1. Announcements: Assignment 2 finalized Assignment 2 finalizedQuestions?Today: Wrap up Hill ciphers Wrap up Hill ciphers One-time pads and LFSR One-time pads and LFSR DTTF/NB479: DszquphsbqizDay 7

2. Hill Ciphers Lester Hill, 1929. Not used much, but first time linear algebra used in crypto Use an n x n matrix M. Encrypt by breaking plaintext into blocks of length n (padding with x’s if needed) and multiplying each by M. Example: Encrypt “ Example: Encrypt “ hereissomeonetoencrypt” using M her eis som eon eto enc ryp txx ( 7, 4, 17) (4, 8, 18) … (19, 23, 23) (2, 5, 25) (0, 2, 22) … (0, 22, 15) cfz acw yga vns ave anc sdd awp “CFZACWYGAVNSAVEANCSDDAWP”

3. Hill Cipher Demo Encryption Easy to do in Matlab. Easy to do in Matlab. (Otherwise, you’ll need to find/write a matrix library for language X.) (Otherwise, you’ll need to find/write a matrix library for language X.)Decryption Uses matrix inverse. Uses matrix inverse. How do we determine if a matrix is invertible mod 26? How do we determine if a matrix is invertible mod 26? Does this cipher exhibit diffusion?

4. Next: one time pads Back to Vigenere: if the codeword were really long, say 25% as long as the entire plaintext, how many characters would contribute to each dot product? ____ What does this say about our ability to do a frequency analysis? What does this say about our ability to do a frequency analysis? Now consider the extreme case, the one- time pad…

5. One-time pads Represent the plaintext in binary, length n Works for text (from ASCII), images, music, etc Works for text (from ASCII), images, music, etc The key is a random vector of length n Ciphertext = plaintext XOR key Do message = 1000011, key = 1110010 message = 1000011, key = 1110010 Cipher = ??? Cipher = ??? ciphertext XOR key = ???

6. Unbreakable? Yes, for ciphertext only… Ciphertext:EOFMCKSSDKIVPSSAD Could be: thephoneisringingmeetmeinthegarage… I need the whole key to decrypt. What’s the downside to using a one-time pad? Variation: Maurer, Rabin, Ding et al’s satellite method If I’m willing to compromise some security…

7. Linear Feedback Shift Register (LFSR) Sequences Name comes from hardware implementation b 1 b 2 b 3 b 4 … b m-1 b m Feedback function Shift register Generated bit stream Need initial conditions (bits in register) and a function to generate more terms. Example: x 1 = 0, x 2 = 1, x 3 = 0, x 4 = 0, x 5 = 0; x n+5 = x n + x n+2 (mod 2) What does this remind you of in math? To encrypt plaintext of length n, generate an n- bit sequence and XOR with the plaintext.

8. Linear Feedback Shift Register (LFSR) Sequences A recurrence relation! Specify initial conditions and coefficients, for example: Specify initial conditions and coefficients, for example: x 1 = 0, x 2 = 1, x 3 = 0, x 4 = 0, x 5 = 0; x n+5 = x n + x n+2 (mod 2) Another way to write is x n+5 = 1x n + 0x n+1 + 1x n+2 +0x n+3 + 0x n+4 (mod 2) In general, Generate some more terms How long until it repeats? (the period of the sequence) 10 bits generates ____ bits Demo

9. Long periods LFSR can generate sequences with long periods Like Vigenere with long key: hard to decrypt! Like Vigenere with long key: hard to decrypt! Lots of “bang for the buck”! Lots of “bang for the buck”! But it depends on the key But it depends on the key Good example:x n+31 =x n + x n+3 (mod 2) How many bits do we need to represent this recurrence? 62 bits 62 bits How long is the period? Over 2 billion! Why? Over 2 billion! Why? There exist (2 31 – 1) 31-bit words There exist (2 31 – 1) 31-bit words Why “-1”? If it cycles through all of these, it’s maximal. Related to Mersenne primes See http://www.ece.cmu.edu/~koopman/lfsr/index.html for a list of maximal- period generators http://www.ece.cmu.edu/~koopman/lfsr/index.html Can you devise a bad example (one with period << 2 n -1)?

10. Linear Feedback Shift Register (LFSR) Sequences Downside: very vulnerable to known plaintext attack. Why? Discuss with a partner Discuss with a partner If time, my example If time, my example