, using heuristics based on phase retrieval or simulated annealing. However, it is more likely that an attacker will find an imperfect encryption/decryption key using such heuristics. Such an imperfect key will work for the known plaintext-ciphertext pair, but not an arbitrary unseen plaintext-ciphertext pair using the original key. In this paper, we illustrate the problem and attempt to characterise the increase in security it affords optical encryption.
In conventional symmetric encryption, it is common for the encryption/decryption key to be reused for multiple plaintexts. This gives rise to the concept of a known-plaintext attack. In optical image encryption systems, such as double random phase encoding (DRPE), this is also the case; if one knows a plaintext-ciphertext pair, one can carry out a known-plaintext attack more efficiently than a brute-force attack, using heuristics based on phase retrieval or simulated annealing. However, we demonstrate that it is likely that an attacker will find an imperfect decryption key using such heuristics. Such an imperfect key will work for the known plaintext-ciphertext pair, but not an arbitrary unseen plaintext-ciphertext pair encrypted using the original key. In this paper, we illustrate the problem and attempt to characterise the increase in security it affords optical encryption.
This paper analysis the security of the optical encryption scheme based on the classical double random phase encoding. We describe a known-plaintext attack which can be used to successfully access the encryption key with the pre-knowledge of only one arbiturary pair of known plaintext-ciphertext. A phase retrieval algorithm is employed in this attack. Computer simulations are made to demonstrate the effectiveness. The results show that even implementing only one round of iteration in the phase retrieval, an attacker can obtain a clear decoded plaintext (a gray-scale image) from an intercept ciphertext.
Classical double-random phase encoding (C-DRPE) is an optical symmetric-key encryption technique. C-DRPE is reported to be vulnerable to a known-plaintext attack (KPA) that uses a phase retrieval algorithm. However, although phase-only DRPE (PO-DRPE) is reported to be more resistant to KPAs than C-DRPE, it is not obvious yet that PO-DRPE is sufficiently resistant to a KPA under any condition, because the vulnerability to KPA varies depending on various factors, such as the number of the known plaintext-ciphertext pairs that are given for the KPA, or the gray level of the known-plaintext image (i.e., binary or multivalued image). In this paper, we investigate the resistance of C-DRPE and PO-DRPE to KPA under various conditions related to the number of known plaintext-ciphertext pairs and to the gray level of the known-plaintext image.
Double Random Phase Encoding (DRPE), which is a typical optical encryption technique, has been reported to be vulnerable to Known Plaintext-Attacks (KPAs) using a Phase Retrieval Algorithm (PRA). But the reported case in which the encryption key is successfully estimated was that the plain image was rather simple such as the image of a character. In addition, although Phase Only DRPE (PO-DRPE) was proposed to achieve more resistance to the KPA than Complex DRPE (C-DRPE) in which both amplitude and phase components are used as an encrypted image, no quantitative results about the relationship between the vulnerability and the plaintext image. In this paper, we show the result of quantitative analysis on KPA by PRA to C-DRPE and PO-DRPE, for the plaintext images of different characteristics. As a result of experiment, KPA to C-DRPE succeeded to estimate the correct key while the probability of success became lower when the number of non-zero pixel increases in the plaintext image. However, KPA to PO-DRPE enabled to estimate only "singular" keys, which are effective for no more than given plaintext/ciphertext image pair and far different from the correct encryption key. We also conducted KPA using two plaintext-ciphertext image pairs for KPA. In the case when two plaintext-ciphertext image pairs were given to KPA, the cryptanalysis succeeded with higher probability than the case of one. Moreover, the probability of success in the KPA was high even in PO-DRPE.
The Fourier plane encryption algorithm is subjected to a known-plaintext attack. The simulated annealing heuristic algorithm is used to estimate the key, using a known plaintext-ciphertext pair, which decrypts the ciphertext with arbitrarily low error. The strength of the algorithm is tested by using this estimated key to decrypt a different ciphertext which was also encrypted using the same original key. We assume that the plaintext is amplitude-encoded real-valued image, and analyze only the mathematical algorithm rather than a real optical system that can be more secure. The Fourier plane encryption algorithm is found to be susceptible to a known-plaintext heuristic attack.
The modified iterative phase retrieval algorithms developed in Part I [Guo et al., Appl. Opt.54, 4698 (2015)] are applied to perform known plaintext and ciphertext attacks on amplitude encoding and phase encoding Fourier-transform-based double random phase encryption (DRPE) systems. It is shown that the new algorithms can retrieve the two random phase keys (RPKs) perfectly. The performances of the algorithms are tested by using the retrieved RPKs to decrypt a set of different ciphertexts encrypted using the same RPKs. Significantly, it is also shown that the DRPE system is, under certain conditions, vulnerable to ciphertext-only attack, i.e., in some cases an attacker can decrypt DRPE data successfully when only the ciphertext is intercepted.