Faculty Profiles - NOGAMI Yasuyuki

Papers - NOGAMI Yasuyuki

Division display >> ／ All the affair displays 1 - 188 of about 188

Optimizing IoT Intrusion Detection Using Balanced Class Distribution, Feature Selection, and Ensemble Machine Learning Techniques

Muhammad Bisri Musthafa, Samsul Huda, Yuta Kodera, Md Arshad Ali, Shunsuke Araki, Jedidah Mwaura, Yasuyuki Nogami

Sensors 24 ( 13 ) 2024.7

Publishing type：Research paper (scientific journal)

Internet of Things (IoT) devices are leading to advancements in innovation, efficiency, and sustainability across various industries. However, as the number of connected IoT devices increases, the risk of intrusion becomes a major concern in IoT security. To prevent intrusions, it is crucial to implement intrusion detection systems (IDSs) that can detect and prevent such attacks. IDSs are a critical component of cybersecurity infrastructure. They are designed to detect and respond to malicious activities within a network or system. Traditional IDS methods rely on predefined signatures or rules to identify known threats, but these techniques may struggle to detect novel or sophisticated attacks. The implementation of IDSs with machine learning (ML) and deep learning (DL) techniques has been proposed to improve IDSs’ ability to detect attacks. This will enhance overall cybersecurity posture and resilience. However, ML and DL techniques face several issues that may impact the models’ performance and effectiveness, such as overfitting and the effects of unimportant features on finding meaningful patterns. To ensure better performance and reliability of machine learning models in IDSs when dealing with new and unseen threats, the models need to be optimized. This can be done by addressing overfitting and implementing feature selection. In this paper, we propose a scheme to optimize IoT intrusion detection by using class balancing and feature selection for preprocessing. We evaluated the experiment on the UNSW-NB15 dataset and the NSL-KD dataset by implementing two different ensemble models: one using a support vector machine (SVM) with bagging and another using long short-term memory (LSTM) with stacking. The results of the performance and the confusion matrix show that the LSTM stacking with analysis of variance (ANOVA) feature selection model is a superior model for classifying network attacks. It has remarkable accuracies of (Formula presented.) and (Formula presented.) and overfitting values of (Formula presented.) and (Formula presented.) on the two datasets, respectively. The model’s ROC is also shaped with a sharp bend, with AUC values of (Formula presented.) and (Formula presented.) for the UNSW-NB15 dataset and the NSL-KD dataset, respectively.

DOI： 10.3390/s24134293

Optimizing IoT Intrusion Detection Using Balanced Class Distribution, Feature Selection, and Ensemble Machine Learning Techniques.

Muhammad Bisri Musthafa, Samsul Huda, Yuta Kodera, Md. Arshad Ali, Shunsuke Araki, Jedidah Mwaura, Yasuyuki Nogami

Sensors 24 ( 13 ) 4293 - 4293 2024.7

Tolerance Evaluation Against Deep Learning Side-Channel Attack on AES in Automotive Microcontroller With Uncertain Leakage Model

Masaki Himuro, Naoto Kawahara, Yoshiyuki Amanuma, Kengo Iokibe, Yasuyuki Nogami, Yoshitaka Toyota

2024 IEEE Joint International Symposium on Electromagnetic Compatibility, Signal &amp; Power Integrity: EMC Japan / Asia-Pacific International Symposium on Electromagnetic Compatibility (EMC Japan/APEMC Okinawa) 2024.5

A Secure Authentication for Plant Monitoring System Sensor Data Access

Samsul Huda, Yasuyuki Nogami, Md. Biplob Hossain, Yang Jie, Le Hoang Anh, Muhammad Bisri Musthafa, Maya Rahayu, Takuma Akada

2024 IEEE International Conference on Consumer Electronics (ICCE) 2024.1

Performance Analysis of ELiPS-Based CP-ABE with Optimized Decryption Functions

Le Hoang Anh, Yuta Kawada, Samsul Huda, Yuta Kodera, Yasuyuki Nogami

Smart Innovation, Systems and Technologies 404 SIST 345 - 354 2024

Publishing type：Research paper (international conference proceedings)

CP-ABE emerges as an advanced cryptographic method that offers secure and precise access control in Internet of Things and cloud storage applications. Nevertheless, the original CP-ABE algorithm relied on the PBC library with a security level limited to 80 bits and is now outdated, making it vulnerable to attacks. To address this issue, we have introduced ELiPS-based CP-ABE, which boosts the level of security to 128 bits using the ELiPS library. While this enhancement improved the overall performance, the decryption functions remained computationally intensive. To tackle this, we previously optimized the decryption function by minimizing final exponentiations and inversions. In this paper, we evaluate and analyze the impact of these optimizations on decryption efficiency. Moreover, we compare the ELiPS-based CP-ABE with these improvements to the initial version and the original PBC-based CP-ABE. As a result, the combination of both optimization techniques resulted in an average 43.06% overall reduction in decryption time compared to the initial version of the ELiPS-based CP-ABE scheme, while in total execution, it led to a 25.27% improvement. Furthermore, there was an average 53.81% overall reduction in total execution time compared to the original PBC-based CP-ABE method.

DOI： 10.1007/978-981-97-5810-4_30

Securing Data Transmission in Noisy Channels: A Synergistic Approach using Kyber and BCH Codes

Linh Nguyen, Andri Santoso, Samsul Huda, Yasuyuki Nogami, Tuy Tan Nguyen

11th IEEE International Conference on Consumer Electronics - Taiwan, ICCE-Taiwan 2024 399 - 400 2024

Publishing type：Research paper (international conference proceedings)

The proliferation of the Internet of Things leads to the sharing of more data among diverse stakeholders, ranging from individual users to large enterprises. However, ensuring the security of this data exchange while simultaneously minimizing errors during transmission presents a complex challenge. Due to the involvement of numerous devices and users capable of data sharing, the dynamic and heterogeneous nature of the environment leads to constant changes. In this paper, we integrate the Kyber algorithm for post-quantum security with Bose-Chaudhuri-Hocquenghem (BCH) codes for error correction. We validate our approach by transmitting images from the widely- used CIFAR-10 dataset in encrypted mode over noisy communication channels. The system demonstrates effective image encryption and robust error correction capabilities.

DOI： 10.1109/ICCE-Taiwan62264.2024.10674282

Optimizing CRYSTALS-Dilithium in Rust: Radix-4 NTT and Assembly-level Comparison with Official C Implementation

Shunri Kudo, Yasuyuki Nogami, Samsul Huda, Yuta Kodera

11th IEEE International Conference on Consumer Electronics - Taiwan, ICCE-Taiwan 2024 395 - 396 2024

Publishing type：Research paper (international conference proceedings)

Post-Quantum Cryptography (PQC) is becoming popular since it offers protection against quantum attacks. CRYSTALS-Dilithium is being considered as a promising NIST PQC standard candidate. It utilizes the Radix-2 Number Theoretic Transform (NTT). Its reliance on lattice-based cryptography and number-theoretic principles positions CRYSTALS-Dilithium as a strong contender for providing robust security in the era of quantum computing. Besides, the Radix-4 NTT divides polynomials into more parts than the Radix-2 NTT, making calculations more efficient by reusing values. In this paper, we improve the computational efficiency of CRYSTALS-Dilithium by implementing the Radix-4 NTT algorithm in both C and Rust programming languages. We verified the effectiveness through experiments in terms of signature and verification speeds. Additionally, we analyzed the assembly code generated by both languages to understand the performance differences.

DOI： 10.1109/ICCE-Taiwan62264.2024.10674226

A Study to Improve Calculation Efficiency of CKKS Encoding with Parallelization

Taichi Saito, He Yixuan, Samsul Huda, Junting Xiao, Yuta Kodera, Yasuyuki Nogami

11th IEEE International Conference on Consumer Electronics - Taiwan, ICCE-Taiwan 2024 397 - 398 2024

Publishing type：Research paper (international conference proceedings)

CKKS homomorphic encryption is frequently utilized in cloud-based applications due to its ability to handle both real and complex numbers, ensuring the protection of sensitive data. However, the security of CKKS encryption relies on an encoding process to convert input data into a polynomial. While this process involves the Inverse Fast Fourier Transform (IFFT), there are two notable issues with IFFT: first, most multiplications between complex numbers require four multiplications between real numbers, and second, there are delays in processing due to data hazards. In this paper, we propose an effective way to handle these issues by substituting them using parallelization based on the sum of complex conjugates. This approach aims to reduce the multiplication cost, thereby improving processing time compared to IFFT.

DOI： 10.1109/ICCE-Taiwan62264.2024.10674426

An In-depth Analysis of Kerberos and Blockchain Integration on VANETs' Security and Performance

Maya Rahayu, Md Biplob Hossain, Samsul Huda, Md Arshad Ali, Yuta Kodera, Yasuyuki Nogami

11th IEEE International Conference on Consumer Electronics - Taiwan, ICCE-Taiwan 2024 391 - 392 2024

Publishing type：Research paper (international conference proceedings)

Vehicular Ad-Hoc Networks (VANETs) are essential for modern transportation systems, but their openness exposes them to cyber threats. Authentication in VANETs is challenged by dynamic topology and high mobility, requiring robust mechanisms. Previously, we proposed an authentication system for VANETs using blockchain and Kerberos. Kerberos authenticator messages are stored in a blockchain ledger accessible to the Trusted Authentication Server (TAS) and Roadside Units (RSUs), resulting in minimal signaling overhead and authentication delay. However, the performance of the blockchain itself was not evaluated. In this paper, we investigate the blockchain's performance in a simulated VANET environment with 100 vehicles, 4 RSUs, and 1 TAS. Using Ethereum blockchain and Omnet++ simulation, we assess the blockchain feasibility in VANET authentication scenarios.

DOI： 10.1109/ICCE-Taiwan62264.2024.10674056

Investigating Vulnerabilities in RSA-like Cryptosystems Through Lattice-based Attacks on Small Exponent Keys

Sou Kumagai, Shota Kanzawa, Samsul Huda, Yuta Kodera, Yasuyuki Nogami

11th IEEE International Conference on Consumer Electronics - Taiwan, ICCE-Taiwan 2024 585 - 586 2024

Publishing type：Research paper (international conference proceedings)

RSA-like cryptosystems, based on the original RSA algorithm, are gaining attention as potential alternatives to traditional techniques. They offer better security, efficiency, flexibility, and compatibility in cryptography. However, recent studies have uncovered vulnerabilities in these variants, particularly to Wiener-type attacks, despite initial expectations of security comparable to RSA. In this paper, we further investigate the security vulnerabilities of a variant of this technique, namely the Murru-Saettone (MS) cryptosystem. Our investigation employs lattice-based attacks to exploit weaknesses in systems with small private keys. It demonstrates that if the private exponent is smaller than N1/4, where N is the product of two distinct balanced primes, the small exponent of the cryptosystem can be recovered.

DOI： 10.1109/ICCE-Taiwan62264.2024.10674633

A Highly Secure and Accurate System for COVID-19 Diagnosis from Chest X-Ray Images

Tuy Tan Nguyen, Tianyi Chen, Ian Philippi, Quoc Bao Phan, Shunri Kudo, Samsul Huda, Yasuyuki Nogami

Midwest Symposium on Circuits and Systems 980 - 984 2024

Publishing type：Research paper (international conference proceedings)

Global healthcare systems face growing pressure as populations rise. This can lead to longer wait times and an increased risk of treatment delays or misdiagnosis. Artificial intelligence (AI) diagnostic systems are being developed to address these challenges, but concerns exist about their accuracy and data security. This study introduces a robust AI telehealth system that offers a two-pronged approach. It utilizes a cutting-edge image analysis method, vision transformer, to enhance diagnostic accuracy, while also incorporating post-quantum cryptography algorithm, Kyber, to ensure patient privacy. Furthermore, an interactive visualization tool aids in interpreting the diagnostic results, providing valuable insights into the model's decisionmaking process. This translates to faster diagnoses and potentially shorter wait times for patients. Extensive testing with various datasets has demonstrated the system's effectiveness. The optimized model achieves a remarkable 95.79% accuracy rate in diagnosing COVID-19 from chest X-rays, with the entire process completed in under five seconds.

DOI： 10.1109/MWSCAS60917.2024.10658795

SnapSafe: Enabling Selective Image Privacy Through YOLO and AES-Protected Facial Encryption with QR Code

Andri Santoso, Samsul Huda, Tuy Tan Nguyen, Yuta Kodera, Yasuyuki Nogami

2024 International Technical Conference on Circuits/Systems, Computers, and Communications, ITC-CSCC 2024 2024

Publishing type：Research paper (international conference proceedings)

In the digital age, organizations commonly use photos to share their activities for brand visibility. However, it is crucial to safeguard the facial information of individuals depicted in these photos to prevent potential misuse. In this paper, we propose a single-party security system for enabling selective image privacy with a focus on facial regions, called SnapSafe. It adopts the YOLOv8 deep learning model for face detection, AES encryption for security, and QR technology to store the encrypted face region coordinates. Our evaluation assesses the effectiveness of the system through the usability of its face locking and unlocking processes, alongside an analysis of its running time. The results demonstrate the system's proficiency in executing face protection tasks with high accuracy and minimal time overhead, thus indicating its suitability for real-time applications.

DOI： 10.1109/ITC-CSCC62988.2024.10628222

Reducing Fruitless Cycles in Pollard's Rho Method with SFM for Efficient ECDLP Attacks on BN Curves

Ryuichi Kato, Takuro Manabe, Shota Kanzawa, Samsul Huda, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

2024 International Technical Conference on Circuits/Systems, Computers, and Communications, ITC-CSCC 2024 2024

Publishing type：Research paper (international conference proceedings)

Pollard's rho method is a widely used probabilistic algorithm for solving the Elliptic Curve Discrete Logarithm Problem (ECDLP). To enhance its efficiency, the skew Frobenius mapping (SFM) has been incorporated into the method, reducing the average number of steps required to find a collision. However, the combination of Pollard's rho method with SFM introduces the occurrence of fruitless cycles, which are computational loops that do not contribute to solving the ECDLP and hinder the overall attacking efficiency. This paper presents a comprehensive analysis of fruitless cycles in Pollard's rho method with SFM, focusing on their impact when applied to Barreto-Naehrig (BN) curves. We propose a scheme to mitigate the occurrence of fruitless cycles by optimizing the seed point selection to be adaptive according to situation. To validate the effectiveness of our proposed method, we perform comprehensive experiments and compare the results with the conventional Pollard's rho method with SFM. The results indicate that the proposed approach significantly reduces the occurrence of fruitless cycles, leading to faster and more efficient ECDLP attacks on BN curves.

DOI： 10.1109/ITC-CSCC62988.2024.10628268

Evaluation of IDS model by improving accuracy and reducing overfitting using stacking LSTM

Muhammad Bisri Musthafa, Samsul Huda, Md Arshad Ali, Yuta Kodera, Yasuyuki Nogami

Digest of Technical Papers - IEEE International Conference on Consumer Electronics 2024

Publishing type：Research paper (international conference proceedings)

Utilizing Machine Learning (ML) techniques to construct models for Intrusion Detection Systems (IDS) has emerged as a leading strategy to enhance security measures. Previously, we applied an ensemble of Support Vector Machines (SVM) for model training, achieving an accuracy detection rate of 88.6% on familiar datasets. However, it performs poorly on unknown datasets due to overfitting problems. This work aims to improve accuracy and tackle overfitting problems by implementing stacked Long Short-Term Memory (LSTM) networks. Furthermore, analysis of variance (ANOVA) with F-test is used to find the important feature. The synthetic minority oversampling technique (SMOTE) algorithm is applied to obtain balanced data. Several experiments were conducted to analyze the performance of the proposed approach, including investigating stacked LSTM with tuning hyperparameters. The proposed method achieved the highest prediction accuracy of 97.23% and an overfitting value of 0.24%.

DOI： 10.1109/ICCE59016.2024.10444231

A Blockchain-based Approach with zk-SNARKs for Secure Email Applications.

Md. Biplob Hossain, Maya Rahayu, Md. Arshad Ali, Samsul Huda, Yuta Kodera, Yasuyuki Nogami

Int. J. Netw. Comput. 14 ( 2 ) 225 - 247 2024

Evaluation of IDS model by improving accuracy and reducing overfitting using stacking LSTM.

Muhammad Bisri Musthafa, Samsul Huda, Ali Md. Arshad, Yuta Kodera, Yasuyuki Nogami

ICCE 1 - 5 2024

IoT-Enabled Plant Monitoring System with Power Optimization and Secure Authentication

Samsul Huda, Yasuyuki Nogami, Maya Rahayu, Takuma Akada, Md Biplob Hossain, Muhammad Bisri Musthafa, Yang Jie, Le Hoang Anh

Computers, Materials and Continua 81 ( 2 ) 3165 - 3187 2024

Publishing type：Research paper (scientific journal)

Global food security is a pressing issue that affects the stability and well-being of communities worldwide. While existing Internet of Things (IoT) enabled plant monitoring systems have made significant strides in agricultural monitoring, they often face limitations such as high power consumption, restricted mobility, complex deployment requirements, and inadequate security measures for data access. This paper introduces an enhanced IoT application for agricultural monitoring systems that address these critical shortcomings. Our system strategically combines power efficiency, portability, and secure access capabilities, assisting farmers in monitoring and tracking crop environmental conditions. The proposed system includes a remote camera that captures images of surrounding plants and a sensor module that regularly monitors various environmental factors, including temperature, humidity, and soil moisture. We implement power management strategies to minimize energy consumption compared to existing solutions. Unlike conventional systems, our implementation utilizes the Amazon Web Services (AWS) cloud platform for reliable data storage and processing while incorporating comprehensive security measures, including Two-Factor Authentication (2FA) and JSON Web Tokens (JWT), features often overlooked in current agricultural IoT solutions. Users can access this secure monitoring system via a developed Android application, providing convenient mobile access to the gathered plant data. We validate our system’s advantages by implementing it with two potted garlic plants on Okayama University’s rooftop. Our evaluation demonstrates high sensor reliability, with strong correlations between sensor readings and reference data, achieving determination coefficients (R2) of 0.979 for temperature and 0.750 for humidity measurements. The implemented power management strategies extend battery life to 10 days on a single charge, significantly outperforming existing systems that typically require daily recharging. Furthermore, our dual-layer security implementation utilizing 2FA and JWT successfully protects sensitive agricultural data from unauthorized access.

DOI： 10.32604/cmc.2024.058144

An implementation of ELiPS-based Ciphertext-Policy Attribute-Based Encryption

Le Hoang Anh, Yuta Kawada, Samsul Huda, Md. Arshad Ali, Yuta Kodera, Yasuyuki Nogami

2023 Eleventh International Symposium on Computing and Networking Workshops (CANDARW) 2023.11

A Proposal of IoT Application for Plant Monitoring System with AWS Cloud Service.

Samsul Huda, Yasuyuki Nogami, Takuma Akada, Maya Rahayu, Md. Biplob Hossain, Muhammad Bisri Musthafa, Le Hoang Anh, Yang Jie

SmartNets 1 - 5 2023

Evaluation of machine learning based optimized feature selection approaches and classification methods for Intrusion Detection System.

Muhammad Bisri Musthafa, Ali Md. Arshad, Samsul Huda, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

ICCE-Taiwan 285 - 286 2023

Improvement of Miller Loop for a Pairing on FK12 Curve and Evaluation with other STNFS Curves

Ikesaka Kazuma, Nanjo Yuki, Kodera Yuta, Kusaka Takuya, Nogami Yasuyuki

International Journal of Networking and Computing 13 ( 2 ) 242 - 257 2023

Language：English Publisher：IJNC Editorial Committee

Pairing is carried out by two steps, Miller loop and final exponentiation. In this manuscript, the authors propose an efficient Miller loop for a pairing on the FK12 curve. A Hamming weight and bit-length of loop parameter have a great effect on the computational cost of the Miller loop. Optimal-ate pairing is used as the most efficient pairing on the FK12 curve currently. The loop parameter of optimal-ate pairing is 6z + 2 where z is the integer to make the FK12 curve parameter. Our method uses z which has a shorter bit-length than the previous optimal-ate pairing as the loop parameter. Usually, z has a low Hamming weight to make final exponentiation efficient. Therefore, the loop parameter in our method has a lower Hamming weight than the loop parameter of the previous one in many cases. The authors evaluate our method by the number of multiplications and execution time. As a result, the proposed algorithm leads to a 3.71% reduction in the number of multiplications and a 3.03% reduction in the execution time. In addition, the authors implement other STNFS secure curves and evaluate these curves from viewpoint of execution time.

DOI： 10.15803/ijnc.13.2_242

A Consideration of Averaging the Calculation Cost of CVMA for A Secure Session based Data Transmission.

Akane Miyoshi, Kazuma Ikesaka, Ali Md. Arshad, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

ICCE-Taiwan 493 - 494 2023

Improvement of Miller Loop for a Pairing on FK12 Curve and Evaluation with other STNFS Curves.

Kazuma Ikesaka, Yuki Nanjo, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

International Journal of Networking and Computing 13 ( 2 ) 242 - 257 2023

A Smart Contract Based Blockchain Approach Integrated with Elliptic Curve Cryptography for Secure Email Application

Md Biplob Hossain, Maya Rahayu, Md Arshad Ali, Samsul Huda, Yuta Kodera, Yasuyuki Nogami

Proceedings - 2023 11th International Symposium on Computing and Networking Workshops, CANDARW 2023 195 - 201 2023

Publishing type：Research paper (international conference proceedings)

In today's interconnected digital era, email stands as a primary platform for communication across various fields, such as business, academia, and personal interactions. Since it operates on shared mediums, email is inherently susceptible to interception and misuse of sensitive information. To cover this issue, Pretty Good Privacy (PGP) ensures the confidentiality of email contents. However, while PGP effectively encrypts the body of messages, a significant vulnerability emerges during key sharing. Blockchain technology comes with its immutability aspect. Once data is embedded into the blockchain, modifying it becomes exceedingly challenging. This makes it a potential safeguard against the vulnerabilities in PGP's key sharing mechanism. Additionally, smart contracts remove the requirement of a Man-in-the-Middle for sharing key, which enhances the sharing key's security and builds trust among users. In this paper, we integrate the strengths of blockchain into the PGP encryption process, specifically targeting the key sharing vulnerability. Also, we adopt Elliptic Curve Cryptography (ECC) to ensure the confidentiality of the PGP's key. First, generate the PGP's key. Then, encrypt it using ECC. After that, deploy a smart contract and continue with the encrypted PGP's key transactions in blockchain networks. Through this integration, we aim to enhance the security, ensuring both confidentiality and integrity of the PGP's key. We demonstrated that the proposed system is workable by experimental observation.

DOI： 10.1109/CANDARW60564.2023.00040

An integrated secured vehicular ad-hoc network leveraging Kerberos authentication and Blockchain technology.

Maya Rahayu, Md. Biplob Hossain, Ali Md. Arshad, Samsul Huda, Yuta Kodera, Yasuyuki Nogami

CANDARW 260 - 266 2023

An integrated secured vehicular ad-hoc network leveraging Kerberos authentication and Blockchain technology

Maya Rahayu, Md Biplob Hossain, Md Arshad Ali, Samsul Huda, Yuta Kodera, Yasuyuki Nogami

Proceedings - 2023 11th International Symposium on Computing and Networking Workshops, CANDARW 2023 260 - 266 2023

Publishing type：Research paper (international conference proceedings)

Vehicular Ad-Hoc Networks (VANETs) are a prominent technology in the drive towards establishing smart transportation systems in the Digital Transformation (DX) era. These networks provide users with critical road information for optimal route selection and accident avoidance. However, the openness of VANETs environment makes them susceptible to various cyber threats. Therefore, authenticating the entities that join the network is necessary and crucial for ensuring the security and integrity of VANET communications. Kerberos is one of the authentication protocols that ensure security, as the password and key are never directly sent among the entities. However, ensuring secure and efficient authentication, especially in VANET handovers, remains a challenge. This paper introduces an innovative authentication system for VANETs that leverages the combined power of blockchain and Kerberos. The system stores Kerberos authenticator messages in a distributed ledger within the blockchain, accessible to Trusted Authorities (TAS) and all RSUs. This approach streamlines vehicle handovers and safeguards authenticator messages against adversarial tampering. It exhibits minimal signalling overhead and authentication delay, ensuring swift and secure authentication processes. We verify the proposal's effectiveness by simulating the VANETs environment with 100 vehicles, 4 RSUs, and 1 TAS using Omnet++ with the Tsushima, Japan area map.

DOI： 10.1109/CANDARW60564.2023.00050

A Smart Contract Based Blockchain Approach Integrated with Elliptic Curve Cryptography for Secure Email Application.

Md. Biplob Hossain, Maya Rahayu, Ali Md. Arshad, Samsul Huda, Yuta Kodera, Yasuyuki Nogami

CANDARW 195 - 201 2023

Design and implementation of a practical control system for an air-conditioner with IoT sensor nodes

Mengfang Duan, Yuta Kodera, Nobuya Ishihara, Yasuyuki Nogami, Takuya Kusaka

2022 37th International Technical Conference on Circuits/Systems, Computers and Communications (ITC-CSCC) 2022.7

Improvement of Final Exponentiation for a Pairing on FK12 Curve and its Implementation

Kazuma Ikesaka, Yuki Nanjo, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

2022 37th International Technical Conference on Circuits/Systems, Computers and Communications (ITC-CSCC) 2022.7

Comparison of conversion matrices for a compact AES–CTR defined over an isomorphic field

Tomoya Hikida, Yasuyuki Nogami, Md. Arshad Ali, Yuta Kodera

2022 37th International Technical Conference on Circuits/Systems, Computers and Communications (ITC-CSCC) 2022.7

A Consideration on Change the Transition Probability of SHAKE256 with Different Initial Values

Tetsuro Ishida, Ryoichi Sato, Md. Arshad Ali, Takuya Kusaka, Yasuyuki Nogami, Yuta Kodera

2022 37th International Technical Conference on Circuits/Systems, Computers and Communications (ITC-CSCC) 2022.7

A Business-to-Business Collaboration System That Promotes Data Utilization While Encrypting Information on the Blockchain

Hiroaki Nasu, Yuta Kodera, Yasuyuki Nogami

Sensors 22 ( 13 ) 4909 - 4909 2022.6

Publishing type：Research paper (scientific journal) Publisher：MDPI AG

Ensuring the reliability of data gathering from every connected device is an essential issue for promoting the advancement of the next paradigm shift, i.e., Industry 4.0. Blockchain technology is becoming recognized as an advanced tool. However, data collaboration using blockchain has not progressed sufficiently among companies in the industrial supply chain (SC) that handle sensitive data, such as those related to product quality, etc. There are two reasons why data utilization is not sufficiently advanced in the industrial SC. The first is that manufacturing information is top secret. Blockchain mechanisms, such as Bitcoin, which uses PKI, require plaintext to be shared between companies to verify the identity of the company that sent the data. Another is that the merits of data collaboration between companies have not been materialized. To solve these problems, this paper proposes a business-to-business collaboration system using homomorphic encryption and blockchain techniques. Using the proposed system, each company can exchange encrypted confidential information and utilize the data for its own business. In a trial, an equipment manufacturer was able to identify the quality change caused by a decrease in equipment performance as a cryptographic value from blockchain and to identify the change one month earlier without knowing the quality value.

DOI： 10.3390/s22134909

Transition Probability Test for an RO-Based Generator and the Relevance between the Randomness and the Number of ROs.

Yuta Kodera, Ryoichi Sato, Ali Md. Arshad, Takuya Kusaka, Yasuyuki Nogami

Entropy 24 ( 6 ) 780 - 780 2022

Efficient Final Exponentiation for Cyclotomic Families of Pairing-Friendly Elliptic Curves with Any Prime Embedding Degrees.

Yuki Nanjo, Masaaki Shirase, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

Int. J. Netw. Comput. 12 ( 2 ) 317 - 338 2022

A Study on Parameters of Piecewise Logistic Map over Large Integers and Processing Time.

Ryo Inoue, Takeru Miyazaki, Satoshi Uehara, Shunsuke Araki, Yasuyuki Nogami

ICCE-TW 169 - 170 2022

Improvement of Optimal-Ate Pairing on Cocks-Pinch Curve with Embedding Degree 6 in Affine Coordinates.

Tomohiro Iida, Kazuma Ikesaka, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

2022 Tenth International Symposium on Computing and Networking(CANDARW) 309 - 315 2022

Improvement of Miller Loop for a Pairing on FK12 Curve and its Implementation.

Kazuma Ikesaka, Yuki Nanjo, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

Tenth International Symposium on Computing and Networking(CANDAR) 104 - 109 2022

Proposal of Piccolo-CMAC for Sigfox network

Wataru Takehisa, Ryo Fukushima, Ryoichi Sato, Daichi Hattori, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

2021 36th International Technical Conference on Circuits/Systems, Computers and Communications, ITC-CSCC 2021 2021.6

Publishing type：Research paper (international conference proceedings)

We propose a CMAC using Lightweight Blockcipher Piccolo for a well-known LPWA: Sigfox network. Increasing numbers of a device link to the Internet with LPWA, However these devices does not have adequate resources. Our proposal would be an effective security measure for limited resource IoT devices with Sigfox network. Piccolo-CMAC is implemented by employing Piccolo-80 to encrypt message without using extra resources.

DOI： 10.1109/ITC-CSCC52171.2021.9501429

Efficient Implementation of ECDH for Sigfox Communication

Ryo Fukushima, Daichi Hattori, Wataru Takehisa, Ryoichi Sato, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

2021 36th International Technical Conference on Circuits/Systems, Computers and Communications (ITC-CSCC) 2021.6

Path Authentication Protocol: Based on a Lightweight MAC and a Nonlinear Filter Generator

Yuki Taketa, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

Communications in Computer and Information Science 1383 CCIS 38 - 48 2021

Publishing type：Research paper (international conference proceedings)

In this research, the authors propose a functionality based on message authentication code (MAC) to ensure the correctness of its path from a source to a destination. It aims to use a controller area network (CAN) over driving system. In the construction, MAC and a pseudorandom number generator having an intentional group structure are employed so that the correct user can authenticate a message and its path. The proposed method is experimentally evaluated by observing the computational time over IoT devices. As a result, it is found that the results show that it is possible to implement as an additional function that gives path authentication with additional time at most 3 times for the corresponding computation.

DOI： 10.1007/978-3-030-72725-3_3

Consideration for Affects of an XOR in a Random Number Generator Using Ring Oscillators.

Ryoichi Sato, Yuta Kodera, Ali Md. Arshad, Takuya Kusaka, Yasuyuki Nogami, Robert H. Morelos-Zaragoza

Entropy 23 ( 9 ) 1168 - 1168 2021

Language：English Publishing type：Research paper (scientific journal) Publisher：MDPI

A cloud service to offer entropy has been paid much attention to. As one of the entropy sources, a physical random number generator is used as a true random number generator, relying on its irreproducibility. This paper focuses on a physical random number generator using a field-programmable gate array as an entropy source by employing ring oscillator circuits as a representative true random number generator. This paper investigates the effects of an XOR gate in the oscillation circuit by observing the output signal period. It aims to reveal the relationship between inputs and the output through the XOR gate in the target generator. The authors conduct two experiments to consider the relevance. It is confirmed that combining two ring oscillators with an XOR gate increases the complexity of the output cycle. In addition, verification using state transitions showed that the probability of the state transitions was evenly distributed by increasing the number of ring oscillator circuits.

DOI： 10.3390/e23091168

Improvement of Final Exponentiation for Pairings on BLS Curves with Embedding Degree 15

NANJO Yuki, SHIRASE Masaaki, KUSAKA Takuya, NOGAMI Yasuyuki

IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences 104 ( 1 ) 315 - 318 2021

Language：English Publishing type：Research paper (scientific journal) Publisher：The Institute of Electronics, Information and Communication Engineers

<p>To be suitable in practice, pairings are typically carried out by two steps, which consist of the Miller loop and final exponentiation. To improve the final exponentiation step of a pairing on the BLS family of pairing-friendly elliptic curves with embedding degree 15, the authors provide a new representation of the exponent. The proposal can achieve a more reduction of the calculation cost of the final exponentiation than the previous method by Fouotsa et al.</p>

DOI： 10.1587/transfun.2020EAL2046

Other Link： https://dblp.uni-trier.de/db/journals/ieiceta/ieiceta104.html#NanjoSKN21

Restrictions of Integer Parameters for Generating Attractive BLS Subfamilies of Pairing-Friendly Elliptic Curves with Specific Embedding Degrees

Nanjo Yuki, Shirase Masaaki, Kusaka Takuya, Nogami Yasuyuki

International Journal of Networking and Computing 11 ( 2 ) 383 - 411 2021

Language：English Publishing type：Research paper (scientific journal) Publisher：IJNC Editorial Committee

Pairings are widely used for innovative protocols such as ID-based encryption and group signature authentication. According to the recent works, the Barreto-Lynn-Scott (BLS) family of pairing-friendly elliptic curves is suggested for the pairings at the various security levels. One of the important facts is that the BLS family has fixed polynomial parameters of a field characteristic and group order in terms of an integer x_0. For practical pairing-based protocols, we have to carefully find x_0 which leads to efficient pairings, however, this search of x_0 is typically complicated. Thus, it is desired some convenient ways of finding x_0 which have advantageous for the pairings. For this reason, Costello et al. proposed simple restrictions for finding x_0 that generates the specific BLS subfamilies of curves with embedding degree k = 24 having one of the best field and curve constructions for the pairings. Since there are demands of such restrictions for the other cases of the embedding degrees, the authors extend their work and provide these for the cases of k = 2^m 3 and 3^n with arbitrary integers m, n>0 in this paper. The results will help to find new parameters which lead to one of the best performing pairings with the BLS family of curves with various k. The results also allow us to respond to change in the security levels of the pairings flexibly according to the progress in the security analyses in the future.

DOI： 10.15803/ijnc.11.2_383

Other Link： https://dblp.uni-trier.de/db/journals/ijnc/ijnc11.html#NanjoSKN21

Sophisticated analysis of a method to eliminate fruitless cycles for Pollard's rho method with skew Frobenius mapping over a Barreto-Naehrig curve

Miura Hiromasa, Kanzawa Syota, Matsumura Rikuya, Kodera Yuta, Kusaka Takuya, Nogami Yasuyuki

International Journal of Networking and Computing 11 ( 2 ) 231 - 250 2021

Language：English Publishing type：Research paper (scientific journal) Publisher：IJNC Editorial Committee

In this paper, the authors focus on and propose an approach to attack a kind of pairing-friendly curves, the Barreto-Naehring (BN) curve, to accelerate the evaluation of the security level concerning the elliptic curve discrete logarithm problem (ECDLP). More precisely, this paper targets the BN curve, which is known to be a pairing-friendly curve, and Pollard's rho method based on the random-walk is adopted to attack the curve.Though Pollard's rho method with skew Frobenius mapping is known to solve the ECDLP efficiently, this approach sometimes induces the unsolvable cycle, called the fruitless cycle, and such trials must restart with a different starting point. However, any effective method to eliminate such fruitless cycles has not been proposed. Therefore, the authors focus and give the sophisticated analysis to propose an effective approach to eliminate such cycles to optimize Pollard's rho method furthermore. In addition, we confirm the effectiveness of the method by applying it to a BN curve with 12, 17, and 33-bit parameters.

DOI： 10.15803/ijnc.11.2_231

Other Link： https://dblp.uni-trier.de/db/journals/ijnc/ijnc11.html#MiuraKMKKN21

An Optimal Curve Parameters for BLS12 Elliptic Curve Pairing and Its Efficiency Evaluation.

Daichi Hattori, Yuto Takahashi, Tomoya Tatara, Yuki Nanjo, Takuya Kusaka, Yasuyuki Nogami

IEEE International Conference on Consumer Electronics-Taiwan(ICCE-TW) 1 - 2 2021

A Study on Relationship Between Period and Number of Divisions in Piecewise Logistic Map over Integers.

Sota Eguchi, Takeru Miyazaki, Satoshi Uehara, Shunsuke Araki, Yasuyuki Nogami

IEEE International Conference on Consumer Electronics-Taiwan(ICCE-TW) 1 - 2 2021

Consideration of Generating Suitable Parameters for Constructing type (h, m) Gauss Period Normal Basis.

Keiji Yoshimoto, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

IEEE International Conference on Consumer Electronics-Taiwan(ICCE-TW) 1 - 2 2021

Secure Comparison Protocol for Promoting Business to Business Collaboration on the Blockchain.

Hiroaki Nasu, Yuta Kodera, Yasuyuki Nogami

IEEE International Conference on Consumer Electronics-Taiwan(ICCE-TW) 1 - 2 2021

A Property Management System Using Image Recognition by YOLO.

Taiki Miyamoto, Ryo Fukushima, Kazuaki Harada, Keiji Yoshimoto, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

IEEE International Conference on Consumer Electronics-Taiwan(ICCE-TW) 1 - 2 2021

A Study on Digital Watermarks for Audio Signals Using Phase of Frequency Signals in Addition to the Other Methods.

Kako Takahashi, Takeru Miyazaki, Shunsuke Araki, Satoshi Uehara, Yasuyuki Nogami

IEEE International Conference on Consumer Electronics-Taiwan(ICCE-TW) 1 - 2 2021

A Proposal for Testing Physical Random Numbers Using Stochastic Process.

Ryoichi Sato, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

IEEE International Conference on Consumer Electronics-Taiwan(ICCE-TW) 1 - 2 2021

Efficient Final Exponentiation for Pairings on Several Curves Resistant to Special TNFS.

Yuki Nanjo, Masaaki Shirase, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

Ninth International Symposium on Computing and Networking(CANDAR) 48 - 55 2021

A Construction Method of Final Exponentiation for a Specific Cyclotomic Family of Pairing-Friendly Elliptic Curves with Prime Embedding Degrees.

Yuki Nanjo, Masaaki Shirase, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

Ninth International Symposium on Computing and Networking(CANDAR) 148 - 154 2021

Consideration of the side-channel attack to SPECK implemented on Arduino Uno.

Masaki Nakanose, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

Ninth International Symposium on Computing and Networking 339 - 345 2021

Consideration of the side-channel attack to SIMON implemented on Arduino Uno.

Harunobu Enami, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

Ninth International Symposium on Computing and Networking 412 - 415 2021

Multiplication and squaring in cubic and quartic extensions for pairing based cryptography

Yuta Kodera, Yasuyuki Nogami

Finite Fields and their Applications 71 - 86 2020.10

Implementation and Evaluation of an Efficient MAC Based on OMAC for CAN on 8-Bit Microcomputer

Yuta Fujioka, Hiroto Ogura, Yuki Ueno, Takuya Kusaka, Yasuyuki Nogami

ITC-CSCC 2020 - 35th International Technical Conference on Circuits/Systems, Computers and Communications 342 - 347 2020.7

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

In this study, a new MAC based on OMAC is implemented in Arduino Uno. In addition, a function to update the common key based on pseudo-random numbers is additionally implemented. A re-verification function of the MAC value on the receiving ECU is also implemented. Similarly, these features have been implemented for the Raspberry Pi. Communication with Arduino is possible. The time taken to calculate the MAC and the time required to update the key are measured for the Arduino and Raspberry Pi, respectively. As a result, both of the OMAC processing time and the key update time in both of the microcomputers satisfied a time constraints.

A Technique for Fast Miller's Algorithm of Ate Pairings on Elliptic Curves with Embedding Degrees of Multiple of Three

Yuki Nanjo, Masaaki Shirase, Takuya Kusaka, Yasuyuki Nogami

ITC-CSCC 2020 - 35th International Technical Conference on Circuits/Systems, Computers and Communications 283 - 287 2020.7

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Bilinear pairings are widely used for innovative protocols such as ID-based encryption and group signature authentication. According to the current research of the pairings, not only families of pairing-friendly elliptic curves with embedding degrees of multiple of four or six but also that of multiple of three can realize efficient pairings. However, the range of the practical choices of the elliptic curves with embedding degrees of multiple of three is more restricted than that of even embedding degrees by an efficiency reason for the computation of Miller's algorithm with a signed binary representation of a loop parameter. To ease the restriction, the authors propose to compute the Miller's algorithm by swapping the sign of the loop parameter without performance degradation for the ate pairing on such the elliptic curves.

An Explicit Formula of Cyclotomic Cubing Available for Pairings on Elliptic Curves with Embedding Degrees of Multiple of Three

Yuki Nanjo, Masaaki Shirase, Takuya Kusaka, Yasuyuki Nogami

ITC-CSCC 2020 - 35th International Technical Conference on Circuits/Systems, Computers and Communications 288 - 292 2020.7

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Bilinear pairings are widely used for innovative protocols such as ID-based encryption and group signature authentication. According to the current research of the pairings, not only families of pairing-friendly elliptic curves with embedding degrees of multiple of four or six but also that of multiple of three are attractive choices for practical pairings. However, the pairings on such the elliptic curves cannot benefit from an efficient performing squaring available in a cyclotomic subgroup which plays an important role in fast final exponentiation. As one of the candidates of replacements of the squaring, the authors consider an efficient performing cubing available in the cyclotomic subgroup.

Electrical Falsification of CAN Data by Magnetic Coupling

Hiroto Ogura, Ryunosuke Isshiki, Kengo Iokibe, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

ITC-CSCC 2020 - 35th International Technical Conference on Circuits/Systems, Computers and Communications 348 - 353 2020.7

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Controller Area Network (CAN) is widely employed as an in-vehicle network, and is required for extremely high reliability. CAN uses five mechanisms to detect errors caused by channel noises in CAN frames. However, an adversary can reportedly falsify a CAN frame by tampering with sample points in the frame. In this paper, the effectiveness of a new falsification method that does not require sample point tampering is proposed. In the method, transient electromagnetic pulses are injected into a CAN bus by magnetic coupling that enables falsification at the target CAN node without error detection. The proposed method was examined on a CAN bus which consists of two CAN nodes. As a result, the new falsification method was effective for CAN.

Implementation and Evaluation of Ate Pairings on Elliptic Curves with Embedding Degree 10 Applied Type-II All-One Polynomial Extension Field of Degree 5

Rikuya Matsumura, Yuto Takahashi, Yuki Nanjo, Takuya Kusaka, Yasuyuki Nogami

ITC-CSCC 2020 - 35th International Technical Conference on Circuits/Systems, Computers and Communications 336 - 341 2020.7

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Pairing-based cryptography has received much attention as an encryption method for realizing advanced cryptography such as ID-based encryption and searchable encryption. In a pairing-friendly elliptic curve of embedding degree 10, calculation cost of multiplication and squaring on extension fields of degree 5 are related to efficiency of pairing. Therefore, it is necessary to select an efficient multiplication and squaring algorithms on the extension field of degree 5. To apply these algorithms, the authors implement a pairing on an elliptic curve of embedding degree 10 with type-II all-one polynomial extension field (AOPF) of degree of 5 and optimal extension field (OEF) of degree of 5. As a result, the computational complexity of pairing with the expanded AOPF of degree 5 are almost 7.4% efficient than that of the expanded OEF of degree 5.

An Implementation and Evaluation of a Pairing on Elliptic Curves with Embedding Degree 14

Zihao Song, Rikuya Matsumura, Yuto Takahashi, Yuki Nanjo, Takuya Kusaka, Yasuyuki Nogami, Tsutomu Matsumoto

ITC-CSCC 2020 - 35th International Technical Conference on Circuits/Systems, Computers and Communications 293 - 298 2020.7

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

As the computer architecture technology evolves, communication protocols have been demanded not only having reliable security but also flexible functionality. Advanced cryptography has been expected as a new generation cryptography which suffices such the requirements. A pairing is one of the key technologies of the cryptography and the pairing has been known as having a substantial amount of construction parameters. Recently, the elliptic curve with embedding degree 14 is evaluated as one of the efficient curves for pairing. In the paper, we implement an optimal ate pairing on the elliptic curve by applying several variants of multiplication algorithms of extension field of degree 7 on multiple devices. The best multiplication algorithm among the candidates is derived. Besides, for efficient calculations, we propose a pseudo 7-sparse algorithm and a fast calculation method of final exponentiation. As a result, we discover the proper multiplication algorithm bases on the rate of addition and multiplications on several different computer platforms. Our proposed pseudo 7-sparse algorithm is approximately 1.54% faster than a regular algorithm on almost all tested platforms. Eventually, for the total execution time of pairing we record 9.33ms on Corei5-9500.

An Efficient File Hierarchy Attribute Based Encryption Using Optimized Tate Pairing Construction in Cloud Environment

Balaji Chandrasekaran, Yasuyuki Nogami, Ramadoss Balakrishnan

Journal of Applied Security Research 15 ( 2 ) 270 - 278 2020.4

Language：English Publishing type：Research paper (scientific journal) Publisher：TAYLOR & FRANCIS INC

One of the most preferred encryption techniques for data sharing in cloud environment is Ciphertext-Policy Attribute Based Encryption (CP-ABE). An efficient File Hierarchy CP-ABE (FH-CP-ABE) scheme using an integrated access structure was proposed by Wang and colleagues. Their working construction was based on symmetric pairing. In this article, we propose an efficient Asymmetric File Hierarchy Ciphertext-Policy Attribute Based Encryption (AFH-CP-ABE) which is based on an asymmetric pairing construction using denominator elimination and twist mapping. We apply this optimized Tate pairing in the proposed AFH-CP-ABE to find out its computational costs for encryption and decryption using gmp 6.0.0 library and then compared with existing schemes.

DOI： 10.1080/19361610.2019.1649534

Secure Information Transmission Framework in Wireless Body Area Networks

Balaji Chandrasekaran, Ramadoss Balakrishnan, Yasuyuki Nogami

Journal of Applied Security Research 15 ( 2 ) 279 - 287 2020.4

Language：English Publishing type：Research paper (scientific journal) Publisher：TAYLOR & FRANCIS INC

Secured information transmission is one of the critical challenges in Wireless Body Area Networks (WBAN). The main motivation of this paper is secure transmission of highly sensitive patient information with reduced computation cost and storage requirements. In this paper, we integrate Ciphertext-Policy Attribute Based Encryption (CPABE) with Constant Size Ciphertext (CPABE-CSC) and Blowfish algorithm for secure transmission of sensitive patient information. The experimental results show the efficiency of the proposed scheme in terms of computation cost and ciphertext size when compared with existing schemes.

DOI： 10.1080/19361610.2019.1669987

Evaluating Side-Channel Resistance Using Low Order Rational Points Against Curve25519 and an Associated Quadratic Twist

Keiji Yoshimoto, Yoshinori Uetake, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

International Journal of Networking and Computing 10 ( 2 ) 144 - 158 2020

A Performance Analysis and Evaluation of SIDH Applied Several Implementation-Friendly Quadratic Extension Fields

Nanjo Yuki, Shirase Masaaki, Kusaka Takuya, Nogami Yasuyuki

International Journal of Networking and Computing 10 ( 2 ) 227 - 241 2020

Language：English Publishing type：Research paper (scientific journal) Publisher：IJNC Editorial Committee

It is well-known that quadratic extension fields (QEFs) based on optimal extension fields (OEFs) are typically used for supersingular isogeny Diffie-Hellman (SIDH) key exchange protocol. On the other hand, there is a possibility of the performance improvement of SIDH by employing other attractive choices of QEFs with efficient performing arithmetics which are based on all-one polynomial extension fields (AOPFs) and extension fields with normal basis representation (EFNs). Thus, the authors confirm that the applicability of the new candidates of QEFs for SIDH and evaluate SIDH applied the possible choices of QEFs. As a result of the experiment, the authors found that the performances of SIDH applied the QEFs based on AOPF and EFN are comparable to that of the previous QEF. Moreover, one of the QEFs based on EFN result in a new efficient implementation of the SIDH with SIDH-friendly prime given as p= 2^{e_A}3^{e_B}f+1 where e_A, e_B and $f$ are positive integers.

DOI： 10.15803/ijnc.10.2_227

Other Link： https://dblp.uni-trier.de/db/journals/ijnc/ijnc10.html#NanjoSKN20

A Construction Method of an Isomorphic Map between Quadratic Extension Fields Applicable for SIDH

NANJO Yuki, SHIRASE Masaaki, KUSAKA Takuya, NOGAMI Yasuyuki

IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences 103 ( 12 ) 1403 - 1406 2020

Language：English Publishing type：Research paper (scientific journal) Publisher：The Institute of Electronics, Information and Communication Engineers

<p>A quadratic extension field (QEF) defined by F₁ = F_p[α]/(α²+1) is typically used for a supersingular isogeny Diffie-Hellman (SIDH). However, there exist other attractive QEFs F_i that result in a competitive or rather efficient performing the SIDH comparing with that of F₁. To exploit these QEFs without a time-consuming computation of the initial setting, the authors propose to convert existing parameter sets defined over F₁ to F_i by using an isomorphic map F₁ → F_i.</p>

DOI： 10.1587/transfun.2020TAL0002

Other Link： https://dblp.uni-trier.de/db/journals/ieiceta/ieiceta103.html#NanjoSKN20

Equivalent Keys of a Nonlinear Filter Generator Using a Power Residue Symbol.

Yuta Kodera, Yuki Taketa, Takuya Kusaka, Yasuyuki Nogami, Satoshi Uehara

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) 12231 LNCS 23 - 36 2020

Language：English Publishing type：Research paper (international conference proceedings) Publisher：SPRINGER INTERNATIONAL PUBLISHING AG

The existence of equivalent keys for a secret key is an inseparable topic in cryptography. Especially for pseudorandom number generators for cryptographic applications, equivalent keys are not only a specific pair of keys that generate the same sequence but includes the one that gives simply the phase-shifted sequence. In this paper, the authors especially focus on a kind of nonlinear filter generator (NLFG) defined by using a power residue calculation over an odd characteristic. Generally speaking, an evaluation of NLFGs has conducted by the randomness of the sequence itself and the security of keys. Though the previous evaluations of the randomness of the target NLFG are studied and proven theoretically, the security aspects as a cryptosystem still have not discussed. Therefore, this paper would like to begin a new security evaluation by focusing on the existence of equivalent keys for the NLFG. As a result, the authors first show that sequences generated by the NLFG are classified into several types of sequences depending on the choice of a certain parameter. Owing to this, it is found that there exist equivalent keys concerning the parameter corresponding to the above. At the same time, we show that the equivalent keys are possible to eliminate by giving the restriction on the corresponding parameter adequately.

DOI： 10.1007/978-3-030-58208-1_2

Other Link： https://dblp.uni-trier.de/db/conf/iwsec/iwsec2020.html#KoderaTKNU20

An Approach for Attacking Speck on Microcontroller with Correlation Power Analysis.

Jianjie Tang, Kengo Iokibe, Takuya Kusaka, Yasuyuki Nogami

Proceedings - 2020 8th International Symposium on Computing and Networking Workshops, CANDARW 2020 368 - 372 2020

Publishing type：Research paper (international conference proceedings) Publisher：IEEE

In recent years, some lightweight cipher algorithms for IoT devices have been proposed. These algorithms can be applied to a variety of IoT devices without occupying too much memory and power consumption, and compared to traditional ciphers, such as AES, these algorithms have higher efficiency. The Speck algorithm is a lightweight block cipher, proposed by the NSA in June 2013, and it is specifically optimized for IoT microcontrollers. A few previous studies have shown that the Speck algorithm can be attacked through power analysis. Based on Arduino Uno as the implementation platform of the Speck 128/128 algorithm, in this paper, we propose a method to attack the Speck 128/128 algorithm. Our experiment results have shown that when the attack point in the last round of Speck 128/128 XOR operation, the round key can be successfully recovered by the Correlation Power Analysis attack.

DOI： 10.1109/CANDARW51189.2020.00076

Other Link： https://dblp.uni-trier.de/db/conf/ic-nc/candar2020w.html#TangIKN20

Specific Congruence Classes of Integer Parameters for Generating BLS Curves for Fast Pairings.

Yuki Nanjo, Masaaki Shirase, Takuya Kusaka, Yasuyuki Nogami

Proceedings - 2020 8th International Symposium on Computing and Networking Workshops, CANDARW 2020 348 - 354 2020

Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Pairings are widely used for innovative protocols such as ID-based encryption and group signature authentication. According to the recent works, the Barreto-Lynn-Scott (BLS) family of pairing-friendly elliptic curves are suggested for the pairings at the various security levels. The BLS family has specific polynomial parameters in terms of an integer x0 for generating the pairing-friendly elliptic curves with various embedding degrees k, which are called BLS curves. The important fact is that one can find congruence classes of x0 which give rise to the BLS curves having a benefit of an efficient performing field arithmetics. However, except for the BLS curves with k = 24, such the practical usable congruence classes of x0 have not been provided at this time. In this manuscript, the authors provide the specific congruence classes generating the practical subfamilies of the BLS curves with k = 2i • 3 and 3j with arbitrary positive integers i and j.

DOI： 10.1109/CANDARW51189.2020.00073

Other Link： https://dblp.uni-trier.de/db/conf/ic-nc/candar2020w.html#NanjoSKN20

Improvement of Bit Distribution of Binary Sequence Generated by Alternative Trace Map Function.

Fatema Akhter, Tomoya Tatara, Yasuyuki Nogami, Takuya Kusaka, Nobuo Funabiki

Proceedings - 2020 8th International Symposium on Computing and Networking Workshops, CANDARW 2020 302 - 306 2020

Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Pseudo random binary sequences have been widely used in cryptographic applications due to their speedy construction, reproducibility and characteristics like true random sequence. Realization of modern cryptographic application and mathematical tools is inconceivable without random sequences. Previously, we proposed an alternative trace map function for generation of a pseudo random binary sequence that has long period, good correlation characteristics and high linear complexity that are attractive for security applications. However, it was found that the distribution of bits in sequence is not uniform which may lead to failure in randomness. In this paper, we propose a uniformization method using power of primitive root to improve uniformity of bit distribution in the sequence. Sequence of different lengths is generated using proposed sequence to verify the efficiency of the proposed uniformization method. By analyzing the bit distribution of generated sequences for different length of patterns, we show that the proposal achieves bit uniformity while maintaining randomness of the sequence.

DOI： 10.1109/CANDARW51189.2020.00066

Other Link： https://dblp.uni-trier.de/db/conf/ic-nc/candar2020w.html#AkhterTNKF20

Analysis of a method to eliminate fruitless cycles for Pollard's rho method with skew Frobenius mapping over a Barreto-Naehrig curve.

Hiromasa Miura, Rikuya Matsumura, Takuya Kusaka, Yasuyuki Nogami

Proceedings - 2020 8th International Symposium on Computing and Networking, CANDAR 2020 160 - 166 2020

Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Pollard’s rho method is one of the most efficient methods for solving elliptic curve discrete logarithm problem (ECDLP) in elliptic curve cryptography. Pollard’s rho method with skew Frobenius mapping can solve ECDLP over a Barreto-Naehrig (BN) curve efficiently. Pollard’s rho method may result in an unsolvable cycle called a fruitless cycle. When a random walk pass results in a fruitless cycle, the random walk pass must restart with a different starting point. However, an effective method for eliminating the fruitless cycle has been not proposed yet. This paper proposes a method for eliminating the fruitless cycle in Pollard’s rho method with skew Frobenius mapping. In addition, the authors apply the proposed method to a BN curve with 17-bit parameters and confirm the effectiveness.

DOI： 10.1109/CANDAR51075.2020.00029

Other Link： https://dblp.uni-trier.de/db/conf/ic-nc/candar2020.html#MiuraMKN20

A Study on Randomness of Sequences Obtained from Piecewise Logistic Map over Integers.

Sota Eguchi, Takeru Miyazaki, Shunsuke Araki, Satoshi Uehara, Yasuyuki Nogami

Proceedings of 2020 International Symposium on Information Theory and its Applications, ISITA 2020 451 - 455 2020

Publishing type：Research paper (international conference proceedings) Publisher：IEEE

We have been studying a design of the pseudo-random number generator by generated sequences with the logistic map over integers. Although it has already been presented that such properties of the generation sequences are good, the range of control parameters that satisfy the properties is not enough wide. To improve this problem, Wang et al. proposed the piecewise logistic map. It is method for increasing the range of control parameters that can generate good sequences for the pseudorandom number generator. However, it is not suitable for computer implementation, because it is defined over real numbers. In this paper, we will propose a piecewise logistic map over integers that uses an integer arithmetic and computers can calculate the map correctly. We will also show some results of numerical experiments for the sequences generated from this map.

Other Link： https://dblp.uni-trier.de/conf/isita/2020

A Parallel Blum-Micali Generator Based on the Gauss Periods.

Yuta Kodera, Tomoya Tatara, Takuya Kusaka, Yasuyuki Nogami, Satoshi Uehara

Proceedings of 2020 International Symposium on Information Theory and its Applications, ISITA 2020 447 - 450 2020

Publishing type：Research paper (international conference proceedings) Publisher：IEEE

In this paper, the authors propose an algorithm to generate a sequence of bits in parallel to enhance the generating performance of the Blum-Micali method which is for constructing a pseudorandom number generator. More precisely, since the classical definition needs to refer the previous state to generate the next bit, we modify the generation steps in an alternative way by introducing the feature of the Gauss periods. It gives us a unique representation of elements as if a primitive element generates those elements as the powers and this mechanism realizes the parallel algorithm. As a result, the generator achieves to mimic the main concept of the Blum-Micali method in parallel and it is thought to be secure if the discrete logarithm problem is hard to solve.

Other Link： https://dblp.uni-trier.de/conf/isita/2020

A Study on Binary Sequences Located in Hadamard Matrices of Order 2n.

Kasumi Nakano, Kako Takahashi, Satoshi Uehara, Takeru Miyazaki, Shunsuke Araki, Yasuyuki Nogami

Proceedings of 2020 International Symposium on Information Theory and its Applications, ISITA 2020 460 - 464 2020

Publishing type：Research paper (international conference proceedings) Publisher：IEEE

We show some properties of binary sequences located in Hadamard matrices of order 2〈n〉 represented by Sylvester's matrices. The Kronecker product is a method for expanding Hadamard matrix, and a set of sequences with orthogonal properties is extended by concatenation or interleaving. From these expanding methods and properties related to constructions, we discuss the increase of the set of orthogonal sequences. Finally, we show the characteristic polynomials of binary sequences located in Hadamard matrices of order 2〈n〉.

Other Link： https://dblp.uni-trier.de/conf/isita/2020

Mutual relationship between the neural network model and linear complexity for pseudorandom binary number sequence Reviewed

Yuki Taketa, Yuta Kodera, Shogo Tanida, Takuya Kusaka, Yasuyuki Nogami, Norikazu Takahashi, Satoshi Uehara

Proceedings of the Seventh International Symposium on Computing and Networking Workshops 394 - 400 2019.11

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE COMPUTER SOC

Machine learning (ML) technology has been getting popular in many applications where ML purposes to analyze or classify data, or predicting the phenomenon follows from the previous conditions, for example. However, the spread of ML technologies allows an attacker to use them into the attack for the sake of sniffing secret information. Since the randomness has been used for an inseparable part of the cryptographic applications to ensure the security, the resistance of a random sequence against analysis based on the ML technologies have to be required. The authors anticipate having the mutual relationship between the classical properties of the randomness, linear complexity (LC) in particular, and the structure of a neural network (NN), which is a class of ML. In this research, the authors find that the strength of each connection between nodes in the NN is relevant to the linear recurrence relation of the target sequence by observing parameters after complete learning. In other words, the difficulty of predicting the next bits from a given sequence would be discussed based on the LC of a sequence in most cases. The experimental results are introduced to clarify the black box in this research.

DOI： 10.1109/CANDARW.2019.00074

Other Link： https://dblp.uni-trier.de/db/conf/ic-nc/candar2019w.html#TaketaKTKNTU19

An Implementation and Evaluation of Pairing Library ELiPS for BLS Curve with Several Techniques

Yuto Takahashi, Yuki Nanjo, Takuya Kusaka, Yasuyuki Nogami, Tadaki Kanenari, Tomoya Tatara

34th International Technical Conference on Circuits/Systems, Computers and Communications, ITC-CSCC 2019 296 - 299 2019.6

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

In recent years, pairing encryption is receiving a lot of attention since it enables many innovative and multi-functional cryptographic applications based on pairing e.g. searchable encryption, broadcast encryption and so on. Pairing is a map from two additive rational point groups mathbb{G}{1}, mathrm{G}{2} to a multiplicative group mathbb{G}{3}, however, it requires complexity computation. Therefore, the author tries to develop a 128-bit security level pairing library ELiPS (Efficient Library for Pairing Systems) that incorporates various high-speed methods using BLS curves. As a result, scalar multiplications on mathbb{G}{1} and mathbb{G}{2}, exponentiation on mathbb{G}{3}, and optimal-ate pairing can be computed in 0.42[ms], 0.79[ms], 1.13[ms], and 3.12[ms], respectively.

DOI： 10.1109/ITC-CSCC.2019.8793376

A Comparison of Relic-toolkit and ELiPS Libraries for a Pairing-based Homomorphic Encryption

Tadaki Kanenari, Yuto Takahashi, Yuta Hashimoto, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami, Toru Nakanishi

34th International Technical Conference on Circuits/Systems, Computers and Communications, ITC-CSCC 2019 225 - 228 2019.6

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

In recent years, the number of companies are adopting cloud computing service for outsourcing is increasing. On the other hand, there are threats that are like falsification or leakage to data to be kept secret. Therefore, the technologies for managing encrypted data are the attractive topics in the cryptographic field. Among them, functional encryption which is constructed with pairing-based cryptography is closing to the practical stage because pairing operation is getting faster by the recent study of pairing. In addition, there are some pairing libraries which allow a user to introduce the pairing-based cryptography to their system. Nevertheless, they have some differences in several operations. In this paper, we reconstruct pairing-based homomorphic encryption by focusing on features of libraries and examine the performance evaluations of them.

DOI： 10.1109/ITC-CSCC.2019.8793446

Updating A Secret Key for MAC Implemented on CAN Using Broadcast Encryption Scheme

Tomoya Tatara, Hiroto Ogura, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

34th International Technical Conference on Circuits/Systems, Computers and Communications, ITC-CSCC 2019 275 - 278 2019.6

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

In recent years, CAN is spread widely as the in-vehicle network. However, CAN protocol does not guarantee the security for traffics against falsification and spoofing. Therefore, the MAC is required for CAN so as to communicate exactly. MAC is the countermeasure for falsification and spoofing using the secret key. The problem is a method of delivering the secret key securely. This paper proposes a method to update the secret key using broadcast encryption over a non-supersingular elliptic curve. The method is implemented on Raspberry Pi and experimentally find out to be able to update the secret key efficiently.

DOI： 10.1109/ITC-CSCC.2019.8793298

Analysis of the fruitless cycle of Pollard's rho method based attack for solving ECDLP over Barreto-Naehrig curves

Hiromasa Miura, Ken Ikuta, Sho Joichi, Takuya Kusaka, Yasuyuki Nogami

34th International Technical Conference on Circuits/Systems, Computers and Communications, ITC-CSCC 2019 237 - 240 2019.6

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

This paper focuses on the computational security of elliptic curve discrete logarithm (ECDLP), which can evaluate by an actual attack. The authors apply Pollard's rho method to a Barreto-Naehrig curve with minimum parameters for solving an ECDLP. An analysis of the structure for all combinations of a select of seed and starting points are given. Then, we propose the method for selecting a set of efficient seed points for a random walk for the rho method.

DOI： 10.1109/ITC-CSCC.2019.8793449

A Study on Low Level Quantizers for Block Turbo Decoding for Product Codes of Binary Linear Code

Shinichi Kageyama, Ken Ikuta, Takuya Kusaka, Yasuyuki Nogami

34th International Technical Conference on Circuits/Systems, Computers and Communications, ITC-CSCC 2019 233 - 236 2019.6

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Block Turbo Decodings (BTDs) with Soft-In Soft-Out (SISO) decodings for two dimensional product codes of linear codes can achieve good error performance, however, large computational complexity of the BTDs can be a problem. Therefore, to reduce the computational complexity, quantization methods can be employed for the BTDs by sacrificing the error performance. In this paper, a study on design for low level quantizers for the BTD with S1SO Ordered Statistics Decoding for product codes of binary linear code is shown. From simulation results for a 4-level quantizer, the authors propose a new 5-level quantizer. The proposed 5-level quantizer achieves better error performance than 4-level quantizer.

DOI： 10.1109/ITC-CSCC.2019.8793409

Boundary for the Linear Complexity of Well Balanced NTU

Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

2019 IEEE International Conference on Consumer Electronics - Taiwan, ICCE-TW 2019 2019.5

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

A pseudorandom sequence has an inseparable role in various types of security applications. Especially, the linear complexity of a sequence is a measure of the randomness that should be large for secureness of a system. This paper considers the boundary of linear complexity of a geometric sequence called NTU sequence which is generated with a uniformization technique.

DOI： 10.1109/ICCE-TW46550.2019.8992029

A Consideration on Generating Uniform Binary Sequence with High Linear Complexity

Tomoya Tatara, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

2019 IEEE International Conference on Consumer Electronics - Taiwan, ICCE-TW 2019 2019.5

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Pseudorandom sequences of having a uniform distribution of bit patterns and high linear complexity play a key role in many security applications. However, only a few pseudorandom sequence possesses both of these vital features. In this paper, the authors propose and evaluate a geometric sequence that has a uniform distribution and high linear complexity.

DOI： 10.1109/ICCE-TW46550.2019.8991711

NIST Statistical Test for Random Sequence Generated by Möbius Function

Fatema Akhter, Yuta Kodera, Yasuyuki Nogami, Takuya Kusaka

2019 IEEE International Conference on Consumer Electronics - Taiwan, ICCE-TW 2019 2019.5

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Random sequences play important roles in many security applications. Several security protocols have been developed based on random sequences. Hence, their generation is one of the topic of interests among many cryptographic researchers. Previously, the authors proposed a pseudo random sequence over odd characteristic field which is generated by applying primitive polynomial, trace function and Mobius function. Some important properties such as period, autocorrelation and cross-correlation have been presented in previous work. Randomness is generally measured by statistical tests and NIST Statistical Test Suite (NIST STS) is one of the most popular tools for randomness analysis. In this work, the randomness of the generated sequence is investigated by NIST STS.

DOI： 10.1109/ICCE-TW46550.2019.8992033

A Study on the Parameter Size of the Montgomery Trick for ECDLP Reviewed

Ken Ikuta, Sho Joichi, Kazuya Kobayashi, Md Al Amin Khandaker, Takuya Kusaka, Yasuyuki Nogami

Proceedings of 2018 International Symposium on Information Theory and Its Applications, ISITA 2018 623 - 627 2019.3

Publishing type：Research paper (international conference proceedings)

© 2018 IEICE. In this research, the choice of the parameter of the Montgomery trick in Pollard's Rho method to solve the elliptic curve discrete logarithm problem for Barreto-Naehrig (BN) curves is shown. The average number of generated rational points per unit time is chosen as a measure of the effectiveness of the choice of the parameter of the Montgomery trick. The results are derived from a sufficient number of experiments with several BN curves.

DOI： 10.23919/ISITA.2018.8664242

A Study on the Parameter of the Distinguished Point Method in Pollard's Rho Method for ECDLP Reviewed

Ken Ikuta, Sho Joichi, Kazuya Kobayashi, Md Al Amin Khandaker, Takuya Kusaka, Yasuyuki Nogami

Proceedings of 2018 International Symposium on Information Theory and Its Applications, ISITA 2018 628 - 632 2019.3

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

© 2018 IEICE. In this research, the choice of the parameter for a method to generate distinguished rational points in Pollard's Rho method to solve the elliptic curve discrete logarithm problem for Barreto-Naehrig (BN) curves is shown. The structures of random walk paths are confirmed by experiments for several BN curves. From the results, the authors clarify the conditions in which the Rho method does not stop during an attack, and the authors also show an indication for the choice of the parameter for the method to generate distinguished points with large bits of ECDLP.

DOI： 10.23919/ISITA.2018.8664405

Other Link： https://dblp.uni-trier.de/db/conf/isita/isita2018.html#IkutaJKKKN18a

Development of Practicum in Cryptographic Hard-ware Security Using Commercial Microcontroller Module

Kengo Iokibe, Yoshinori Uetake, Toshiaki Teshima, Akihiro Sanada, Yasuyuki Nogami

Computer Software 36 ( 1 ) 30 - 36 2019

Language：Japanese Publisher：Japan Society for Software Science and Technology

The authors developed a practicum in the cryptographic technology, an indispensable technology to guar- A ntee information security in the upcoming IoT era. The practicum is composed of a lecture in a part of algebra and discrete mathematics that founds modern cryptography, hardware implementation of crypto-graphic algorithms, and the side-channel attack on cryptographic hardware. It aimed not only that students learned textbook knowledge of cryptographic algorithms but also they developed their knowledge of imple-menting cryptographic algorithms considering the threat of the side-channel attack through their experience implementing the algorithms on a commercial hardware and attacking them. The practicum was offered to the third- A nd fourth-year students, and most of them achieved the required goal of the practicum. They also realized improving their practical skills in the cryptographic technology according to their responses to the questionnaire.

DOI： 10.11309/jssst.36.30

Properties of Knuth's Quadratic Congruential Sequences with Modulus m = 2W p.

Takeru Miyazaki, Shunsuke Araki, Kohei Kawase, Satoshi Uehara, Yasuyuki Nogami

2019 9th International Workshop on Signal Design and its Applications in Communications, IWSDA 2019 1 - 5 2019

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

In this paper, we give some important characteristics of Knuth's quadratic congruential sequences with a particular modulus as a pseudorandom number generator. For modulus m = 2W p where p is an odd prime, we derive some periodic relations of the sequence by using analysis results shown by Iwasaki and Umeno for their one-stroke polynomial. Accordingly, we have theoretical analysis for randomness of these sequences and evaluate pseudorandom number outputs by these sequences by the NIST statistical tests.

DOI： 10.1109/IWSDA46143.2019.8966096

Other Link： https://dblp.uni-trier.de/db/conf/iwsda/iwsda2019.html#MiyazakiAKUN19

Recognition of parking spaces on dry and wet road surfaces using received light intensity of laser for ultra small EVs.

Tatsuya Kamiyama, Shoichi Maeyama, Kazuya Okawa, Keigo Watanabe, Yasuyuki Nogami

Proceedings of the 2019 IEEE/SICE International Symposium on System Integration, SII 2019 494 - 501 2019

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Research and development of automatic driving technology has been actively conducted in recent years. Under this background, it is considered that the car parking problem is expected to be developed for supporting drivers to complete automatic parking. Many parking lots in an urban area prepare parking spaces with asphalt road surface drawn by white paint. Research to recognize parking spaces using camera images has been conducted so far. However, camera images are known to be not robust to environmental conditions such as nighttime and a backlight. Therefore, a method of recognizing parking spaces is proposed so that it can be used even when the use time is day or night, irrespective of whether the road surface is dry or wet. In the proposed method, the road surface is classified using the statistical model of the received light intensity value of laser range scanner. Then, the target parking position is estimated by Hough transformation.

DOI： 10.1109/SII.2019.8700344

Other Link： https://dblp.uni-trier.de/db/conf/sii/sii2019.html#KamiyamaMOWN19

Decomposing the Inverse of a Masked Vector in an Isomorphic Galois Field for Perfectly Masked S-Box.

Yuta Kodera, Yuki Taketa, Takuya Kusaka, Yasuyuki Nogami

Proceedings - 2019 7th International Symposium on Computing and Networking, CANDAR 2019 157 - 163 2019

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE COMPUTER SOC

The increment of opportunities for using machine learning (ML) technologies has brought a new threat to cryptosystems. As a remarkable example, the ML technologies have gradually been employed in the side-channel attack (SCA) to obtain sensitive information. In this paper, the authors focus on the structure of a masked S-Box in AES, which aims to equip the SCA resistance even for the attacks using the ML technologies. More precisely, this paper analyzes the mathematical structure of the inverse operation over F(24)2 which is an isomorphic field for obtaining efficient arithmetic for the AES, so that all functions in the encryption scheme can handle masked data as it is. The mathematical structure is realized by introducing several mathematical tools such as the Gauss periods and the Itoh-Tsujii inversion algorithm, and as a result, we clarified the factors of the coefficients of A-1 for an element A F(24)2. It enables us to generate the corresponding element directly, which allows canceling the mask even after processing the SubBytes.

DOI： 10.1109/CANDAR.2019.00027

Other Link： https://dblp.uni-trier.de/db/conf/ic-nc/candar2019.html#KoderaTKN19

A Construction of a Keyword Search to Allow Partial Matching with a Block Cipher

Yuta Kodera, Minoru Kuribayashi, Takuya Kusaka, Yasuyuki Nogami

Information Security Applications 11402 LNCS 241 - 252 2019

Publishing type：Part of collection (book) Publisher：Springer International Publishing

This paper considers a new construction of a keyword search including partial matching on an encrypted document. Typically, an index-based searchable symmetric encryption has been investigated. However, it makes a partial keyword matching difficult without a designated trapdoor. Thus, our objective is to propose a keyword search scheme which enables us to search a part of a keyword only by building trapdoors of each original keyword. The main idea is to insulate each character of a keyword into a bitstream of the sequence generated by a pseudorandom number generator. It achieves a partial search by giving a restriction on the length of a keyword.

DOI： 10.1007/978-3-030-17982-3_19

Distribution of Bit Patterns in Binary Sequence Generated Over Sub Extension Field

Md. Arshad Ali, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami, Satoshi Uehara, Robert H. Morelos-Zaragoza

Advances in Science, Technology and Engineering Systems Journal 4 ( 2 ) 370 - 379 2019

Publishing type：Research paper (scientific journal) Publisher：ASTES Journal

The distribution of bit patterns is an important measure to check the randomness of a sequence. The authors of this paper observed this crucial property in a binary sequence which generated by using a primitive polynomial, trace function, and Legendre symbol defined over the sub extension field. The authors create a new dimension in the sequence generation research area by considering the sub extension field, whereas all our previous works are focused in the prime field. In terms of distribution of bit patterns property, this research work has notable outcomes more specifically the binary sequence (defined over the sub extension field) holds much better (close to uniform) bit distribution than the previous binary sequence (defined over the prime field). Furthermore, the authors theoretically proved the distribution of bit property in this paper.

DOI： 10.25046/aj040246

Efficient ate-based pairing over the attractive classes of BN curves Reviewed

Yuki Nanjo, Md Al Amin Khandaker, Masaaki Shirase, Takuya Kusaka, Yasuyuki Nogami

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) 11402 LNCS 55 - 67 2019

Publishing type：Research paper (international conference proceedings)

© Springer Nature Switzerland AG 2019. This paper proposes two attractive classes of Barreto-Naehrig curve for ate-based pairing by imposing certain condition χ ≡ 7, 11 (mod 12) on the integer χ that parameterizes the curve settings. The restriction results in an unparalleled way to determine a BN curve, its twisted curve coefficients, and obvious generator points. The proposed χ ≡ 11 (mod 12) are found to be more efficient than χ ≡ 7 (mod 12) together with pseudo 8-sparse multiplication in Miller's algorithm. The authors also provide comparative implementations for the proposal.

DOI： 10.1007/978-3-030-17982-3_5

A Preliminary Study on Methods to Eliminate Short Fruitless Cycles for Pollard's Rho Method for ECDLP over BN Curves.

Hiromasa Miura, Rikuya Matsumura, Ken Ikuta, Sho Joichi, Takuya Kusaka, Yasuyuki Nogami

Proceedings - 2019 7th International Symposium on Computing and Networking Workshops, CANDARW 2019 353 - 359 2019

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE COMPUTER SOC

This paper discusses the conditions of fruitless cycles for Pollard's rho method with skew Frobenius mapping for elliptic curve discrete logarithm problem (ECDLP) over a Barreto-Naehrig (BN) curve. When a random walk pass achieves a fruitless cycle, the random walk pass must restart with a different starting point. There can be several methods to eliminate fruitless cycles of short lengths for BN curves based on the construction of a random walk table. Therefore, in this research, the authors give an analysis of the previous methods for a BN curve of order 349 with the mapping with experiments. The results show that several fruitless cycles of length two and three cannot be eliminated by the previous methods. The authors investigated the reason for degradation. As a result of the analysis, a new condition where a part of the fruitless cycles of any lengths occur is derived, and a new method to eliminate the fruitless cycles is proposed.

DOI： 10.1109/CANDARW.2019.00068

Other Link： https://dblp.uni-trier.de/db/conf/ic-nc/candar2019w.html#MiuraMIJKN19

Evaluating a Side-Channel Resistance against Order 4 Rational Points in Arduino Cryptography Library.

Keiji Yoshimoto, Yoshinori Uetake, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

Proceedings - 2019 7th International Symposium on Computing and Networking, CANDAR 2019 245 - 250 2019

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE COMPUTER SOC

Curve25519 has been used in various security protocols for its efficiency and rapidity. However, Curve25519 is known to have rational points whose orders are 2, 4, and 8. In this research, the authors focus on rational points of order 4 and demonstrate a side-channel attack (SCA) against a scalar multiplication algorithm for Curve25519. It purposes to compare two scalar multiplication algorithms in terms of the difficulty of estimating a secret key via the SCA, where the algorithms are differentiated whether it uses a conditional swap function or not. Furthermore, we examine to attack an open-source library for Arduino UNO which includes the scalar multiplication algorithm using a conditional swap function in practice. Since this library takes a countermeasure against the SCA during key exchange, we can use this secure library as a protocol tool. However, there is a threat when we implement a scalar multiplication by using some functions in this library without considering the SCA.

DOI： 10.1109/CANDAR.2019.00040

Other Link： https://dblp.uni-trier.de/db/conf/ic-nc/candar2019.html#YoshimotoUKKN19

A Side-Channel Attack Using Order 8 Rational Points against Curve25519 on an 8-Bit Microcontroller.

Yoshinori Uetake, Keiji Yoshimoto, Yuta Kodera, Leo Weissbart, Takuya Kusaka, Yasuyuki Nogami

Proceedings - 2019 7th International Symposium on Computing and Networking, CANDAR 2019 225 - 231 2019

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE COMPUTER SOC

Among the increasing evolution of IoT devices, practical applications need reliable secure protocols to communicate with each other. A major issue for modern cryptosystems is an implementation of secure and trustworthy mechanisms to rely on. A side-channel attack against these cryptosystems may overturn the guarantee of security against conventional cyber-attacks. Elliptic curve cryptography is public-key cryptography based on elliptic curves, and one of the well-known curves is Curve25519 which is used for TLS protocols as a recommended curve. This curve is mainly implemented on limited resource devices such as microcontrollers. However, this curve poses a weakness for low-order points during a Diffie-Hellman key exchange is employed. This research demonstrates possible exploitation of a threat of order 8 rational points of Curve25519 and shows results of the side-channel attacks using order 8 rational points on an embedded system. The results indicate the order 8 rational points might be applied to key extraction as attacker sides.

DOI： 10.1109/CANDAR.2019.00037

Other Link： https://dblp.uni-trier.de/db/conf/ic-nc/candar2019.html#UetakeYKWKN19

A Performance Analysis and Evaluation of SIDH with Implementation-Friendly Classes of Quadratic Extension Fields.

Yuki Nanjo, Masaaki Shirase, Takuya Kusaka, Yasuyuki Nogami

Proceedings - 2019 7th International Symposium on Computing and Networking, CANDAR 2019 178 - 184 2019

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE COMPUTER SOC

It is well-known that the class of binomial extension fields is widely used to construct quadratic extension fields (QEFs) of supersingular isogeny Diffie-Hellman (SIDH) key exchange protocol. There is a possibility to improve the performance of SIDH by employing other classes of QEFs, i.e., extension fields with normal basis and all-one polynomial extension fields, without sacrificing the range of primes. In this paper, the authors confirm that the applicability of the other classes for SIDH and evaluate the computational complexity of the large-degree isogenies required for SIDH. The results of the experiments show that the performances with the classes are comparable to the QEF with a binomial x2+1.

DOI： 10.1109/CANDAR.2019.00030

Other Link： https://dblp.uni-trier.de/db/conf/ic-nc/candar2019.html#NanjoSKN19

Relations Between Evaluations of NIST Tests and Lyapunov Exponents of Sequences Generated by the Piecewise Logistic Map over Integers.

Sota Eguchi, Takeru Miyazaki, Shunsuke Araki, Satoshi Uehara, Yasuyuki Nogami

2019 9th International Workshop on Signal Design and its Applications in Communications, IWSDA 2019 1 - 5 2019

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

In this paper, we focus on binary sequences obtained from piecewise logistic map over integers, and show the relation between the Lyapunov exponents of the maps and results of the NIST tests for the sequences. When the Lyapunov exponent is a negative value, we confirm that the branch diagram is sparse and the bit occurrence rate is also greatly biased. We also give a sample of that the positive/negative signs of the Lyapunov exponents mostly coincide on the evaluations of the NIST tests. From the branching diagram of the piecewise logistic map, we can moreover find that there are many good pseudorandom sequences generated by the individual control parameters of the map.

DOI： 10.1109/IWSDA46143.2019.8966109

Other Link： https://dblp.uni-trier.de/db/conf/iwsda/iwsda2019.html#EguchiMAUN19

An Analysis of Computational Complexity of Low Level Quantizers for Block Turbo Decoding for Product Codes of Binary Linear Code.

Shinichi Kageyama, Ken Ikuta, Yuki Nanjo, Yuta Kodera, Takuya Kusaka, Yasuyuki Nogami

Proceedings - 2019 7th International Symposium on Computing and Networking Workshops, CANDARW 2019 425 - 429 2019

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE COMPUTER SOC

Block Turbo Decodings (BTDs) with Soft-In SoftOut (SISO) decodings for two-dimensional product codes of linear codes can achieve good error performance. However, since large computational complexity of the BTDs can be a problem, a method which can reduce average computational complexity is needed. In this research, the authors focus on an early termination condition as the method for the reduction on the computational complexity. From the tendency of the output of SISO ordered statistics decoding, a condition is proposed. Based on simulation results for the two-dimensional product code of the (32,26,4) Reed-Muller code, analysis on a parameter of the condition are given. The results show that the computational complexity can be reduced to more than one fourth at the SN ratios higher than 7[dB] of Eb/No without degradation on error performance by choosing an appropriate parameter.

DOI： 10.1109/CANDARW.2019.00080

Other Link： https://dblp.uni-trier.de/db/conf/ic-nc/candar2019w.html#KageyamaINKKN19

Binary Sequence Generated by Alternative Trace Map Function and Its Properties.

Fatema Akhter, Yasuyuki Nogami, Takuya Kusaka, Yuki Taketa, Tomoya Tatara

Proceedings - 2019 7th International Symposium on Computing and Networking Workshops, CANDARW 2019 408 - 411 2019

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE COMPUTER SOC

In this paper, we propose a new pseudo random binary sequence generated from a primitive polynomial over an extension field. The sequence has maximum period and high linear complexity suitable for security applications. While generation, a new mapping function is proposed which is faster than conventional trace map and translates extension field elements to prime field elements. The output of mapping function is a p-ary sequence with elements 0~ (p-1) that is balanced in pattern distribution and has ideal autocorrelation. Then, a binarization method is utilized to derive binary sequence from p-ary sequence. Period, autocorrelation, linear complexity and computation time of the proposed sequence are studied and experimental results are presented. Finally, the efficiency of the proposal is verified by comparing with existing sequences in terms of period, linear complexity and generation time for sequences of different length.

DOI： 10.1109/CANDARW.2019.00076

Other Link： https://dblp.uni-trier.de/db/conf/ic-nc/candar2019w.html#AkhterNKTT19

Well Balanced Multi-value Sequence and its Properties over Odd Characteristic Field

M. Arshad Ali, Yuta Kodera, M. Fazle Rabbi, Takuya Kusaka, Yasuyuki Nogami, Satoshi Uehara, Robert H. Morelos-Zaragoza

Advances in Science, Technology and Engineering Systems 4 ( 4 ) 188 - 196 2019

Publishing type：Research paper (scientific journal)

The authors propose a well balanced multi-value sequence (including a binary sequence). All the sequence coefficients (except the zero) appear almost the same in number, thus, the proposed sequence is so called the well balanced sequence. This paper experimentally describes some prominent features regarding a sequence, for instance, its period, autocorrelation, and cross-correlation. The value of the autocorrelation and cross-correlation can be explicitly given by the authors formulated theorems. In addition, to ensure the usability of the proposed multi-value sequence, the authors introduce its flexibility by making it a binary sequence. Furthermore, this paper also introduces a comparison in terms of the linear complexity and distribution of bit patterns properties with their previous works. According to the comparison results, the proposed sequence holds better properties compared to our previous sequence.

DOI： 10.25046/aj040423

Multi-Value Sequence Generated over Sub Extension Field and Its Properties Reviewed

Md. Arshad Ali, Yuta Kodera, Takuya Kusaka, Satoshi Uehara, Yasuyuki Nogami, Robert H. Morelos-Zaragoza

Journal of Information Security 10 ( 03 ) 130 - 154 2019

A Comparative Implementation of GLV Technique on KSS-16 Curve Reviewed

Md Al Amin Khandaker, Yuki Nanjo, Takuya Kusaka, Yasuyuki Nogami

Proceedings - 2018 6th International Symposium on Computing and Networking, CANDAR 2018 106 - 112 2018.12

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

© 2018 IEEE. Pairing-based protocols are getting popular in many cryptographic applications. Pairing algorithms involve computations on elements in all three pairing groups, G 1 , G 2 and G 3 ; however, most protocols usually require additional scalar multiplication and exponentiation in any of these three groups. The Gallant-Lambert-Vanstone (GLV) method is an elegant technique to accelerate the scalar multiplication which can reduce the number of elliptic curve doubling by using Straus-Shamir simultaneous multi-scalar multiplication technique. However, efficiently computable endomorphisms are required to apply GLV for the elliptic curves. This paper shows the GLV technique by deriving efficiently computable endomorphism for Kachisa-Schaefer-Scott (KSS) curve defined over degree 16 extension field. In addition, the authors show explicit formulas to compute the GLV method together with Straus-Shamir simultaneous multi-scalar multiplication technique for 2, 4 and 8 dimensions in G 2 group. The comparative implementation shows that dimension 4 gives faster computational time than dimension 8 and 2.

DOI： 10.1109/CANDAR.2018.00021

Other Link： https://dblp.uni-trier.de/db/conf/ic-nc/candar2018.html#KhandakerNKN18

Consideration of efficient pairing applying two construction methods of extension fields Reviewed

Yuki Nanjo, Md Al Amin Khandaker, Takuya Kusaka, Yasuyuki Nogami

Proceedings - 2018 6th International Symposium on Computing and Networking Workshops, CANDARW 2018 445 - 451 2018.12

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

© 2018 IEEE. In recent years, many innovative cryptography protocols based on the pairing. Finding out an efficient extension field construction is one of the prerequisites for a practical pairing implementation. The author tries to find an elegant extension field construction which will result in efficient pairing over Barreto-Naehrig (BN) curve. In this paper, two construction methods are considered for extension field of degree 12, and one of them results in an efficient exponentiation and the other enables to compute faster Miller loop than the former one. Therefore, a method which uses a basis conversion matrix between the two extension field is proposed. In comparison to the performance of Aranha et al.'s towering, the proposed implementation results in the efficient exponentiation in a multiplicative group, although pairing cost is slightly increased.

DOI： 10.1109/CANDARW.2018.00087

Other Link： https://dblp.uni-trier.de/db/conf/ic-nc/candar2018w.html#NanjoKKN18

Identification of Dominant ICs for Electromagnetic Emission by Using Noise Source Amplitude Modulation and Correlation Analysis

Shimpei Yoshino, Chiaki Ishida, Kengo Iokibe, Yoshitaka Toyota, Yasuyuki Nogami

IEEE International Symposium on Electromagnetic Compatibility 2018-August 439 - 444 2018.10

Publishing type：Research paper (international conference proceedings)

To identify semiconductor devices that are dominant noise sources at low cost in order to reduce electromagnetic interference (EMI), we propose a method based on a noise source amplitude modulation technique and correlation analysis (NSM-CA). In this study, we applied the NSM-CA method to a printed circuit board (PCB) with multiple integrated circuits (ICs) and identified ICs dominantly contributing to EM emission. The switching currents produced in three of the ICs were modulated in amplitude with three different modulation signals. The noise source amplitude modulation was implemented in an FPGA, mounted on a PCB, by using three pseudorandom binary sequences (PRBSs) as modulation signals. During the modulations, EM emission was measured at frequencies where the emission exceeded the limit of EMI regulation. The temporal variation in the measured emission was correlated with each of the PRBSs. The ranking of the contributions of the ICs to the emission was determined by means of the resultant correlation coefficients. According to the ranking, the dominant ICs to which a combination of EMI reduction techniques should be primarily applied were identified. Moreover, we applied an EMI reduction technique to the dominant ICs and found a larger reduction in emission than when the technique was applied to low priority ICs.

DOI： 10.1109/EMCEurope.2018.8485011

Randomness of Binary Sequences with Long Period by Combining M-Sequence and Knuth's Quadratic Congruential Sequence

Kohei Kawase, Takeru Miyazaki, Shunsuke Araki, Satoshi Uehara, Yasuyuki Nogami

2018 IEEE International Conference on Consumer Electronics-Taiwan, ICCE-TW 2018 2018.8

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Cryptography is one of the most important elements on the information security. In this paper, we propose a construction method of a long-period binary sequence with good randomness which plays an important role in cryptography. We generate the sequence by combining two types of binary sequences; one is the m-sequence and the other is a quadratic congruential sequence proposed by Knuth. It is well known that the m-sequence has good statistical properties, and Knuth's method can generate a long period sequence. However, both of these sequences cannot pass the almost NIST statistical tests by stand-alone. We derive a binary sequence combining these two sequences. In addition; we also consider the reasons why the proposed sequence has good randomness properties.

DOI： 10.1109/ICCE-China.2018.8448725

A Construction Method of a Binary Sequence Using a Logistic Map over F<inf>p</inf> for IoT Device

Takato Nagano, Takeru Mitazakit, Satoshi Uehara, Yasuyuki Nogami

2018 IEEE International Conference on Consumer Electronics-Taiwan, ICCE-TW 2018 2018.8

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

With the spread of loT, it is necessary to implement of encryption and decryption in order to secure information handled by each device. We focus on generating a sequence having random number property for a microcomputer with a short available bit length. We propose binary sequences combined from two random number sequences of 16 bits or less, one is an interleaving operation and the other is a combination by using a Gray code. In this paper, we discussed about how to generate a sequence and random number properties.

DOI： 10.1109/ICCE-China.2018.8448887

A Consideration of an Efficient Arithmetic over the Extension Field of Degree 3 for Elliptic Curve Pairing Cryptography

Xin Li, Yuta Kodera, Yoshinori Uetake, Takuya Kusaka, Yasuyuki Nogami

2018 IEEE International Conference on Consumer Electronics-Taiwan, ICCE-TW 2018 2018.8

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

This paper presents an efficient arithmetic in extension field based on Cyclic Vector Multiplication Algorithm that reduces calculation costs over cubic extension for elliptic curve pairing cryptography. In addition, we evaluate the calculation costs compared to Karatsuba-based method.

DOI： 10.1109/ICCE-China.2018.8448573

An extended generalized minimum distance decoding for binary linear codes on a 4-level quantization over an AWGN channel Reviewed

Shunsuke Ueda, Ken Ikuta, Takuya Kusaka, Md Al Amin Khandaker, Md Arshad Ali, Yasuyuki Nogami

IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences E101A ( 8 ) 1235 - 1244 2018.8

Language：English Publishing type：Research paper (scientific journal) Publisher：IEICE-INST ELECTRONICS INFORMATION COMMUNICATIONS ENG

Copyright © 2018 The Institute of Electronics, Information and Communication Engineers. Generalized Minimum Distance (GMD) decoding is a well-known soft-decision decoding for linear codes. Previous research on GMD decoding focused mainly on unquantized AWGN channels with BPSK signaling for binary linear codes. In this paper, a study on the design of a 4-level uniform quantizer for GMD decoding is given. In addition, an extended version of a GMD decoding algorithm for a 4-level quantizer is proposed, and the effectiveness of the proposed decoding is shown by simulation.

DOI： 10.1587/transfun.E101.A.1235

Other Link： https://dblp.uni-trier.de/db/journals/ieicet/ieicet101a.html#UedaIKKAN18

An ECC Implementation with a Twisted Montgomery Curve over Fq32 on an 8-Bit Microcontroller Reviewed

Yuta Hashimoto, Md Al Amin Khandaker, Yuta Kodera, Taehwan Park, Takuya Kusaka, Howon Kim, Yasuyuki Nogami

Proceedings - 2017 5th International Symposium on Computing and Networking, CANDAR 2017 2018-January 445 - 450 2018.4

Publishing type：Research paper (international conference proceedings)

© 2017 IEEE. The security of Internet of Things (IoT) devices is one of the most important problems. The processing ability of IoT devices is limited, therefore a more light-weight and secure cryptography is necessary. This paper shows the implementation of 256-bit Elliptic Curve Cryptography (ECC) on an 8-bit microcontroller by applying towering for extension field of degree 32. The authors use a twisted Montgomery curve with a Montgomery ladder which enables fast calculations without inverse elements. In addition to that, this implementation is considered resistant to the Side Channel Attack (SCA) since it applies the Montgomery ladder for the scalar multiplication (SCM). This ECC implementation on Arduino UNO, an 8-bit microcontroller board, takes 3 seconds for an SCM which can be made faster by careful assembly implementation.

DOI： 10.1109/CANDAR.2017.90

Distribution of Digit Patterns in Multi-Value Sequence over the Odd Characteristic Field. Reviewed

Yuta Kodera, Takeru Miyazaki, Md. Al-Amin Khandaker, Ali Md. Arshad, Takuya Kusaka, Yasuyuki Nogami, Satoshi Uehara

IEICE Transactions 101-A ( 9 ) 1525 - 1536 2018

Language：English Publishing type：Research paper (scientific journal) Publisher：IEICE-INST ELECTRONICS INFORMATION COMMUNICATIONS ENG

The authors have proposed a multi-value sequence called an NTU sequence which is generated by a trace function and the Legendre symbol over a finite field. Most of the properties for NTU sequence such as period, linear complexity, autocorrelation, and cross-correlation have been theoretically shown in our previous work. However, the distribution of digit patterns, which is one of the most important features for security applications, has not been shown yet. In this paper, the distribution has been formulated with a theoretic proof by focusing on the number of 0's contained in the digit pattern.

DOI： 10.1587/transfun.E101.A.1525

A Study on the Parameter Size of the Montgomery Trick for ECDLP. Reviewed

Ken Ikuta, Sho Joichi, Kazuya Kobayashi, Md. Al-Amin Khandaker, Takuya Kusaka, Yasuyuki Nogami

Proceedings of 2018 International Symposium on Information Theory and Its Applications, ISITA 2018 623 - 627 2018

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

In this research, the choice of the parameter of the Montgomery trick in Pollard's Rho method to solve the elliptic curve discrete logarithm problem for Barreto-Naehrig (BN) curves is shown. The average number of generated rational points per unit time is chosen as a measure of the effectiveness of the choice of the parameter of the Montgomery trick. The results are derived from a sufficient number of experiments with several BN curves.

DOI： 10.23919/ISITA.2018.8664242

Efficient Parallel Simeck Encryp tion with GPGPU and OpenCL Reviewed

Park, Taehwan, Seo, Hwajeong, Khandaker, Md. Al-Amin, Nogami, Yasuyuki, Kim, Howon

2018 IEEE INTERNATIONAL CONFERENCE ON CONSUMER ELECTRONICS-TAIWAN (ICCE-TW) 2018

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Simeck family block cipher was proposed in CHES 2015. It is a kind of lightweight block cipher provide various block and key size. In this paper, we proposed efficient parallel implementation of Simeck with GPGPU by using OpenCL and present performance of Simeck parallel implementation.

Efficient Pairing-Based Cryptography on Raspberry Pi. Reviewed

Yuki Nanjo, Md. Al-Amin Khandaker, Takuya Kusaka, Yasuyuki Nogami

JCM 13 ( 2 ) 88 - 93 2018

Publishing type：Research paper (scientific journal)

In the age of IoT, pairing-based cryptography (PBC) can play an important role as a public key cryptography since it enables several innovative protocols such as anonymous encryption, certificate less authentication and so on. However, due to the computation complexity, PBC is often regarded computationally unfeasible for IoT devices. Therefore, this paper tries to push that limit by efficiently calculating pairing operation together with scalar multiplication and exponentiation over Barreto-Naehrig (BN) curve by applying the state of art techniques. In addition to the theoretic explanation of the applied techniques, the authors also show a high-level implementation using C programming on a raspberry pi model 3 B, instead of hardware specific implementation.

DOI： 10.12720/jcm.13.2.88-93

Advanced Searchable Encryption: Keyword Search for Matrix-Type Storage. Reviewed

Yuta Kodera, Minoru Kuribayashi, Takuya Kusaka, Yasuyuki Nogami

Sixth International Symposium on Computing and Networking, CANDAR Workshops 2018, Takayama, Japan, November 27-30, 2018 292 - 297 2018

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE Computer Society

The recent development of IoT technologies and cloud storages, many types of information including private information have been gradually outsourced. For such a situation, new convenient functionalities such as arithmetic and keyword search on ciphertexts are required to allow users to retrieve information without leaking any information. Especially, searchable encryptions have been paid much attention to realize a keyword search on an encrypted domain. In addition, an architecture of searchable symmetric encryption (SSE) is a suitable and efficient solution for data outsourcing. In this paper, we focus on an SSE scheme which employs a secure index for searching a keyword with optimal search time. In the conventional studies, it has been widely considered that the scheme searches whether a queried keyword is contained in encrypted documents. On the other hand, we additionally take into account the location of a queried keyword in documents by targeting a matrix-type data format. It enables a manager to search personal information listed per line or column in CSV-like format data.

DOI： 10.1109/CANDARW.2018.00061

Linear Complexity of Geometric Sequences Defined by Cyclotomic Classes and Balanced Binary Sequences Constructed by the Geometric Sequences. Reviewed

Kazuyoshi Tsuchiya, Chiaki Ogawa, Yasuyuki Nogami, Satoshi Uehara

CoRR abs/1809.04957 2018

Side-Channel Attack using Order 4 Element against Curve25519 on ATmega328P.

Yoshinori Uetake, Akihiro Sanada, Takuya Kusaka, Yasuyuki Nogami, Leo Weissbart, Sylvain Duquesne

Proceedings of 2018 International Symposium on Information Theory and Its Applications, ISITA 2018 618 - 622 2018

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

With the matter of secure communication between devices, and especially for IoT devices, more and more applications need trustful protocols to communicate using public key cryptography. Elliptic curve cryptography is nowadays a very secure and efficient public key cryptography method. One of the most recent and secure curve is Curve25519 and one of its failure is attack on low-order elements during a Diffie-Hellman key exchange. This document demonstrates that an attack using an order 4 point is possible on an embedded system with a simple power analysis, pointing out every IoT using Curve255119 as a cryptographic method, a potential target to side-channel attacks.

DOI： 10.23919/ISITA.2018.8664293

Other Link： https://dblp.uni-trier.de/db/conf/isita/isita2018.html#UetakeSKNWD18

Design of a Message Authentication Protocol for CAN FD Based on Chaskey Lightweight MAC.

Guillaume Carel, Ryunosuke Isshiki, Takuya Kusaka, Yasuyuki Nogami, Shunsuke Araki

Proceedings - 2018 6th International Symposium on Computing and Networking Workshops, CANDARW 2018 267 - 271 2018

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

The development of the autonomous driving and the connected services severely increase security threats on old automotive technologies that are still present on-board vehicles since the long incremental process were employed. For example, the Controller Area Network (CAN) bus, which was standardized in 1991, can be connected to modern Linux embedded computer nodes where evil attacker might be able to exploit a vulnerability on the nodes. However, it is not easy to implement countermeasures on the CAN bus, since the strict requirements and limited performances of CAN specification. That is one of the major reason for the new standard CAN Flexible Data-rate (CAN FD) has been released in 2012 by Bosch to fill the gap between these challenges and the CAN protocol. In this research, a new simple authentication protocol for CAN FD is proposed, and the protocol is evaluated by experiments. The results show that the proposed protocol prevents infected nodes from usurping identity of a critical node and forge messages, with practical computational complexity on modern low-power embedding boards.

DOI： 10.1109/CANDARW.2018.00057

Other Link： https://dblp.uni-trier.de/db/conf/ic-nc/candar2018w.html#CarelIKNA18

A Study on the Parameter of the Distinguished Point Method in Pollard's Rho Method for ECDLP. Reviewed

Ken Ikuta, Sho Joichi, Kazuya Kobayashi, Md. Al-Amin Khandaker, Takuya Kusaka, Yasuyuki Nogami

Proceedings of 2018 International Symposium on Information Theory and Its Applications, ISITA 2018 628 - 632 2018

Publishing type：Research paper (international conference proceedings) Publisher：IEEE

In this research, the choice of the parameter for a method to generate distinguished rational points in Pollard's Rho method to solve the elliptic curve discrete logarithm problem for Barreto-Naehrig (BN) curves is shown. The structures of random walk paths are confirmed by experiments for several BN curves. From the results, the authors clarify the conditions in which the Rho method does not stop during an attack, and the authors also show an indication for the choice of the parameter for the method to generate distinguished points with large bits of ECDLP.

DOI： 10.23919/ISITA.2018.8664405

Development of an Omnidirectional Cooperative Transportation System Using Two Mobile Robots with Two Independently Driven Wheels.

Masanari Morishita, Shoichi Maeyama, Yasuyuki Nogami, Keigo Watanabe

Proceedings - 2018 IEEE International Conference on Systems, Man, and Cybernetics, SMC 2018 2018 1711 - 1715 2018

Language：English Publisher：IEEE

In recent years, with the increase in physical distribution volume, unmanned transportation robots are expected as an alternative means of transporting baggage in factories and warehouses. The development of a control system for cooperative transportation by multiple robots is important when the objects to be transported are long and exceed the size and the weight limit. From this, we develop a control system for cooperative transportation using two robots independently driven by two wheels. In this paper, a communication system between two mobile robots and a host PC is constructed by using ROS, and a sub-goal is generated to each robot to realize a cooperative running with two robots. The effectiveness of the proposed method is verified through an experiment that the controlled point of an object is subject to a movement along the square of 1 m.

DOI： 10.1109/SMC.2018.00296

Other Link： https://dblp.uni-trier.de/db/conf/smc/smc2018.html#MorishitaMNW18

An Extended Generalized Minimum Distance Decoding for Binary Linear Codes on a 4-Level Quantization over an AWGN Channel. Reviewed

Shunsuke Ueda, Ken Ikuta, Takuya Kusaka, Md. Al-Amin Khandaker, Ali Md. Arshad, Yasuyuki Nogami

IEICE Transactions 101-A ( 8 ) 1235 - 1244 2018

A Comparative Implementation of GLV Technique on KSS-16 Curve. Reviewed

Md. Al-Amin Khandaker, Yuki Nanjo, Takuya Kusaka, Yasuyuki Nogami

Proceedings - 2018 6th International Symposium on Computing and Networking, CANDAR 2018 106 - 112 2018

Publishing type：Research paper (international conference proceedings) Publisher：IEEE Computer Society

Pairing-based protocols are getting popular in many cryptographic applications. Pairing algorithms involve computations on elements in all three pairing groups, G 1 , G 2 and G 3 ; however, most protocols usually require additional scalar multiplication and exponentiation in any of these three groups. The Gallant-Lambert-Vanstone (GLV) method is an elegant technique to accelerate the scalar multiplication which can reduce the number of elliptic curve doubling by using Straus-Shamir simultaneous multi-scalar multiplication technique. However, efficiently computable endomorphisms are required to apply GLV for the elliptic curves. This paper shows the GLV technique by deriving efficiently computable endomorphism for Kachisa-Schaefer-Scott (KSS) curve defined over degree 16 extension field. In addition, the authors show explicit formulas to compute the GLV method together with Straus-Shamir simultaneous multi-scalar multiplication technique for 2, 4 and 8 dimensions in G 2 group. The comparative implementation shows that dimension 4 gives faster computational time than dimension 8 and 2.

DOI： 10.1109/CANDAR.2018.00021

Consideration of Efficient Pairing Applying Two Construction Methods of Extension Fields. Reviewed

Yuki Nanjo, Md. Al-Amin Khandaker, Takuya Kusaka, Yasuyuki Nogami

Sixth International Symposium on Computing and Networking 445 - 451 2018

Identification of Dominant ICs for Electromagnetic Emission by Using Noise Source Amplitude Modulation and Correlation Analysis

Shimpei Yoshino, Chiaki Ishida, Kengo Iokibe, Yoshitaka Toyota, Yasuyuki Nogami

2018 INTERNATIONAL SYMPOSIUM ON ELECTROMAGNETIC COMPATIBILITY (EMC EUROPE) 439 - 444 2018

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

To identify semiconductor devices that are dominant noise sources at low cost in order to reduce electromagnetic interference (EMI), we propose a method based on a noise source amplitude modulation technique and correlation analysis (NSM-CA). In this study, we applied the NSM-CA method to a printed circuit board (PCB) with multiple integrated circuits (ICs) and identified ICs dominantly contributing to EM emission. The switching currents produced in three of the ICs were modulated in amplitude with three different modulation signals. The noise source amplitude modulation was implemented in an FPGA, mounted on a PCB, by using three pseudorandom binary sequences (PRBSs) as modulation signals. During the modulations, EM emission was measured at frequencies where the emission exceeded the limit of EMI regulation. The temporal variation in the measured emission was correlated with each of the PRBSs. The ranking of the contributions of the ICs to the emission was determined by means of the resultant correlation coefficients. According to the ranking, the dominant ICs to which a combination of EMI reduction techniques should be primarily applied were identified. Moreover, we applied an EMI reduction technique to the dominant ICs and found a larger reduction in emission than when the technique was applied to low priority ICs.

Evaluating the Maximum Order Complexity of a Uniformly distributed Sequence over Odd Characteristic

Yuta Kodera, Takuya Kusaka, Takeru Miyazaki, Yasuyuki Nogami, Satoshi Uehara, Robert H. Morelos-Zaragoza

2018 IEEE INTERNATIONAL CONFERENCE ON CONSUMER ELECTRONICS-TAIWAN (ICCE-TW) 2018

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

This paper focuses on the Maximum Order Complexity of a pseudorandom sequence for security applications called NTU sequence. It shows the maximum feature on the nonlinear property and several properties have been theoretically proven. However, the NTU sequence requires a uniformization technique to overcome the drawback on its bits distribution. The technique has already proposed but the non-liear feature still has not investigated. Therefore, this paper evaluates the affects on the non-linear feature of the original NTU sequence by using Maximum Order Complexity.

Pseudo Random Ternary Sequence and Its Autocorrelation Property Over Finite Field

Md. Arshad Ali, Emran Ali, Md. Ahsan Habib, Md. Nadim, Takuya Kusaka, Yasuyuki Nogami

International Journal of Computer Network and Information Security 9 ( 9 ) 54 - 63 2017.9

Detecting falsification to MP3 audio signals for conference record using digital watermarking Reviewed

Tomoki Yoshida, Takeru Miyazaki, Shunsuke Araki, Satoshi Uehara, Yasuyuki Nogami

2017 IEEE International Conference on Consumer Electronics - Taiwan, ICCE-TW 2017 253 - 254 2017.7

Language：English Publishing type：Research paper (international conference proceedings) Publisher：Institute of Electrical and Electronics Engineers Inc.

In this paper, we will propose a digital watermarking for voice signals recorded by a digital voice recorder especially in conferences. We will discuss some requirements for detecting falsifications in the voice signal, because the conference record has the probability that a conclusion is changed for only a falsification in a little time interval. Next, we will show a method of locating an altered place in the voice signal and a new idea applying a white Gaussian noise for guarantee of the valid voice signal without falsification. One characteristic of our proposal is an agitation depending on a peak spectrum for making it difficult to illegally change the embedded watermark.

DOI： 10.1109/ICCE-China.2017.7991091

Distribution of bit patterns on multi-value sequence over odd characteristics field Reviewed

Yuta Kodera, Takeru Miyazaki, Md Al Amin Khandaker, Ali Md Arshad, Yasuyuki Nogami, Satoshi Uehara

2017 IEEE International Conference on Consumer Electronics - Taiwan, ICCE-TW 2017 137 - 138 2017.7

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

© 2017 IEEE. The Internet of Things (IoT) provides much convenient life for us, at the same time it has brought threats for our privacy. In this context, secure and efficient cryptosystem is required to which pseudorandom sequence plays an important role. Especially, the distribution of bit patterns in the pseudorandom sequence is one of important security aspects. This paper especially focuses on the bit patterns and the distribution in an NTU sequence. As a result of a lot of observation, an important assumption about the distribution of bit patterns in an NTU sequence is introduced. It will help to obtain the balanced NTU sequence in order to enhance the security of cryptosystem on IoT communications.

DOI： 10.1109/ICCE-China.2017.7991033

Security analysis of Raspberry Pi against Side-channel attack with RSA cryptography Reviewed

Akihiro Sanada, Yasuyuki Nogami, Kengo Iokibe, Md Al Amin Khandaker

2017 IEEE International Conference on Consumer Electronics - Taiwan, ICCE-TW 2017 287 - 288 2017.7

Multi-value sequence generated by trace function and power residue symbol over proper sub extension field

Ali Md Arshad, Takeru Miyazaki, Yasuyuki Nogami, Satoshi Uehara, Robert Morelos-Zaragoza

2017 IEEE International Conference on Consumer Electronics - Taiwan, ICCE-TW 2017 249 - 250 2017.7

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

The authors in this paper have proposed a multi-value sequence generated by a primitive polynomial, trace function, k-th power residue symbol, and a certain mapping function over the proper sub extension field. Here, the trace function actually maps an element of the extension field to an element of the proper sub extension field, which is actually a vector space. The distribution of numbers within the sequence becomes more balanced by considering the proper sub extension field. In addition, its period and autocorrelation properties also observed in this paper.

DOI： 10.1109/ICCE-China.2017.7991089

Solving 114-Bit ECDLP for a Barreto-Naehrig Curve. Reviewed

Takuya Kusaka, Sho Joichi, Ken Ikuta, Md. Al-Amin Khandaker, Yasuyuki Nogami, Satoshi Uehara, Nariyoshi Yamai, Sylvain Duquesne

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) 10779 LNCS 231 - 244 2017

Language：English Publishing type：Research paper (international conference proceedings) Publisher：SPRINGER INTERNATIONAL PUBLISHING AG

The security of cryptographic protocols which are based on elliptic curve cryptography relies on the intractability of elliptic curve discrete logarithm problem (ECDLP). In this paper, the authors describe techniques applied to solve 114-bit ECDLP in Barreto-Naehrig (BN) curve defined over the odd characteristic field. Unlike generic elliptic curves, BN curve holds an especial interest since it is well studied in pairing-based cryptography. Till the date of our knowledge, the previous record for solving ECDLP in a prime field was 112-bit by Bos et al. in Certicom curve ‘secp112r1’. This work sets a new record by solving 114-bit prime field ECDLP of BN curve using Pollard’s rho method. The authors utilized sextic twist property of the BN curve to efficiently carry out the random walk of Pollard’s rho method. The parallel implementation of the rho method by adopting a client-server model, using 2000 CPU cores took about 6 months to solve the ECDLP.

DOI： 10.1007/978-3-319-78556-1_13

Some properties of Z4 sequences obtained by using the gray code mapping from two binary m-sequences. Reviewed

Masahiro Goto, Satoshi Uehara, Yasuyuki Nogami

Eighth International Workshop on Signal Design and Its Applications in Communications, IWSDA 2017, Sapporo, Japan, September 24-28, 2017 182 - 186 2017

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

This paper shows some of fundamental properties of Z4 sequences of combining each element of a preferred pair of binary m-sequences by using the Gray code mapping. The distribution of elements {0,1,2,3} within one period can be exactly derived from auto/cross-correlation values of Gold sequences or Gold-like sequences. In addition, this paper shows properties such that the Z4 sequences have near-optimum correlation properties.

DOI： 10.1109/IWSDA.2017.8097082

Linear complexity of pseudo random binary sequence generated by trace function and Legendre symbol over proper sub extension field. Reviewed

Ali Md. Arshad, Takeru Miyazaki, Shoji Heguri, Yasuyuki Nogami, Satoshi Uehara, Robert Morelos-Zaragoza

Eighth International Workshop on Signal Design and Its Applications in Communications, IWSDA 2017, Sapporo, Japan, September 24-28, 2017 84 - 88 2017

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

The authors have proposed an approach for generating a pseudo random binary sequence by using primitive polynomial, trace function, and Legendre symbol over the proper sub extension field. There are many uses of pseudo random binary sequence in security applications. The linear complexity of a sequence is considered as the most important property to be analyzed in these types of applications. In this paper, the authors have restricted the discussion on the linear complexity and linear complexity profile properties of the proposed sequence based on some experimental results. According to the results, the proposed sequence always holds a maximum value of the linear complexity.

DOI： 10.1109/IWSDA.2017.8095741

Linear complexity of generalized NTU sequences. Reviewed

Kazuyoshi Tsuchiya, Chiaki Ogawa, Yasuyuki Nogami, Satoshi Uehara

Eighth International Workshop on Signal Design and Its Applications in Communications, IWSDA 2017, Sapporo, Japan, September 24-28, 2017 74 - 78 2017

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Pseudorandom number generators are required to generate pseudorandom numbers which have not only good statistical properties but also unpredictability in cryptography. A geometric sequence is a sequence given by applying a nonlinear feedforward function to an m-sequence. Nogami, Tada and Uehara proposed a geometric sequence whose nonlinear feedforward function is given by the Legendre symbol, and showed the period, periodic autocorrelation and linear complexity of the sequence. Furthermore, Nogami et al. proposed a generalization of the sequence (this sequence is referred to as the generalized NTU sequence), and showed the period and periodic autocorrelation. In this paper, we investigate the linear complexity of the generalized NTU sequences. Under some conditions, we can ensure that generalized NTU sequences have large linear complexity from the results on linear complexity of Sidel'nikov sequences.

DOI： 10.1109/IWSDA.2017.8095739

An Efficient Implementation of Trace Calculation over Finite Field for a Pseudorandom Sequence. Reviewed

Yuta Kodera, Takuya Kusaka, Takeru Miyazaki, Md. Al-Amin Khandaker, Yasuyuki Nogami, Satoshi Uehara

Fifth International Symposium on Computing and Networking, CANDAR 2017, Aomori, Japan, November 19-22, 2017 2018-January 451 - 455 2017

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE Computer Society

Trace function is a well known index of finite field theory and practically, it is used for some security applications. However, present trace calculation with binary method is far from the practice on an IoT device. This paper considers an efficient trace calculation without vector multiplication by focusing on the matrix representation and the linearity of trace function. By using pre-computation, a trace calculation is executed by m times multiplication and the memory consumption is 4m bytes. This paper especially uses a pseudorandom generator called NTU sequence to show the efficiency because it has paid much attention as a random generator for security applications. When considering 128-bit length of periodic sequence with NTU sequence for security applications, parameters will be p = 7 and m = 50. From the experimental results, a trace calculation with them will be executed within 5[μs], and the memory consumption is 200 bytes which is 0:625% of the storage in Arduino Uno. Therefore, this work contributes to implementing an efficient trace calculation on an IoT device with low memory consumption.

DOI： 10.1109/CANDAR.2017.86

An Improvement of Optimal Ate Pairing on KSS Curve with Pseudo 12-Sparse Multiplication Reviewed

Khandaker, Md Al-Amin, Ono, Hirotaka, Nogami, Yasuyuki, Shirase, Masaaki, Duquesne, Sylvain

INFORMATION SECURITY AND CRYPTOLOGY - ICISC 2016 10157 208 - 219 2017

Language：English Publishing type：Research paper (international conference proceedings) Publisher：SPRINGER INTERNATIONAL PUBLISHING AG

Acceleration of a pairing calculation of an Ate-based pairing such as Optimal Ate pairing depends not only on the optimization of Miller algorithm's loop parameter but also on efficient elliptic curve arithmetic operation and efficient final exponentiation. Some recent works have shown the implementation of Optimal Ate pairing over Kachisa-Schaefer-Scott (KSS) curve of embedding degree 18. Pairing over KSS curve is regarded as the basis of next generation security protocols. This paper has proposed a pseudo 12-sparse multiplication to accelerate Miller's loop calculation in KSS curve by utilizing the property of rational point groups. In addition, this papers has showed an enhancement of the elliptic curve addition and doubling calculation in Miller's algorithm by applying implicit mapping of its sextic twisted isomorphic group. Moreover this paper has implemented the proposal with recommended security parameter settings for KSS curve at 192 bit security level. The simulation result shows that the proposed pseudo 12-sparse multiplication gives more efficient Miller's loop calculation of an Optimal Ate pairing operation along with recommended parameters than pairing calculation without sparse multiplication.

DOI： 10.1007/978-3-319-53177-9_11

Other Link： https://dblp.uni-trier.de/db/conf/icisc/icisc2016.html#KhandakerONSD16

Distribution of Bit Patterns on Multi-value Sequence over Odd Characteristics Field Reviewed

Kodera, Yuta, Miyazaki, Takeru, Khandaker, Md. Al-Amin, Arshad, Ali Md., Nogami, Yasuyuki, Uehara, Satoshi

2017 IEEE INTERNATIONAL CONFERENCE ON CONSUMER ELECTRONICS - TAIWAN (ICCE-TW) 137 - 138 2017

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

The Internet of Things (IoT) provides much convenient life for us, at the same time it has brought threats for our privacy. In this context, secure and efficient cryptosystem is required to which pseudorandom sequence plays an important role. Especially, the distribution of bit patterns in the pseudorandom sequence is one of important security aspects. This paper especially focuses on the bit patterns and the distribution in an NTU sequence. As a result of a lot of observation, an important assumption about the distribution of bit patterns in an NTU sequence is introduced. It will help to obtain the balanced NTU sequence in order to enhance the security of cryptosystem on IoT communications.

DOI： 10.1109/ICCE-China.2017.7991033

Security Analysis of Raspberry Pi Against Side-Channel Attack with RSA Cryptography Reviewed

Sanada, Akihiro, Nogami, Yasuyuki, Iokibe, Kengo, Khandaker, Md. Al-Amin

2017 IEEE INTERNATIONAL CONFERENCE ON CONSUMER ELECTRONICS - TAIWAN (ICCE-TW) 287 - 288 2017

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

In this paper, the authors apply two modular exponentiation algorithms such as left-to-right binary method and Montgomery powering ladder algorithm on Raspberry Pi and evaluate their security against Side-channel attack.

DOI： 10.1109/ICCE-China.2017.7991108

Efficient Optimal Ate Pairing at 128-bit Security Level. Reviewed

Md. Al-Amin Khandaker, Yuki Nanjo, Loubna Ghammam, Sylvain Duquesne, Yasuyuki Nogami, Yuta Kodera

IACR Cryptology ePrint Archive 2017 1174 - 1174 2017

Parallel Implementations of SIMON and SPECK, Revisited. Reviewed

Taehwan Park, Hwajeong Seo, Garam Lee, Md. Al-Amin Khandaker, Yasuyuki Nogami, Howon Kim

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) 10763 LNCS 283 - 294 2017

Publishing type：Research paper (international conference proceedings) Publisher：Springer

In this paper, we revisited the parallel implementation of SIMON and SPECK block ciphers. The performances of SIMON and SPECK are significantly improved by using ARM NEON SIMD (Single Instruction Multiple Data) parallel computing and OpenMP SIMT (Single Instruction Multiple Thread). We optimized the implementation on ARM NEON architecture. For optimized NEON, we reduced the number of registers for round key and increased the number of registers for plaintexts. Furthermore, we proposed the efficient forward and backward alignment methods. Finally, we maximize the performance by using SIMT (Single Instruction Multiple Threads). In the case of performance of proposed methods and proposed methods with SIMT, SIMON 128/128 encryption within 32.4, 14.3 cycles/byte, SIMON 128/192 encryption within 30.1, 15.9 cycles/byte, SIMON 128/256 encryption within 32.4, 16.9 cycles/byte, SPECK 128/128 encryption within 9.7, 5.1 cycles/byte, SPECK 128/192 encryption within 10.4, 5.6 cycles/byte, SPECK 128/256 encryption within 11.0, and 5.6 cycles/byte respectively on ARM Cortex-A53 environment.

DOI： 10.1007/978-3-319-93563-8_24

Efficient Scalar Multiplication for Ate Based Pairing over KSS Curve of Embedding Degree 18 Reviewed

Khandaker, Md. Al-Amin, Nogami, Yasuyuki, Seo, Hwajeong, Duquesne, Sylvain

INFORMATION SECURITY APPLICATIONS, WISA 2016 10144 221 - 232 2017

Language：English Publishing type：Research paper (international conference proceedings) Publisher：SPRINGER INTERNATIONAL PUBLISHING AG

Efficiency of the next generation pairing based security protocols rely not only on the faster pairing calculation but also on efficient scalar multiplication on higher degree rational points. In this paper we proposed a scalar multiplication technique in the context of Ate based pairing with Kachisa-Schaefer-Scott (KSS) pairing friendly curves with embedding degree k = 18 at the 192-bit security level. From the systematically obtained characteristics p, order r and Frobenious trace t of KSS curve, which is given by certain integer z also known as mother parameter, we exploit the relation #E(F-p) = p + 1-t mod r by applying Frobenius mapping with rational point to enhance the scalar multiplication. In addition we proposed z-adic representation of scalar s. In combination of Frobenious mapping with multi-scalar multiplication technique we efficiently calculate scalar multiplication by s. Our proposed method can achieve 3 times or more than 3 times faster scalar multiplication compared to binary scalar multiplication, sliding-window and non-adjacent form method.

DOI： 10.1007/978-3-319-56549-1_19

Other Link： https://dblp.uni-trier.de/db/conf/wisa/wisa2016.html#KhandakerNSD16

Efficient scalar multiplication for ate based pairing over kss curve of embedding degree 18 Reviewed

Md Al Amin Khandaker, Yasuyuki Nogami, Hwajeong Seo, Sylvain Duquesne

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) 10144 LNCS 221 - 232 2017

Publishing type：Research paper (international conference proceedings)

© Springer International Publishing AG 2017. Efficiency of the next generation pairing based security protocols rely not only on the faster pairing calculation but also on efficient scalar multiplication on higher degree rational points. In this paper we proposed a scalar multiplication technique in the context of Ate based pairing with Kachisa-Schaefer-Scott (KSS) pairing friendly curves with embedding degree k = 18 at the 192-bit security level. From the systematically obtained characteristics p, order r and Frobenious trace t of KSS curve, which is given by certain integer z also known as mother parameter, we exploit the relation #E(F p) = p+1−t mod r by applying Frobenius mapping with rational point to enhance the scalar multiplication. In addition we proposed z-adic representation of scalar s. In combination of Frobenious mapping with multi-scalar multiplication technique we efficiently calculate scalar multiplication by s. Our proposed method can achieve 3 times or more than 3 times faster scalar multiplication compared to binary scalar multiplication, sliding-window and non-adjacent form method.

DOI： 10.1007/978-3-319-56549-1_19

Efficient Optimal Ate Pairing at 128-Bit Security Level. Reviewed

Md. Al-Amin Khandaker, Yuki Nanjo, Loubna Ghammam, Sylvain Duquesne, Yasuyuki Nogami, Yuta Kodera

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) 10698 LNCS 186 - 205 2017

Language：English Publishing type：Research paper (international conference proceedings) Publisher：SPRINGER INTERNATIONAL PUBLISHING AG

Following the emergence of Kim and Barbulescu’s new number field sieve (exTNFS) algorithm at CRYPTO’16 [21] for solving discrete logarithm problem (DLP) over the finite field; pairing-based cryptography researchers are intrigued to find new parameters that confirm standard security levels against exTNFS. Recently, Barbulescu and Duquesne have suggested new parameters [3] for well-studied pairing-friendly curves i.e., Barreto-Naehrig (BN) [5], Barreto-Lynn-Scott (BLS-12) [4] and Kachisa-Schaefer-Scott (KSS-16) [19] curves at 128-bit security level (twist and sub-group attack secure). They have also concluded that in the context of Optimal-Ate pairing with their suggested parameters, BLS-12 and KSS-16 curves are more efficient choices than BN curves. Therefore, this paper selects the atypical and less studied pairing-friendly curve in literature, i.e., KSS-16 which offers quartic twist, while BN and BLS-12 curves have sextic twist. In this paper, the authors optimize Miller’s algorithm of Optimal-Ate pairing for the KSS-16 curve by deriving efficient sparse multiplication and implement them. Furthermore, this paper concentrates on the Miller’s algorithm to experimentally verify Barbulescu et al.’s estimation. The result shows that Miller’s algorithm time with the derived pseudo 8-sparse multiplication is most efficient for KSS-16 than other two curves. Therefore, this paper defends Barbulescu and Duquesne’s conclusion for 128-bit security.

DOI： 10.1007/978-3-319-71667-1_10

An ECC Implementation with a Twisted Montgomery Curve over Fq32 on an 8-Bit Microcontroller. Reviewed

Yuta Hashimoto, Md. Al-Amin Khandaker, Yuta Kodera, Taehwan Park, Takuya Kusaka, Howon Kim, Yasuyuki Nogami

Proceedings - 2017 5th International Symposium on Computing and Networking, CANDAR 2017 2018-January 445 - 450 2017

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

The security of Internet of Things (IoT) devices is one of the most important problems. The processing ability of IoT devices is limited, therefore a more light-weight and secure cryptography is necessary. This paper shows the implementation of 256-bit Elliptic Curve Cryptography (ECC) on an 8-bit microcontroller by applying towering for extension field of degree 32. The authors use a twisted Montgomery curve with a Montgomery ladder which enables fast calculations without inverse elements. In addition to that, this implementation is considered resistant to the Side Channel Attack (SCA) since it applies the Montgomery ladder for the scalar multiplication (SCM). This ECC implementation on Arduino UNO, an 8-bit microcontroller board, takes 3 seconds for an SCM which can be made faster by careful assembly implementation.

DOI： 10.1109/CANDAR.2017.90

Interleaved sequences of geometric sequences binarized with Legendre symbol of two types.

Kazuyoshi Tsuchiya, Yasuyuki Nogami, Satoshi Uehara

CoRR abs/1709.05163 2017

Efficient operation over F<inf>(24)2</inf> for security technologies

Norito Jitsui, Yasuyuki Nogami, Hwajeong Seo, Nasima Begum

2016 IEEE International Conference on Consumer Electronics-Taiwan, ICCE-TW 2016 17 - 18 2016.7

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Binary extension field F28 is recently used for AES encryption and IoT (Internet of Things) security with PUF (Physical Unclonable Function). The calculations over tower field such as F(24)2 or F((22)2)2 become more efficient than that of over F28. This paper focuses on the efficient calculations over F(24)2.

DOI： 10.1109/ICCE-TW.2016.7520896

A dynamic job scheduling method for reliable and high-performance volunteer computing

Shinya Yasuda, Yasuyuki Nogami, Masaru Fukushi

2015 IEEE 2nd International Conference on InformationScience and Security, ICISS 2015 100 - 103 2016.1

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

This paper proposes a dynamic job scheduling method for reliable and high-performance volunteer computing. In volunteer computing, each job is replicated and allocated to multiple participants (workers) to remove incorrect results by a voting mechanism. Hence, the number of workers necessary to complete a job is an important factor for the system performance; however, this is not well-considered in the existing methods. The proposed method defines the expected probability of completion for each job based on the worker's secession probability. By allocating each job so that the expected probability is always greater than a specified value, the proposed method avoids excess job allocation, which leads to the higher performance. The performance of the proposed method is evaluated by computer simulation, under the two scenarios of workers having uniform and different processing speeds. It is found that the performance of the proposed method is higher than the existing method especially under the practical latter scenario.

DOI： 10.1109/ICISSEC.2015.7370964

An Improvement of Scalar Multiplication on Elliptic Curve Defined over Extension Field F-q(2) Reviewed

Khandaker Md. Al-Amin, Yasuyuki Nogami

2016 IEEE INTERNATIONAL CONFERENCE ON CONSUMER ELECTRONICS-TAIWAN (ICCE-TW) 13 - 14 2016

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

In elliptic curve cryptography (ECC), a scalar multiplication for rational point is the most time consuming operation. This paper proposes an efficient calculation for a scalar multiplication by applying Frobenious Mapping. Particularly, this paper deals with Barreto-Naehrig curve defined over extension field F-q(2), where q - p(6) and p is a large prime.

DOI： 10.1109/ICCE-TW.2016.7520894

A Consideration of Towering Scheme for Efficient Arithmetic Operation over Extension Field of Degree 18 Reviewed

Khandaker, Md. Al-Amin, Nogami, Yasuyuki

PROCEEDINGS OF THE 2016 19TH INTERNATIONAL CONFERENCE ON COMPUTER AND INFORMATION TECHNOLOGY (ICCIT) 276 - 281 2016

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Barreto-Naehrig (BN) curve is a well studied pairing friendly curve of embedding degree 12, that uses arithmetic in F-p12. Therefore the arithmetic of F-p12 extension field is well studied. In this paper, we have proposed an efficient approach of arithmetic operation over the extension field of degree 18 by towering. F-p18 extension field arithmetic is considered to be the basis of implementing the next generation pairing based security protocols. We have proposed to use F-p element to construct irreducible binomial for building tower of extension field up to F-p6, where conventional approach uses the root of previous irreducible polynomial to create next irreducible polynomials. Therefore using F-p elements in irreducible binomial construction, reduces the number of multiplications in F-p to calculate inversion and multiplication over F-p18, which effects acceleration in total arithmetic operation over F-p18.

DOI： 10.1109/ICCITECHN.2016.7860209

Isomorphic Mapping for Ate-based Pairing over KSS Curve of Embedding Degree 18 Reviewed

Khandaker, Md. Al-Amin, Nogami, Yasuyuki

2016 FOURTH INTERNATIONAL SYMPOSIUM ON COMPUTING AND NETWORKING (CANDAR) 629 - 634 2016

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Pairing based cryptography is considered as the next generation of security for which it attracts many researcher to work on faster and efficient pairing to make it practical. Among the several challenges of efficient pairing; efficient scalar multiplication of rational point defined over extension field of degree k >= 12 is important. However, there exists isomorphic rational point group defined over relatively lower degree extension field. Exploiting such property, this paper has showed a mapping technique between isomorphic rational point groups in the context of Ate-based pairing with Kachisa-Schaefer-Scott (KSS) pairing friendly curve of embedding degree k = 18. In the case of KSS curve, there exists sub-field sextic twisted curve that includes sextic twisted isomorphic rational point group defined over F(p)3. This paper has showed the mapping procedure from certain F(p)18 rational point group to its sub-field isomorphic rational point group in F(p)3 and vice versa. This paper has also showed that scalar multiplication is about 20 times faster after applying the proposed mapping which in-turns resembles that the impact of this mapping will greatly enhance the pairing operation in KSS curve.

DOI： 10.1109/CANDAR.2016.38

Other Link： https://dblp.uni-trier.de/db/conf/ic-nc/candar2016.html#KhandakerN16

A new approach for generating well balanced Pseudo-random signed binary sequence over odd characteristic field. Reviewed

Ali Md. Arshad, Yasuyuki Nogami, Chiaki Ogawa, Hiroto Ino, Satoshi Uehara, Robert Morelos-Zaragoza,Kazuyoshi Tsuchiya

2016 International Symposium on Information Theory and Its Applications, ISITA 2016, Monterey, CA, USA, October 30 - November 2, 2016 777 - 780 2016

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

In our previous work, pseudo random binary sequence generated by using trace function, Legendre symbol and mapping function has been researched. Our previous sequence generated by applying primitive polynomial over odd characteristics field Fp, trace function, and Legendre symbol. The previous sequence contained only 0 and 1 values. It has some interesting features such as period, periodic autocorrelation, and linear complexity. However, it has a major drawback also that is the appearance of 0 and 1 are inconsistent in each period. For this reason, in the periodic autocorrelation graph except the peak values other parts always consists some values and that is not 0. When we apply this type of binary sequence in any security applications, it will lead some security vulnerabilities. In this paper, the authors have proposed a new approach to generate pseudo random signed binary sequence. An important point about our proposed sequence is, it overcomes the drawback of our previous work. Our proposed sequence includes 0,1, and -1 values. Its features, such as the period and periodic autocorrelation are also explained in this paper. According to the results, this has interesting feature such as the appearance of 0, 1 and - 1 are identical in each period.

Other Link： http://dblp.uni-trier.de/db/conf/isita/isita2016.html#conf/isita/ArshadNOIUMT16

Auto and Cross Correlation of Well Balanced Sequence over Odd Characteristic Field. Reviewed

Ali Md. Arshad, Yasuyuki Nogami, Hiroto Ino, Satoshi Uehara

Fourth International Symposium on Computing and Networking, CANDAR 2016, Hiroshima, Japan, November 22-25, 2016 604 - 609 2016

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE Computer Society

In this paper, the authors have proposed a new approach for generating multi-value sequence by utilizing primitive element, trace function, and k-th power residue symbol over odd characteristic field. Let p be an odd prime and Fp be an odd characteristic prime field, m be the degree of the primitive polynomial f(x), and k be a prime factor of p - 1. In details, the procedure for generating multi-value sequence is as follows: primitive polynomial f(x) generates maximum length vector sequence, then trace function Tr(·) maps an element of extension field Fpm to an element of prime field Fp, next non-zero scalar A € Fp is added to the trace value, and finally k-th power residue symbol is utilized to map the scalars into (k + 1) values multi-value sequence. In this method, a certain mapping function Mk(·) is utilized during the autocorrelation calculation. Hence, our proposed multi-value sequence has some parameters such as p, m, k, and A. This paper discusses the period, autocorrelation, and cross-correlation properties of proposed multi-value sequence based on some experimental results.

DOI： 10.1109/CANDAR.2016.0109

Pseudo Random Sequence over Finite Field using Mobius Function Reviewed

Fatema Akhter, Yasuyuki Nogami

2016 INTERNATIONAL WORKSHOP ON COMPUTATIONAL INTELLIGENCE (IWCI) 68 - 72 2016

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Pseudo random sequences play an important role in cryptography and network security system. This paper proposes a new approach for generation of pseudo random sequence over odd characteristic field. The sequence is generated by applying a primitive polynomial over odd characteristic field, trace function and mobius function. Then, some important properties of the newly generated sequence such as period, autocorrelation and cross-correlation have been studied in this work. The properties of the generated sequence are evaluated on various bit length of odd characteristics. Finally, the experimental results are compared with existing works which show the superiority of the proposed sequence over existing ones.

Linear Complexity of Signed Binary Sequence Over Odd Characteristic Field Reviewed

Ali Md. Arshad, Hiroto Ino, Chiaki Ogawa, Yasuyuki Nogami

PROCEEDINGS OF THE 2016 19TH INTERNATIONAL CONFERENCE ON COMPUTER AND INFORMATION TECHNOLOGY (ICCIT) 266 - 269 2016

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

In our previous work, well balanced pseudo random signed binary sequence generated by using trace function and Legendre symbol has been researched. Our previous sequence generated by applying primitive polynomial over odd characteristic field F-p, trace function and Legendre symbol. The important features such as period, periodic autocorrelation, and cross-correlation have already been well discussed in our previous work. In this paper, the signed binary sequence is generated by utilizing one additional parameter A. Let p be an odd prime and F-p is an odd characteristic prime field and m be the degree of the primitive polynomial f(x). The procedure for generating sequence is as follows: primitive polynomial f (x) generates maximum length vector sequence, then trace function Tr (.) maps an element of extension field F(p)m to an element of prime field F-p, next a non-zero scalar A is an element of F-p is added to the trace value and finally Legendre symbol is used to map the scalars into signed binary sequence. In this paper, the authors have restricted the discussion on linear complexity and linear complexity profile properties of signed binary sequence based on some experimental results.

DOI： 10.1109/ICCITECHN.2016.7860207

Parallel Implementations of LEA, Revisited.

Hwajeong Seo, Taehwan Park, Shinwook Heo, Gyuwon Seo, Bongjin Bae, Zhi Hu, Lu Zhou, Yasuyuki Nogami, Youwen Zhu, Howon Kim

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) 10144 LNCS 318 - 330 2016

Language：English Publishing type：Research paper (international conference proceedings) Publisher：SPRINGER INTERNATIONAL PUBLISHING AG

In this paper we revisited the parallel implementations of LEA. By taking the advantages of both the light-weight features of LEA and the parallel computation abilities of ARM-NEON platforms, performance is significantly improved. We firstly optimized the implementations on ARM and NEON architectures. For ARM processor, barrel shifter instruction is used to hide the latencies for rotation operations. For NEON engine, the minimum number of NEON registers are assigned to the round key variables by performing the on-time round key loading from ARM registers. This approach reduces the required NEON registers for round key variables by three registers and the registers and temporal registers are used to retain four more plaintext for encryption operation. Furthermore, we finely transform the data into SIMD format by using transpose and swap instructions. The compact ARM and NEON implementations are combined together and computed in mixed processing way. This approach hides the latency of ARM computations into NEON overheads. Finally, multiple cores are fully exploited to perform the maximum throughputs on the target devices. The proposed implementations achieved the fastest LEA encryption within 3.2 cycle/byte for Cortex-A9 processors.

DOI： 10.1007/978-3-319-56549-1_27

Other Link： https://dblp.uni-trier.de/db/conf/wisa/wisa2016.html#SeoPHSBHZNZK16

Pseudo random sequence over finite field using Möbius Function.

Fatema Akhter, Yasuyuki Nogami

IWCI 2016 - 2016 International Workshop on Computational Intelligence 69 - 73 2016

Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Pseudo random sequences play an important role in cryptography and network security system. This paper proposes a new approach for generation of pseudo random sequence over odd characteristic field. The sequence is generated by applying a primitive polynomial over odd characteristic field, trace function and möbius function. Then, some important properties of the newly generated sequence such as period, autocorrelation and cross-correlation have been studied in this work. The properties of the generated sequence are evaluated on various bit length of odd characteristics. Finally, the experimental results are compared with existing works which show the superiority of the proposed sequence over existing ones.

DOI： 10.1109/IWCI.2016.7860341

Other Link： https://dblp.uni-trier.de/db/conf/iwci/iwci2016.html#AkhterN16

A Pseudo-random Binary Sequence Generated by Using Primitive Polynomial of Degree 2 over Odd Characteristic Field F-p Reviewed

Ali Md. Arshad, Yasuyuki Nogami

2016 IEEE INTERNATIONAL CONFERENCE ON CONSUMER ELECTRONICS-TAIWAN (ICCE-TW) 15 - 16 2016

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Let p be an odd prime number as the characteristic of finite field, this paper introduces a pseudo random binary sequence generated by a primitive polynomial of degree 2 over F-p, trace function, and Legendre symbol. Then, its period and autocorrelation are introduced with a small example.

DOI： 10.1109/ICCE-TW.2016.7520895

Highly Efficient GF(2^8) Inversion Circuit Based on Redundant GF Arithmetic and Its Application to AES Design Reviewed

Rei Ueno, Naofumi Homma, Yukihiro Sugawara, Yasuyuki Nogami, Takafumi Aoki

International Conference on Cryptographic Hardware and Embedded Systems 9293 ( 9293 ) 63 - 80 2015.9

Language：English Publishing type：Research paper (international conference proceedings) Publisher：SPRINGER-VERLAG BERLIN

This paper proposes a compact and efficient GF(28) inversion circuit design based on a combination of non-redundant and redundant Galois Field (GF) arithmetic. The proposed design utilizes redundant GF representations, called Polynomial Ring Representation (PRR) and Redundantly Represented Basis (RRB), to implement GF(28) inversion using a tower field GF((24)2). In addition to the redundant representations, we introduce a specific normal basis that makes it possible to map the former components for the 16th and 17th powers of input onto logic gates in an efficient manner. The latter components for GF(24) inversion and GF(24) multiplication are then implemented by PRR and RRB, respectively. The flexibility of the redundant representations provides efficient mappings from/to the GF(28). This paper also evaluates the efficacy of the proposed circuit by means of gate counts and logic synthesis with a 65 nm CMOS standard cell library and comparisons with conventional circuits, including those with tower fields GF(((22)2)2). Consequently, we show that the proposed circuit achieves approximately 40% higher efficiency in terms of area-time product than the conventional best GF(((22)2)2) circuit excluding isomorphic mappings. We also demonstrate that the proposed circuit achieves the best efficiency (i. e., area-time product) for an AES encryption S-Box circuit including isomorphic mappings.

DOI： 10.1007/978-3-662-48324-4_4

Other Link： https://dblp.uni-trier.de/db/conf/ches/ches2015.html#UenoHSNA15

Efficient implimentation of NTRU over all one polynomial ring with CVMA

Koki Misumi, Yasuyuki Nogami

2015 IEEE International Conference on Consumer Electronics - Taiwan, ICCE-TW 2015 384 - 385 2015.8

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

It is shown that public key cryptosystems based on discrete logarithm probrem can be solved if the quantum computer and Shor's algorithm are realized. Thus a new cryptosystem called post-quantum cryptosystem so as not to be broken by quantum computer is needed. NTRU is proposed by Hoffstein et al. in 1998. It is one of post-quantum cryptosystem. It is based on problems on lattice for which there are no efficient algorithms to solve. In NTRU, using convolution polynomial ring as Zq[X]/(Xn-1). However, (X-1), that is a trivial factor of Xn-1 sometimes make problems. Thus we consider a variant using a quotient polynomial ring such as Zq[X]/(Xn + Xx-1 +...+X + 1) and CVMA: Cyclic Vector Multiplication Algorithm.

DOI： 10.1109/ICCE-TW.2015.7216956

A performance evaluation of Web-based volunteer computing using applications with GMP

Shoma Kajitani, Yasuyuki Nogami, Masaru Fukushi, Noriki Amano

2015 IEEE International Conference on Consumer Electronics - Taiwan, ICCE-TW 2015 41 - 42 2015.8

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

This paper presents the performance evaluations of GMP-based applications on Web-based Volunteer Computing (VC) systems. Web-based VC is expected to gather many volunteer participants (workers) by allowing workers to execute a computation program (job) on Web browsers. On the other hand, the job execution performance on workers degraded because jobs are executed on Web browsers. To reveal the actual performance of Web-based VC, we convert practical applications which use GMP, that is a multi-precision library for scientific computations, and evaluate its performance. The experimental results show that the performance degradation is negligibly small in some cases, e.g. a short bit-length of arguments. This paper also shows a potential for the performance improvement of Web-based VC by substituting GMP functions.

DOI： 10.1109/ICCE-TW.2015.7216970

An implementation of credibility-based job scheduling method in volunteer computing systems

Shun Ichiro Tani, Yasuyuki Nogami, Masaru Fukushi

2015 IEEE International Conference on Consumer Electronics - Taiwan, ICCE-TW 2015 37 - 38 2015.8

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

This paper addresses a job scheduling problem in Volunteer Computing (VC) systems, where some malicious participant may return incorrect results (sabotaging). Credibility-based job scheduling method, namely ENR-ECJ, is a promising approach to realize high-performance and sabotage-tolerant VC systems based on the credibility of each participant (worker). However, managing the credibility values in the management node may cause considerable performance degradation of whole the system. By implementing ENR-ECJ into a small scale VC system, this paper demonstrates the primacy of ENR-ECJ over existing methods and reveals its condition through the performance evaluation for various number of workers. The results show that ENR-EJC improves the overall performance about 10% when the access frequency of workers is less than 2 per second.

DOI： 10.1109/ICCE-TW.2015.7216948

An Improvement of Tate Paring with Supersingular Curve Reviewed

Akito Kumano, Yasuyuki Nogami

2015 2ND INTERNATIONAL CONFERENCE ON INFORMATION SCIENCE AND SECURITY (ICISS) 37 - 39 2015

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Vector decomposition problem has been proposed on some supersingular curves whose embedding degree is 2 for example. In order to apply the problem as a trapdoor for some innovative cryptosystems, it is necessary to make pairing-related calculations more efficient. Our previous work has considered an approach for Tate pairing on a supersingular curve of embedding degree 2 over extension field of extension degree 2. It improved both Miller's algorithm and final exponentiation that was required for the Tate pairing. In detail, one multiplication in the calculation of Miller's loop was eliminated by using a twist mapping. This paper shows a more improved calculation of pairing with some experimental result for the efficiency discussion.

DOI： 10.1109/ICISSEC.2015.7370982

Faster ECC over F2571 (feat. PMULL).

Hwajeong Seo, Zhe Liu 0001, Yasuyuki Nogami, Jongseok Choi, Howon Kim

IACR Cryptol. ePrint Arch. 2015 745 - 745 2015

Binary Field Multiplication on ARMv8.

Hwajeong Seo, Zhe Liu 0001, Yasuyuki Nogami, Jongseok Choi, Howon Kim

IACR Cryptol. ePrint Arch. 2015 688 - 688 2015

Secure Binary Field Multiplication.

Hwajeong Seo, Chien-Ning Chen, Zhe Liu 0001, Yasuyuki Nogami, Taehwan Park, Jongseok Choi, Howon Kim

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) 9503 161 - 173 2015

Publishing type：Research paper (international conference proceedings) Publisher：Springer

Binary field multiplication is the most fundamental building block of binary field Elliptic Curve Cryptography (ECC) and Galois/Counter Mode (GCM). Both bit-wise scanning and Look-Up Table (LUT) based methods are commonly used for binary field multiplication. In terms of Side Channel Attack (SCA), bit-wise scanning exploits insecure branch operations which leaks information in a form of timing and power consumption. On the other hands, LUT based method is regarded as a relatively secure approach because LUT access can be conducted in a regular and atomic form. This ensures a constant time solution as well. In this paper, we conduct the SCA on the LUT based binary field multiplication. The attack exploits the horizontal Correlation Power Analysis (CPA) on weights of LUT. We identify the operand with only a power trace of binary field multiplication. In order to prevent SCA, we also suggest a mask based binary field multiplication which ensures a regular and constant time solution without LUT and branch statements.

DOI： 10.1007/978-3-319-31875-2_14

Other Link： https://dblp.uni-trier.de/db/conf/wisa/wisa2015.html#SeoC0NPCK15

Secure Binary Field Multiplication.

Hwajeong Seo, Chien-Ning Chen, Zhe Liu 0001, Yasuyuki Nogami, Taehwan Park, Jongseok Choi, Howon Kim

IACR Cryptol. ePrint Arch. 2015 799 - 799 2015

Highly Efficient GF(28) Inversion Circuit Based on Redundant GF Arithmetic and Its Application to AES Design.

Rei Ueno, Naofumi Homma, Yukihiro Sugawara, Yasuyuki Nogami, Takafumi Aoki

IACR Cryptol. ePrint Arch. 2015 763 - 763 2015

Periods of Sequences Generated by the Logistic Map over Finite Fields with Control Parameter Four Reviewed

Kazuyoshi Tsuchiya, Yasuyuki Nogami

2015 SEVENTH INTERNATIONAL WORKSHOP ON SIGNAL DESIGN AND ITS APPLICATIONS IN COMMUNICATIONS (IWSDA) 155 - 159 2015

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Recently, binary sequences generated by chaotic maps have been widely studied. In particular, the logistic map is used as one of the chaotic map. However, if the logistic map is implemented by using finite precision computer arithmetic, rounding is required. In order to avoid rounding, Miyazaki, Araki, Uehara and Nogami proposed the logistic map over finite fields, and show some properties of sequences generated by the logistic map over finite fields. In this paper, we show some properties of periods of sequences generated by the logistic map over finite fields with control parameter four. In particular, we show conditions for parameters and initial values to have a long period, and asymptotic properties for periods by numerical experiments.

DOI： 10.1109/IWSDA.2015.7458394

Other Link： https://dblp.uni-trier.de/db/conf/iwsda/iwsda2015.html#TsuchiyaN15

A Consideration on Crosscorrelation of a Kind of Trace Sequences over Finite Field. Reviewed

Hiroto Ino, Yasuyuki Nogami, Nasima Begum, Satoshi Uehara, Robert Morelos-Zaragoza,Kazuyoshi Tsuchiya

Third International Symposium on Computing and Networking, CANDAR 2015, Sapporo, Hokkaido, Japan, December 8-11, 2015 484 - 486 2015

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE Computer Society

In our previous work, the k-value pseudo random sequence generated by power residue symbol has been researched. The sequence is generated by applying a primitive polynomial over odd characteristics field, trace function, and power residue symbol. And the sequence has some interesting features such as period, periodic autocorrelation, and linear complexity. In this paper, by applying a new step into the process of generating sequence, a new generating method of k-value sequence is derived. As with the previous work, it also has some interesting features such as period, periodic autocorrelation, and periodic crosscorrelation. From the experimental results, these features are examined.

DOI： 10.1109/CANDAR.2015.53

An Efficiency Improvement in an Anonymous Credential System for CNF Formulas on Attributes with Constant-size Proofs Reviewed

Nasima Begum, Toru Nakanishi, Yasuyuki Nogami

2ND INTERNATIONAL CONFERENCE ON ELECTRICAL ENGINEERING AND INFORMATION COMMUNICATION TECHNOLOGY (ICEEICT 2015) 2015

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

An anonymous credential system allows a user to convince a service provider anonymously that he/she owns certified attributes. Previously, we proposed a paring-based anonymous credential system with constant size of proofs, where the combinations of logical AND and OR relations on user attributes can be proved as CNF formulas. However, this system has a problem of requiring large online computation time during authentication, which depends on the number of AND relations in the proved formula. In this paper, we propose an efficiency improvement of the computational overhead based on online/offline precomputation technique. In our improvement, all exponentiations that can be used for the accumulator and witness computations are executed in advance in the precomputation algorithm. Thus, exponentiations in the online accumulator and witness computations are excluded, and only multiplications are needed. We implemented the system using a fast pairing library, and measured the processing times, while changing the size of the proved CNF formula. The experimental result shows that the computational costs of the proof generation in the case of using lots of AND relations are greatly reduced than the previous system. Hence, it is practical for mobile users.

DOI： 10.1109/ICEEICT.2015.7307538

Reduction of Authentication Time in an Anonymous Credential System with Proofs for Monotone Formulas on Attributes Reviewed

Nasima Begum, Toru Nakanishi, Yasuyuki Nogami

2015 IEEE INTERNATIONAL CONFERENCE ON CONSUMER ELECTRONICS - TAIWAN (ICCE-TW) 376 - 377 2015

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

An anonymous credential system allows a user to convince a service provider anonymously that he/she owns certified attributes. Previously, an anonymous credential system was proposed to prove user's attributes to satisfy a monotone formula, i.e., a logic relation with any combination of AND/OR relations. However, this system has a problem of requiring large authentication time which depends on the number of attributes in the proved formula. In this paper, we propose methods to accelerate the authentication time by reducing the exponentiation costs for the calculations of accumulator and the witness which are used in the system. We implemented the accelerated system using a fast pairing library, and measured the authentication times, while changing the size of the proved relation.

DOI： 10.1109/ICCE-TW.2015.7216952

Faster ECC over \mathbb F_2^521-1 F 2 521 - 1 (feat. NEON).

Hwajeong Seo, Zhe Liu 0001, Yasuyuki Nogami, Taehwan Park, Jongseok Choi, Lu Zhou, Howon Kim

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) 9558 169 - 181 2015

Publishing type：Research paper (international conference proceedings) Publisher：Springer

In this paper, we present high speed parallel multiplication and squaring algorithms for the Mersenne prime 2521 − 1. We exploit 1- level Karatsuba method in order to provide asymptotically faster integer multiplication and fast reduction algorithms. With these optimization techniques, ECDH on NIST’s (and SECG’s) curve P-521 requires 8.1/4M cycles on an ARM Cortex-A9/A15, respectively. As a comparison, on the same architecture, the latest OpenSSL 1.0.2d’s ECDH speed test for curve P-521 requires 23.8/18.7M cycles for ARM Cortex-A9/A15, respectively.

DOI： 10.1007/978-3-319-30840-1_11

Other Link： https://dblp.uni-trier.de/db/conf/icisc/icisc2015.html#Seo0NPCZK15

Volunteer Computing for Solving an Elliptic Curve Discrete Logarithm Problem Reviewed

Shoma Kajitani, Yasuyuki Nogami, Shunsuke Miyoshi, Thomas Austin

PROCEEDINGS OF 2015 THIRD INTERNATIONAL SYMPOSIUM ON COMPUTING AND NETWORKING (CANDAR) 122 - 126 2015

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Elliptic curve discrete logarithm problem (ECDLP) is the base of the security of elliptic curve cryptography (ECC). The verification of the security of ECC has been studied by solving an ECDLP. However, we need a large amount of computational resources for the verification. Then, this paper proposes a method gathering computational resources with Web-based Volunteer Computing (Web-based VC). This paper solves 70-bit ECDLP, and evaluates the computational performance of 2 types of the execution clients: Native Client (NaCl) and Portable NaCl (PNaCl). In the case of NaCl, 70-bit ECDLP was solved in 3086 seconds. On the other hand, in the case of PNaCl, 70-bit ECDLP was solved in 6583 seconds.

DOI： 10.1109/CANDAR.2015.46

Other Link： https://dblp.uni-trier.de/db/conf/ic-nc/candar2015.html#KajitaniNMA15

Examining the Linear Complexity of Multi-value Sequence generated by Power Residue Symbol Reviewed

Hiroto Ino, Yasuyuki Nogami, Nasima Begum, Satoshi Uehara, Robert Morelos-Zaragoza, Kazuyoshi Tsuchiya

2015 2ND INTERNATIONAL CONFERENCE ON INFORMATION SCIENCE AND SECURITY (ICISS) 58 - 60 2015

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

In our previous work, k-value pseudo random sequence generated by power residue symbol has been researched. The sequence is generated by applying a primitive polynomial over odd characteristics field, trace function, and power residue symbol. The sequence has some important features such as period, periodic autocorrelation, and linear complexity. In this paper, by applying an additional process to the previous procedure, an extended multi-value sequence is generated. Its features, such as the period, periodic autocorrelation, periodic crosscorrelation, and linear complexity are examined in this paper. According to the results, the new sequence also has some interesting features.

DOI： 10.1109/ICISSEC.2015.7371002

Long Period Sequences Generated by the Logistic Map over Finite Fields with Control Parameter Four.

Kazuyoshi Tsuchiya, Yasuyuki Nogami

CoRR abs/1510.03650 2015

Analysis on equivalent current source of AES-128 circuit for HD power model verification

Kengo Iokibe, Kazuhiro Maeshima, Hiroto Kagotani, Yasuyuki Nogami, Yoshitaka Toyota, Tetsushi Watanabe

IEEE International Symposium on Electromagnetic Compatibility 2014-December 302 - 305 2014.12

Publishing type：Research paper (international conference proceedings)

We analyzed equivalent current source of cryptographic circuits implemented on a field programmable gate array (FPGA). The equivalent current source represented internal switching current behaviors in the cryptographic circuits during an Advanced Encryption Standard (AES) operation. In this work, the internal current was analyzed for extracting leakage functions and correlation coefficients from scatter diagrams of the Hamming Distance (HD) of AES intermediate values and the current magnitudes. The obtained leakage functions were confirmed a well-known assumption on the HD power model that magnitude of switching current due to transition of register states is proportional to HD of the register. The internal current was also investigated in terms of correlation with the HD model. Correlation coefficients increased as transforming the external power trace in the internal current because two types of noise were reduced by the transform; constant noise and overlap effect of successive rounds. The noise reduction inferred that the use of the internal current source would provide more precise verification of countermeasures.

Investigation in Burst Pulse Injection Method for Fault Based Cryptanalysis

Kengo Iokibe, Kazuhiro Maeshima, Hiroto Kagotani, Yasuyuki Nogami, Yoshitaka Toyota, Tetsushi Watanabe

2014 IEEE INTERNATIONAL SYMPOSIUM ON ELECTROMAGNETIC COMPATIBILITY (EMC) 743 - 747 2014

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

This paper investigated about introduction of the burst pulse injection method standardized for immunity tests to a cryptanalysis using faulty ciphertexts. We investigated the potential of the burst injection method to induce faulty ciphertexts experimentally. Firstly, the standard burst pulse was injected through the power cable to a cryptographic module implementing the Advanced Encryption Standard (AES) on a field programmable gate array (FPGA). As a result, it was confirmed that the burst pulse injection might cause clock glitches on the module. Secondly, the clock glitch was varied in magnitude and timing by use of two pulse generators and transmitted to the AES circuit to clarify what types of clock glitch induce critical faulty ciphertexts suited for recovering the crypto-key successfully. Results confirmed that the clock glitch had potential to induce faulty ciphertexts when it exceeded the threshold and produced a clock interval shorter than the critical path delay in the target round. The two experimental results suggested that burst pulse injection to cryptographic modules through their power cables is a possible scenario of fault analysis attacks.

Investigation on FPGA Malfunctions by Clock Glitch Induced by Disturbance Invasion through Power Cable

Iokibe Kengo, Maeshima Kazuhiro, Watanabe Tetsushi, Kagotani Hiroto, Nogami Yasuyuki, Hayashi Yu-ichi, Toyota Yoshitaka, Sone Hideaki

Proceedings of JIEP Annual Meeting 28 ( 0 ) 63 - 66 2014

The Pollard's Rho Method with XTR Group on G(3) over Barreto-Naehrig Curve

Yusuke Takai, Kenta Nekado, Yasuyuki Nogami

2012 7TH INTERNATIONAL CONFERENCE ON COMPUTING AND CONVERGENCE TECHNOLOGY (ICCCT2012) 595 - 598 2012

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Pollard's rho method is well-known as an efficient method for solving discrete logarithm problem (DLP). This paper adopts the DLP on the so-denoted G(3) over Barreto-Naehrig curve, together with XTR group. Then, this paper shows this idea with the proposed algorithm, and the experimental computation time of solving the DLP is reduced by about 15%.

Efficient non symmetric pairing groups on ordinary pairing friendly curve of embedding degree 1 Reviewed

Tetsuya Izuta, Yasuyuki Nogami, Yoshitaka Morikawa

IEEE International Conference on Communications 1 - 5 2011

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Recently, ordinary pairing-friendly elliptic curves whose embedding degree is 1 have been often focused on, for example some composite order pairing-based cryptographies do. In the case of non-symmetric pairings whose embedding degree is larger than 2, recent efficient pairing techniques such as Rate and Xate pairings adopt a certain special rational point group with an efficient isomorphic mapping and then accelerate pairing-related operations such as a pairing calculation and a scalar multiplication. Based on cubic, quartic, and sextic twists, this paper shows how to activate these efficient techniques together with point compression on pairing-friendly curves of embedding degree 1. © 2011 IEEE.

DOI： 10.1109/icc.2011.5962421

Other Link： https://dblp.uni-trier.de/db/conf/icc/icc2011.html#IzutaNM11

Efficient Non Symmetric Pairing Groups on Ordinary Pairing Friendly Curve of Embedding Degree 1 Reviewed

Tetsuya Izuta, Yasuyuki Nogami, Yoshitaka Morikawa

2011 IEEE INTERNATIONAL CONFERENCE ON COMMUNICATIONS (ICC) 2011

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

Recently, ordinary pairing-friendly elliptic curves whose embedding degree is 1 have been often focused on, for example some composite order pairing-based cryptographies do. In the case of non-symmetric pairings whose embedding degree is larger than 2, recent efficient pairing techniques such as Rate and Xate pairings adopt a certain special rational point group with an efficient isomorphic mapping and then accelerate pairing-related operations such as a pairing calculation and a scalar multiplication. Based on cubic, quartic, and sextic twists, this paper shows how to activate these efficient techniques together with point compression on pairing-friendly curves of embedding degree 1.

Anonymous IEEE802.1X Authentication System Using Group Signatures.

Amang Sudarsono, Toru Nakanishi 0001, Yasuyuki Nogami, Nobuo Funabiki

J. Inf. Process. 18 63 - 76 2010

Publishing type：Research paper (scientific journal)

Recently, ubiquitous Internet-access services have been provided by Internet service providers (ISPs) by deploying wireless local area networks (LANs) in public spaces including stations, hotels, and coffee shops. The IEEE802.1X protocol is usually used for user authentications to allow only authorized users to access services. Then, although user personal information of access locations, services, and operations can be easily collected by ISPs and thus, their strict management has been demanded, it becomes very difficult when multiple ISPs provide roaming services by their corporations. In this paper, we present an anonymous IEEE802.1X authentication system using a group signature scheme to allow user authentication without revealing their identities. Without user identities, ISPs cannot collect personal information. As an efficient revocable group signature scheme, we adopt the verifier-local revocation (VLR) type with some modifications for use of the fast pairing computation. We show the implementation of our proposal and evaluation results where the practicality of our system is confirmed for up to 1,000 revoked users.

DOI： 10.2197/ipsjjip.18.63

Accelerating Twisted Ate Pairing with Frobenius Map, Small Scalar Multiplication, and Multi-pairing Reviewed

Yumi Sakemi, Shoichi Takeuchi, Yasuyuki Nogami, Yoshitaka Morikawa

INFORMATION SECURITY AND CRYPTOLOGY - ISISC 2009 5984 47 - 64 2010

Language：English Publishing type：Research paper (international conference proceedings) Publisher：SPRINGER-VERLAG BERLIN

In the case of Barreto-Naehrig pairing-friendly curves of embedding degree 12 of order r, recent efficient Ate pairings such as R-ate, optimal, and Xate pairings achieve Miller loop lengths of (1/4) left perpendicularlog(2) r right perpendicular]. On the other hand, the twisted Ate pairing requires (3/4) left perpendicularlog(2) r right perpendicular] loop iterations, and thus is usually slower than the recent efficient Ate pairings. This paper proposes an improved twisted Ate pairing using Frobenius maps and a small scalar multiplication. The proposal splits the Miller's algorithm calculation into several independent parts, for which multi-pairing techniques apply efficiently. The maximum number of loop iterations in Miller's algorithm for the proposed twisted Ate pairing is equal to the (1/4) left perpendicularlog(2) r right perpendicular] attained by the most efficient Ate pairings.

DOI： 10.1007/978-3-642-14423-3_4

Other Link： https://dblp.uni-trier.de/db/conf/icisc/icisc2009.html#SakemiTNM09

Anonymous IEEE802.1X Authentication System Using Group Signatures

Sudarsono Amang, Nakanishi Toru, Nogami Yasuyuki, Funabiki Nobuo

Information and Media Technologies 5 ( 2 ) 751 - 764 2010

Language：English Publisher：Information and Media Technologies Editorial Board

Recently, ubiquitous Internet-access services have been provided by Internet service providers (ISPs) by deploying wireless local area networks (LANs) in public spaces including stations, hotels, and coffee shops. The IEEE802.1X protocol is usually used for user authentications to allow only authorized users to access services. Then, although user personal information of access locations, services, and operations can be easily collected by ISPs and thus, their strict management has been demanded, it becomes very difficult when multiple ISPs provide roaming services by their corporations. In this paper, we present an anonymous IEEE802.1X authentication system using a group signature scheme to allow user authentication without revealing their identities. Without user identities, ISPs cannot collect personal information. As an efficient revocable group signature scheme, we adopt the verifier-local revocation (VLR) type with some modifications for use of the fast pairing computation. We show the implementation of our proposal and evaluation results where the practicality of our system is confirmed for up to 1, 000 revoked users.

DOI： 10.11185/imt.5.751

Two Improvements of Twisted Ate Pairing with Barreto-Naehrig Curve by Dividing Miller's Algorithm Reviewed

Yumi Sakemi, Hidehiro Kato, Shoichi Takeuchi, Yasuyuki Nogami, Yoshitaka Morikawa

ICCIT: 2009 FOURTH INTERNATIONAL CONFERENCE ON COMPUTER SCIENCES AND CONVERGENCE INFORMATION TECHNOLOGY, VOLS 1 AND 2 1180 - 1186 2009

Language：English Publishing type：Research paper (international conference proceedings) Publisher：IEEE

This paper shows two improvements of twisted te pairing with Barreto Naehrig curve so as to be efficiently carried out by dividing the calculation loops of Miller's algorithm based on divisor theorem. Then, this paper shows some experimental results from which it is shown that each improvements accelerate twisted- te pairing.

DOI： 10.1109/ICCIT.2009.203

Thread computing for Miller's algorithm of pairing Reviewed

Shoichi Takeuchi, Yumi Sakemi, Yasuyuki Nogami, Yoshitaka Morikawa

Digest of Technical Papers - IEEE International Conference on Consumer Electronics 182 - 186 2009

Language：English Publishing type：Research paper (international conference proceedings)

This paper shows an improvement of Miller's algorithm so as to be effcient for thread programming by using divisor theorem. Then, this paper implements a thread program of the improved Miller's algorithm by which it is shown that the proposed technique is more ef.cient than ordinary Miller's algorithm. ©2009 IEEE.

DOI： 10.1109/ISCE.2009.5156956

Fast implementation of extension fields with Typell ONB and cyclic vector multiplication algorithm Reviewed

Yasuyuki Nogami, Shigeru Shinonaga, Yoshitaka Morikawa

IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences E88-A ( 5 ) 1200 - 1208 2005

Language：English Publishing type：Research paper (scientific journal) Publisher：Institute of Electronics, Information and Communication, Engineers, IEICE

This paper proposes an extension field named TypeII AOPF. This extension field adopts TypeII optimal normal basis, cyclic vector multiplication algorithm, and Itoh-Tsujii inversion algorithm. The calculation costs for a multiplication and inversion in this field is clearly given with the extension degree. For example, the arithmetic operations in TypeII AOPF Fp5 is about 20% faster than those in OFF Fp5, Then, since CVMA is suitable for parallel processing, we show that Typell AOPF is superior to AOPF as to parallel processing and then show that a multiplication in TypeII AOPF becomes about twice faster by parallelizing the CVMA computation in TypeII AOPF. Copyright © 2005 The Institute of Electronics, Information and Communication Engineers.

DOI： 10.1093/ietfec/e88-a.5.1200

Watermarking Method Using PN Diffusion and 1D-Fourier Transform of Multi-Resolution Approximation for Image

TSUGE Koichiro, NOGAMI Yasuyuki, MORIKAWA Yoshitaka

ITE Technical Report 25 ( 83 ) 49 - 54 2001.12

Language：Japanese Publisher：The Institute of Image Information and Television Engineers

In this paper, we propose image digital watermark method which has robustness against image compression and clipping. In this method, we first at first take discrete wavelet transform of original image, and get out multi-resolution approximation (MRA). Next, we spread spectrum of the MRA by Pseudo Noise (PN) sequence, and then take 1D-discrete Fourier transform (DFT) of each column. We vary the DFT coefficients according to each bit of watermark information. This method has the features which the third eavesdropper, who don't know the PN sequence, can not decipher the information data and alter them. In detection process, we take the DFT difference between PT-spread MRA of original image and that of watermark-embedded image and calculate shift of the DFT coefficients. Therefore, this method has the advantage that we can detect the watermark information even from the clipping image.

DOI： 10.11485/itetr.25.83.0_49

　 PREV - NEXT 　

1