Format-Preserving Encryption Algorithms Using Families of Tweakable Blockciphers

Lee, Jung-Keun; Koo, Bonwook; Roh, Dongyoung; Kim, Woo-Hwan; Kwon, Daesung

doi:10.1007/978-3-319-15943-0_9

Cited by 9 publications

(3 citation statements)

References 25 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…FEA is the standard FPE algorithm of Korea Telecommunications Technology Association selected in 2015 [5]. It consists of two algorithms, including FEA-1 and FEA-2.…”

Section: Format-preserving Encryption Algorithm (Fea)mentioning

confidence: 99%

“…The typical format-preserving encryption includes the NIST standard format-preserving encryption of FF1, FF3-1, Visa Format Preserving Encryption (VFPE), and the Korean standard Format-preserving Encryption Algorithm (FEA) [2][3][4][5]. The FEA algorithm, presented by National Security Research (NSR) institute, uses Feistel structures similar to NIST standards, such as FF1 and FF3-1.…”

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Masked Implementation of Format Preserving Encryption on Low-End AVR Microcontrollers and High-End ARM Processors

et al. 2021

View full text Add to dashboard Cite

Format-Preserving Encryption (FPE) for Internet of Things (IoT) enables the data encryption while preserving the format and length of original data. With these advantages, FPE can be utilized in many IoT applications. However, FPE requires complicated computations and these are high overheads on IoT embedded devices. In this paper, we proposed an efficient implementation of Format-preserving Encryption Algorithm (FEA), which is the Korean standard of FPE, and the first-order masked implementation of FEA on both low-end (i.e., AVR microcontroller) and high-end (i.e., ARM processor) IoT devices. Firstly, we show the vulnerability of FEA when it comes to the Correlation Power Analysis (CPA) approach. Afterward, we propose an efficient implementation method and the masking technique for both low-end IoT device and high-end IoT device. The proposed method is secure against power analysis attacks but the performance degradation of masked measure is only 2.53∼3.77% than the naïve FEA implementation.

show abstract

“…FEA is the standard FPE algorithm of Korea Telecommunications Technology Association selected in 2015 [5]. It consists of two algorithms, including FEA-1 and FEA-2.…”

Section: Format-preserving Encryption Algorithm (Fea)mentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

Masked Implementation of Format Preserving Encryption on Low-End AVR Microcontrollers and High-End ARM Processors

et al. 2021

View full text Add to dashboard Cite

show abstract

“…This difference between the FPE and block ciphers is shown in Figure 1. Recently, the first such protocols, FEA-1 and FEA-2 [8] in South Korea and FF1 and FF3-1 [9] in the United States, passed the evaluation and adoption by the relevant standardisation bodies. To the best of our knowledge, this is the first use of FPE to protect network packet header fields.…”

Section: Introductionmentioning

confidence: 99%

Network Layer Privacy Protection Using Format-Preserving Encryption

Mićović,

Radenković,

Vuletić

2023

Electronics

View full text Add to dashboard Cite

Format-Preserving Encryption (FPE) algorithms are symmetric cryptographic algorithms that encrypt an arbitrary-length plaintext into a ciphertext of the same size. Standardisation bodies recognised the first FPE algorithms (FEA-1, FEA-2, FF1 and FF3-1) in the last decade, and they have not been used for network layer privacy protection so far. However, their ability to encrypt arbitrary-length plaintext makes them suitable for encrypting selected packet header fields and replacing their original value with ciphertext of the same size without storing excessive information on the network element. If the encrypted fields carry personally identifiable information, it is possible to protect the privacy of the endpoints in the communication. This paper presents our research on using FPE for network layer privacy protection and describes LISPP, a lightweight, stateless network layer privacy protection system. The system was developed for programmable smart network interface cards (NIC) and thoroughly tested in a real network environment. We have created several implementations ranging from pure P4 to a mix of P4 and C implementations, exploring their performance and the suitability of target-independent P4 language for such processor-intensive applications. Finally, LISPP achieved line rate TCP throughput, up to 4.5 million packets per second, with the penalty of only 30 to 60 microseconds of additional one-way delay, proving that it is adequate for use in production networks. The most efficient implementation was with the FF3-1 algorithm developed in C and carefully adapted to the specific hardware configuration of the NIC.

show abstract

Linear Cryptanalysis of FF3-1 and FEA

Beyne

2021

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Format-Preserving Encryption Algorithms Using Families of Tweakable Blockciphers

Cited by 9 publications

References 25 publications

Masked Implementation of Format Preserving Encryption on Low-End AVR Microcontrollers and High-End ARM Processors

Masked Implementation of Format Preserving Encryption on Low-End AVR Microcontrollers and High-End ARM Processors

Network Layer Privacy Protection Using Format-Preserving Encryption

Linear Cryptanalysis of FF3-1 and FEA

Contact Info

Product

Resources

About