Cryptanalysis of the chaotic oscillator based random number generator for bank authenticator device

Öz

In this study, cryptanalysis of a non-equilibrium point chaotic oscillator based random number generator (RNG) that developed as a high security authentication tool for internet banking systems is presented. The security vulnerabilities of the algorithm that generates random bits by using the digits of floating-point numbers have been analyzed and the convergence has been shown by using the master slave synchronization scheme. Simulation and numerical results of the proposed method confirm that both next bit and output bit stream are predictable. Therefore, producing random numbers by using such an algorithm for the authentication tool is very unsecure and master slave synchronization cryptanalysis method is useful to validate chaotic systems.

Anahtar Kelimeler

• Cryptanalysis,non-equilibrium chaotic system,random number generator

Banka kimlik doğrulayıcı cihaz için kaotik osilatör tabanlı rasgele sayı üretecinin kriptanalizi

Öz

Bu çalışmada, internet bankacılığı sistemleri için yüksek güvenlikli bir kimlik doğrulama aracı olarak geliştirilen, denge noktası olmayan kaotik osilatör tabanlı rasgele sayı üretecinin (RNG) kriptanalizasyonu sunulmuştur. Kayan noktalı sayıların basamaklarını kullanarak rasgele bitler üreten algoritmanın güvenlik açıkları analiz edilmiş ve ana bağımlı senkronizasyon şeması kullanılarak yakınsama gösterilmiştir. Önerilen yöntemin simülasyonu ve sayısal sonuçları, hem sonraki bitin hem de çıkış bit akımının öngörülebilir olduğunu doğrular. Bu nedenle, kimlik doğrulama aracı için böyle bir algoritma kullanarak rasgele sayılar üretmek çok güvenli değildir ve ana köle senkronizasyonu kriptanaliz yöntemi kaotik sistemleri doğrulamak için yararlıdır.

Anahtar Kelimeler

• Kriptanaliz,dengeli olmayan kaotik sistem,rastgele sayı üreteci

Kaynakça

1. Petrie, C.S. and Connelly, J.A., A noise-based IC random number generator for applications in cryptography, IEEE Transactions on Circuits and Systems I: Fundamental Theory and Applications, 47(5), 615-621, (2000).
2. Pareschi, F., Setti, G. and Rovatti, R., Implementation and Testing of High-Speed CMOS True Random Number Generators Based on Chaotic Systems, IEEE Transactions on Circuits and Systems I: Regular Papers, 57(12), 3124-3137, (2010).
3. Chen, W.C., Nonlinear dynamics and chaos in a fractional-order financial system, Chaos, Solitons & Fractals, 36(5), 1305-1314, (2008).
4. Stojanovski, T. and Kocarev, L.,Chaos-based random number generators-part I: analysis [cryptography], IEEE Transactions on Circuits and Systems I: Fundamental Theory and Applications, 48(3), 281-288, (2001).
5. Stojanovski, T., Pihl, J. and Kocarev, L., Chaos-based random number generators. Part II: practical realization, IEEE Transactions on Circuits and Systems I: Fundamental Theory and Applications, 48(3), 382-385, (2001).
6. Kwok, S.H.M. and Lam, E.Y., FPGA-based High-speed True Random Number Generator for Cryptographic Applications, TENCON 2006 IEEE Region 10 Conference, Hong Kong, 1-4, (2006).
7. Herrero-Collantes, M. and Garcia-Escartin, J.C., Quantum random number generators, Review of Modern Physics, 89, (2017).
8. Wieczorek, P.Z., An FPGA Implementation of the Resolve Time-Based True Random Number Generator With Quality Control, in IEEE Transactions on Circuits and Systems I: Regular Papers, 61(12), 3450-3459, (2014).

9. Şarkışla, M.A. and Ergün, S., An Area Efficient True Random Number Generator Based on Modified Ring Oscillators, 2018 IEEE Asia Pacific Conference on Circuits and Systems (APCCAS), Chengdu, 274-278, (2018).
10. Wold, K. and Tan, C.H., Analysis and Enhancement of Random Number Generator in FPGA Based on Oscillator Rings, 2008 International Conference on Reconfigurable Computing and FPGAs, Cancun, 385-390, (2008).
11. Ergün, S., On the Security of Chaos Based True Random Number Generators, IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences, E99.A(1), 363-369, (2016).
12. Akkaya, S., Pehlivan, İ., Akgül, A., Varan, M., The design and application of bank authenticator device with a novel chaos based random number generator, Journal of the Faculty of Engineering and Architecture of Gazi University, 33(3), 1171-1182, (2018).