NDLI: Keeping secret keys secret in open systems

Content Provider	IEEE Xplore Digital Library
Author	Azhar, Irfan Ahmed, Naveed Abbasi, Abdul Ghafor Kiani, Adnan Shibli, Awais
Copyright Year	2014
Description	Author affiliation: Department of Computing, National University of Sciences and Technology, H-12, Islamabad, Pakistan (Azhar, Irfan; Ahmed, Naveed; Abbasi, Abdul Ghafor; Kiani, Adnan; Shibli, Awais)
Abstract	Security of cryptographic keys stored on an untrusted host is a challenging task. Casual storage of keys could lead to an unauthorized access using physical means. If an adversary can access the binary code, the key material can be easily extracted using well-known key-finding techniques. This paper proposes a new technique for securing keys within software. In our proposed technique, we transform keys (randomly generated bit-strings) to a set of randomized functions, which are then compiled and obfuscated together to form a secure application. When the keys are required at the run-time, an inverse transform is computed by the application dynamically to yield the original bit-strings. We demonstrate that our technique resists attacks by many entropy based key finding algorithms that scan the host's RAM at run-time.
Starting Page	100
Ending Page	104
File Size	639042
Page Count	5
File Format	PDF
e-ISBN	9781479920549
DOI	10.1109/ICOSST.2014.7029328
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2014-12-18
Publisher Place	Pakistan
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Availability Heuristic algorithms Open systems Lead White-Box Model Software Open System Security Cryptography Key Hiding
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

White-box Cryptography : Hiding Keys in Software

Assigning Keys in a Hierarchy

Towards Security Notions for White-Box Cryptography (2009)

Protect white-box AES to resist table composition attacks

Opportunities in White-Box Cryptography

Power maximisation technique for generating secret keys by exploiting physical layer security in wireless communication

Keeping Your API Keys in a Safe

Hiding Information in Software With Respect to a White-box Security Model

Oorschot. A White-Box DES Implementation for DRM Applications (2002)

Keeping secret keys secret in open systems

Similar Documents

White-box Cryptography : Hiding Keys in Software

Assigning Keys in a Hierarchy

Towards Security Notions for White-Box Cryptography (2009)

Protect white-box AES to resist table composition attacks

Opportunities in White-Box Cryptography

Power maximisation technique for generating secret keys by exploiting physical layer security in wireless communication

Keeping Your API Keys in a Safe

Hiding Information in Software With Respect to a White-box Security Model

Oorschot. A White-Box DES Implementation for DRM Applications (2002)

Keeping secret keys secret in open systems