NDLI: CoKey: fast token-based cooperative cryptography

Please wait, while we are loading the content...

Formal security analysis of smart embedded systems

ELAR: extremely lightweight auditing and repairing for cloud security

Decomposition of MAC address structure for granular device inference

Life-experience passwords (LEPs)

Catching predators at watering holes: finding and understanding strategically compromised websites

Code obfuscation against symbolic execution attacks

On the (in)security of the latest generation implantable cardiac defibrillators and how to secure them

Theft-resilient mobile wallets: transparently authenticating NFC users with tapping gesture biometrics

Practical and secure dynamic searchable encryption via oblivious access on distributed data structure

ShieldFS: a self-healing, ransomware-aware filesystem

You can promote, but you can't hide: large-scale abused app detection in mobile app stores

Inferring browser activity and status through remote monitoring of storage usage

VTPin: practical VTable hijacking protection for binaries

Reliably determining data leakage in the presence of strong attackers

A security analysis of automated chinese turing tests

Spicy: a unified deep packet inspection framework for safely dissecting all your data

An ultra-lightweight white-box encryption scheme for securing resource-constrained IoT devices

Pileus: protecting user resources from vulnerable cloud services

Timing-based reconnaissance and defense in software-defined networks

Using image saliency and regions of interest to encourage stronger graphical passwords

The Achilles heel of OAuth: a multi-platform study of OAuth-based authentication

VulPecker: an automated vulnerability detection system based on code similarity analysis

Multi-receiver GPS spoofing detection: error models and realization

Gametrics: towards attack-resilient behavioral authentication with simple cognitive games

CoKey: fast token-based cooperative cryptography

Cypider: building community-based cyber-defense infrastructure for android malware detection

Swords and shields: a study of mobile game hacks and existing defenses

Amplifying side channels through performance degradation

LMP: light-weighted memory protection with hardware assistance

Sanitizing data is not enough!: towards sanitizing structural artifacts in flash media

The cross domain desktop compositor: using hardware-based video compositing for a multi-level secure user interface

Trace-free memory data structure forensics via past inference and future speculations

A multi-cloud based privacy-preserving data publishing scheme for the internet of things

Bootstrapping and maintaining trust in the cloud

RevProbe: detecting silent reverse proxies in malicious server infrastructures

CPAC: securing critical infrastructure with cyber-physical access control

Adaptive encrypted traffic fingerprinting with bi-directional dependence

EvilCoder: automated bug insertion

Location-enhanced authentication using the IoT: because you cannot be in two places at once

Device fingerprinting for augmenting web authentication: classification and analysis of methods

The cloudier side of cryptographic end-to-end verifiable voting: a security analysis of Helios

Intelligent, automated red team emulation

Understanding and defending the binder attack surface in Android

Efficient, adversarial neighbor discovery using logical channels on Microsoft Azure

FASE: functionality-aware security enforcement

Auror: defending against poisoning attacks in collaborative deep learning systems

CASTLE: CA signing in a touch-less environment

HERCULE: attack story reconstruction via community discovery on correlated log graph

CoKey: fast token-based cooperative cryptography

Content Provider	ACM Digital Library
Author	Eckert, Claudia Horsch, Julian Wessel, Sascha
Abstract	Keys for symmetric cryptography are usually stored in RAM and therefore susceptible to various attacks, ranging from simple buffer overflows to leaks via cold boot, DMA or side channels. A common approach to mitigate such attacks is to move the keys to an external cryptographic token. For low-throughput applications like asymmetric signature generation, the performance of these tokens is sufficient. For symmetric, data-intensive use cases, like disk encryption on behalf of the host, the connecting interface to the token often is a serious bottleneck. In order to overcome this problem, we present CoKey, a novel concept for partially moving symmetric cryptography out of the host into a trusted detachable token. CoKey combines keys from both entities and securely encrypts initialization vectors on the token which are then used in the cryptographic operations on the host. This forces host and token to cooperate during the whole encryption and decryption process. Our concept strongly and efficiently binds encrypted data on the host to the specific token used for their encryption, while still allowing for fast operation. We implemented the concept using Linux hosts and the USB armory, a USB thumb drive sized ARM computer, as detachable crypto token. Our detailed performance evaluation shows that our prototype is easily fast enough even for data-intensive and performance-critical use cases like full disk encryption, thus effectively improving security for symmetric cryptography in a usable way.
Starting Page	314
Ending Page	323
Page Count	10
File Format	PDF
ISBN	9781450347716
DOI	10.1145/2991079.2991117
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2016-12-05
Publisher Place	New York
Access Restriction	Subscribed
Subject Keyword	Data confidentiality Full disk encryption Cooperative cryptography Usb token Usb armory Cryptographic token
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Practical Cryptographic Data Integrity Protection with Full Disk Encryption Extended Version

Cryptographic Algorithms for Efficient and Secure Data Sharing in Cloud Storage

Study on Hardware Protection Technique of Flash Disk

Enhancing security and confidentiality in location-based data encryption algorithms

Information leakage prevented by data encryption using smartcard.

Secure storage—Confidentiality and authentication

Trusted full disk encryption model based on TPM

Position-Based Cryptography

Practical Cryptographic Data Integrity Protection with Full Disk Encryption

CoKey: fast token-based cooperative cryptography

Similar Documents

Practical Cryptographic Data Integrity Protection with Full Disk Encryption Extended Version

Cryptographic Algorithms for Efficient and Secure Data Sharing in Cloud Storage

Study on Hardware Protection Technique of Flash Disk

Enhancing security and confidentiality in location-based data encryption algorithms

Information leakage prevented by data encryption using smartcard.

Secure storage—Confidentiality and authentication

Trusted full disk encryption model based on TPM

Position-Based Cryptography

Practical Cryptographic Data Integrity Protection with Full Disk Encryption

CoKey: fast token-based cooperative cryptography