arXiv:2501.15076cs.CRcs.IT2025-01被引 8

用机器学习信息度量法,快速检测加密系统漏洞。

Cryptanalysis via Machine Learning Based Information Theoretic Metrics

  • 用神经网络估算密文泄漏的互信息,评估安全性
  • 分类模型准确识别非IND-CPA安全的加密算法
  • 小模型即可发现漏洞,适合初步安全审计

机器学习与密码分析均旨在基于输入输出构造函数,但方法迥异。本文将机器学习知识引入密码分析,利用信息论度量进行分布估计。提出两种新方法:通过互信息神经估计计算加密系统的互信息泄露,通过二元交叉熵分类建模选择明文攻击下的不可区分性。这些方法可在已知明文场景下应用于任意加密系统。实验验证了对多个加密方案的有效性,包括基于网络编码的新系统。分类模型高精度识别出不满足IND-CPA安全的算法(如DES、RSA、AES ECB)及参数有缺陷的方案(如计数器减小版AES-CTR)。结果表明,多数情况下小规模神经网络即可有效发现漏洞,提供快速安全检查,辅助判断是否需投入更多资源进行深度破解。

原文摘要 · Abstract (English)

The fields of machine learning (ML) and cryptanalysis share an interestingly common objective of creating a function, based on a given set of inputs and outputs. However, the approaches and methods in doing so vary vastly between the two fields. In this paper, we explore integrating the knowledge from the ML domain to provide empirical evaluations of cryptosystems. Particularly, we utilize information theoretic metrics to perform ML-based distribution estimation. We propose two novel applications of ML algorithms that can be applied in a known plaintext setting to perform cryptanalysis on any cryptosystem. We use mutual information neural estimation to calculate a cryptosystem's mutual information leakage, and a binary cross entropy classification to model an indistinguishability under chosen plaintext attack (CPA). These algorithms can be readily applied in an audit setting to evaluate the robustness of a cryptosystem and the results can provide a useful empirical bound. We evaluate the efficacy of our methodologies by empirically analyzing several encryption schemes. Furthermore, we extend the analysis to novel network coding-based cryptosystems and provide other use cases for our algorithms. We show that our classification model correctly identifies the encryption schemes that are not IND-CPA secure, such as DES, RSA, and AES ECB, with high accuracy. It also identifies the faults in CPA-secure cryptosystems with faulty parameters, such a reduced counter version of AES-CTR. We also conclude that with our algorithms, in most cases a smaller-sized neural network using less computing power can identify vulnerabilities in cryptosystems, providing a quick check of the sanity of the cryptosystem and help to decide whether to spend more resources to deploy larger networks that are able to break the cryptosystem.

密码分析机器学习信息论安全审计

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。