Skip to main content

Maryna Yesina

Followers

3

Following

0

Public Views

Uploads

Papers by Maryna Yesina

Status report on the third round of the NIST post-quantum cryptography standardization process

Radiotekhnika

In recent years, there has been steady progress in the creation of quantum computers. If large-sc... more In recent years, there has been steady progress in the creation of quantum computers. If large-scale quantum computers are implemented, they will threaten the security of many widely used public-key cryptosystems. Key-establishment schemes and digital signatures based on factorization, discrete logarithms, and elliptic curve cryptography will be most affected. Symmetric cryptographic primitives such as block ciphers and hash functions will be broken only slightly. As a result, there has been an intensification of research on finding public-key cryptosystems that would be secure against cryptanalysts with both quantum and classical computers. This area is often called post-quantum cryptography (PQC), or sometimes quantum-resistant cryptography. The goal is to design schemes that can be deployed in existing communication networks and protocols without significant changes. The National Institute of Standards and Technology is in the process of selecting one or more public-key cryptogra...

Comparative characteristics of Crystals-Kyber and Skelya key encapsulation algorithms (DSTU 8961-2019)

Radiotekhnika

In recent years, there has been a significant amount of research related to the development of qu... more In recent years, there has been a significant amount of research related to the development of quantum computers. If such a computer were to be built, it would be able to break existing public-key cryptosystems that are currently used for many purposes. This will seriously affect the privacy and integrity of digital communications, etc. That is why special attention is currently being paid to post-quantum cryptography, the main goal of which is the development of cryptographic systems that are protected from both quantum and classical attacks, and will also be able to interact with existing communication protocols and networks. In view of the significant importance of the practical application of directional encryption algorithms, at the international and state level, special attention was paid to the implementation of the proposed requirements for key encapsulation protocols. Key-establishment algorithms (KEA) form a common secret – the key for a symmetric encryption algorithm. The...

Analysis of views of the European Union on quantum-post-quantum limitations

Radiotekhnika

Virtually all asymmetric cryptographic schemes currently in use are threatened by the potential d... more Virtually all asymmetric cryptographic schemes currently in use are threatened by the potential development of powerful quantum computers. Although there is currently no definite answer and it is very unclear when or even if CRQC will ever be built and the gap between modern quantum computers and the envisioned CRQC is huge, the risk of creating CRQC means that currently deployed public key cryptography must be replaced by quantum-resistant ones alternatives. For example, information encrypted using modern public key cryptography can be recorded by cryptanalysts and then attacked if a QRQC can be created. The potential harm that CRQC could cause is the basis of the motivation to seek countermeasures, even though we have uncertainties about when and if these computers can be built. Deployed systems that use public key cryptography can also take years to update. Post-quantum cryptography is one way to combat quantum computer threats. Its security is based on the complexity of mathemat...

Analysis of methods and algorithms for generating key data for FALCON-like electronic signature algorithms

Radiotekhnika

At present and in the future, mathematical methods, mechanisms and algorithms of standardized asy... more At present and in the future, mathematical methods, mechanisms and algorithms of standardized asymmetric cryptotransformations such as electronic signature (ES) are and will be used for information cryptographic protection. Electronic signature is the main and essential component of cybersecurity, in terms of providing quality information security services such as integrity, irresistibility and authenticity of information and data being processed. However, there are well-founded suspicions that in the post-quantum period the existing ES standards will be broken and compromised using classical and quantum cryptanalytic systems with appropriate mathematical, software and hardware-software. An analysis was performed, which confirms that quantum computers have already been developed, manufactured and used. This work is devoted to the analysis of methods and algorithms for generating key data for Falcon-like algorithms of electronic signature. Some of the basic algorithms for Falcon-shap...

Risk estimation methodology in the post-quantum period

Radiotekhnika

The world is in the process of intensive creation and application of quantum technologies. On May... more The world is in the process of intensive creation and application of quantum technologies. On May 4, 2022, the President of the United States signed the «National Security Memorandum on Promoting United States Leadership in Quantum Computing While Mitigating Risks to Vulnerable Cryptographic Systems». Therefore, advancing leadership is an important challenge in quantum computing in general, while reducing risks to vulnerable cryptographic systems. Accordingly, standardized scientific and methodological support for risk assessment should be justified, accepted and applied at the international and national levels when quantum computing is used in general and especially when quantum computing is used in cryptology. The purpose of the work is to substantiate and develop a risk assessment methodology for quantum computing used in cryptology in the so-called “post-quantum period”. With this aim in view the following components were taken into account: the use of methods that have not yet ...

Technique for Evaluating the Security of Relational Databases Based on the Enhanced Clements–Hoffman Model

Applied Sciences

Obtaining convincing evidence of database security, as the basic corporate resource, is extremely... more Obtaining convincing evidence of database security, as the basic corporate resource, is extremely important. However, in order to verify the conclusions about the degree of security, it must be measured. To solve this challenge, the authors of the paper enhanced the Clements–Hoffman model, determined the integral security metric and, on this basis, developed a technique for evaluating the security of relational databases. The essence of improving the Clements–Hoffmann model is to expand it by including a set of object vulnerabilities. Vulnerability is considered as a separate objectively existing category. This makes it possible to evaluate both the likelihood of an unwanted incident and the database security as a whole more adequately. The technique for evaluating the main components of the security barriers and the database security as a whole, proposed by the authors, is based on the theory of fuzzy sets and risk. As an integral metric of database security, the reciprocal of the ...

Approach to Managing Data From Diverse Sources

2019 10th IEEE International Conference on Intelligent Data Acquisition and Advanced Computing Systems: Technology and Applications (IDAACS)

The goal of the article is to reveal the essence of the approach to managing data from various ty... more The goal of the article is to reveal the essence of the approach to managing data from various types of sources. The proposed approach as a set of methods whose operations are aimed at determining, creating, storing, supporting data, as well as ensuring access to data and processes of manipulating them in one or more sources for effective joint use of data, unlike to the known ones, is based on the concept of the dataspace taking into account the role and place of databases, built based on the schema with the universal basis of relations, in it. This approach provides an end-to-end solution of processing and understanding data expands existing capabilities for consistent processing and data management from loosely coupled diverse data sources in changing functioning conditions.

Substantiation and proposals for the selection, improvement and standardization of the post-quantum electronic signature mechanism at the national and international levels

Radiotekhnika

At present and in the future, mathematical methods, mechanisms and algorithms of standardized asy... more At present and in the future, mathematical methods, mechanisms and algorithms of standardized asymmetric cryptotransformations such as electronic signature (ES) are and will be used for information cryptographic protection. Electronic signature is the main and essential component of cybersecurity, in terms of providing quality information security services such as integrity, irresistibility and authenticity of information and data processed. However, there are well-founded suspicions that in the post-quantum period the existing ES standards will be broken and compromised using classical and quantum cryptanalytic systems with appropriate mathematical, software and hardware-software. An analysis was performed, which confirms that quantum computers have already been developed, manufactured and used. It is believed that the actual state of development and use of powerful quantum computers and their mathematical and software is obviously strictly confidential and secure, and only publicl...

Anonymous electronic signature method

2016 Third International Scientific-Practical Conference Problems of Infocommunications Science and Technology (PIC S&T), 2016

This work deals with consideration the anonymous electronic signature mechanisms based on algorit... more

Comparative Analysis of Key Encapsulation Mechanisms

2019 10th IEEE International Conference on Intelligent Data Acquisition and Advanced Computing Systems: Technology and Applications (IDAACS), 2019

The paper deals with the possible comparative analysis methods of the cryptographic primitives&#3... more The paper deals with the possible comparative analysis methods of the cryptographic primitives' properties. Methods of comparative analysis – analytic hierarchy process and variations of weight indices methods are investigated and analyzed. Conclusions are made and recommendations on the use of the cryptographic primitives' estimation methods are provided. Also the paper is devoted to the comparative analysis of candidates for the post-quantum key encapsulation standard according to the determined estimation technique. During the analysis, the technique of comparing cryptographic algorithms on the basis of expert estimations using the combination of conditional and unconditional criteria by the analytic hierarchy process was used.

Ensuring Database Security with the Universal Basis of Relations

The subject matter of the article is methods and means of the databases (DBs) security ensuring, ... more The subject matter of the article is methods and means of the databases (DBs) security ensuring, built on the basis of the database scheme that is invariant to subject domains (SDs). The goal is to develop a substantiated approach that implements the complex use of various mechanisms ensuring the databases security built on the database schema with the universal basis of relations. The task: based on the analysis of existing database protection mechanisms supported by various database management systems (DBMSs), and features of the destination, construction of the database schema with the universal basis of relations, to develop and present in a systematized form the means and methods ensuring the databases security built on this DB schema. The following results were obtained: solving the problem of protecting databases as the most important corporate resource, in the process of creating database schema invariant to subject domains, special means were developed (in the form of imple...

Analysis and research of digital signature algorithm Picnic

Radiotekhnika, 2020

An important feature of the post-quantum period in cryptography is the significant uncertainty re... more An important feature of the post-quantum period in cryptography is the significant uncertainty regarding the source data for cryptanalysis and counteraction in terms of the capabilities of quantum computers, their mathematical and software, as well as the application of quantum cryptanalysis to existing cryptotransformations and cryptoprotocols. Mathematical methods of digital signature (DS) have been chosen as the main methods of NIST USA, which have undergone significant analysis and substantiation in the process of extensive research by cryptographers and mathematicians at the highest level. They are described in detail and studied at the first stage of the US NIST International Competition. In the second round, a number of decisions were made to merge some candidates for the post-quantum DS standard. 9 candidates were left for further research at the 2nd round: Crystals-Dilithium, Falcon, GeMSS, LUOV, MQDSS, Picnic, qTESLA, Rainbow and SPHINCS+. Three of them (Dilithium, Falcon,...

Post-quantum algorithm of asymmetric encryption and its basic properties

2018 IEEE 9th International Conference on Dependable Systems, Services and Technologies (DESSERT), 2018

In this work NTRU-like cryptosystem NTRU Prime IIT Ukraine, which is created on the basis of exis... more In this work NTRU-like cryptosystem NTRU Prime IIT Ukraine, which is created on the basis of existing cryptographic transformations end-to-end encryption type, is considered. The description of this cryptosystem is given and its analysis is carried out. Also, features of its implementation, comparison of the main characteristics and indicators, as well as the definition of differences from existing NTRU-like cryptographic algorithms are presented. Conclusions are made and recommendations are given.

Аналіз алгоритму направленого шифрування NTRU PRIME IIT UKRAINE з урахуванням відомих атак

The paper deals with the modern cryptographic transformations of the asymmetric end-to-end encryp... more The paper deals with the modern cryptographic transformations of the asymmetric end-to-end encryption type, namely-NTRU-like cryptographic systems. A new cryptographic system NTRU Prime IIT Ukraine was created based on existing cryptographic transformations of this type (cryptographic algorithms NTRU (ANSI X9.98-2010) and NTRU Prime). A brief description of this cryptographic system is given and an analysis of its resistance to known attacks is made. At the end of the work, conclusions are made and recommendations on the features, advantages and possibilities of using the new cryptographic asymmetric algorithm of end-to-end encryption NTRU Prime IIT Ukraine are given.

Ensuring Data Integrity in Databases with the Universal Basis of Relations

Applied Sciences, 2021

The objective of the paper was to reveal the main techniques and means of ensuring the integrity ... more The objective of the paper was to reveal the main techniques and means of ensuring the integrity of data and persistent stored database modules implemented in accordance with the recommendations of the Clark–Wilson model as a methodological basis for building a system that ensures integrity. The considered database was built according to the schema with the universal basis of relations. The mechanisms developed in the process of researching the problem of ensuring the integrity of the data and programs of such a database were based on the provisions of the relational database theory, the Row Level Security technology, the potential of the modern blockchain model, and the capabilities of the database management system on the platform of which databases with the universal basis of relations are implemented. The implementation of the proposed techniques and means, controlling the integrity of the database of stored elements, prevents their unauthorized modification by authorized subjec...

Analysis of hardware implementations of electronic signature algorithms qTesla, Crystals-Dilitium and MQDSS at different levels of security

Radiotekhnika, 2021

It is known, that existing public-key cryptography algorithms based on RSA and elliptic curves pr... more It is known, that existing public-key cryptography algorithms based on RSA and elliptic curves provide security guarantees accompanied by complexity. Based on this one can talk about the impossibility to solve problems of integer factorization and discrete logarithm. However, experts predict that the creation of a quantum computer will be able to crack classical cryptographic algorithms. Due to this future problem, the National Institute of Standards and Technologies (NIST), together with leading scientists in the field of cryptography, began an open process of standardizing public-key algorithms for quantum attacks. An important feature of the post-quantum period in cryptography is the significant uncertainty regarding the source data for cryptanalysis and counteraction in terms of the capabilities of quantum computers, their mathematical and software, as well as the application of quantum cryptanalysis to existing cryptotransformations and cryptoprotocols. Mathematical methods of ...

Basic principles and results of comparison of electronic signatures properties of the postquantum period based on algebraic lattices

Radiotekhnika, 2021

The paper considers post-quantum projects of the Falcon and Dilithium electronic signature standa... more The paper considers post-quantum projects of the Falcon and Dilithium electronic signature standards (ES), which are finalists of the NIST USA competition. The mathematical apparatus of algebraic lattices and appropriate methods are used in their construction. In further study and comparison of these post-quantum ES draft standards, both from a theoretical and practical standpoint, it is fundamental to substantiate the requirements for parameters and keys and in general to calculate the main indicators according to the accepted conditional and unconditional criteria. In such studies, it is important to determine the sufficiency of ensuring the guarantee of their security against classical, quantum, special and error-based attacks. This can be ensured, inter alia, through a reasonable choice of the sizes of common parameters and keys, and their practical construction in accordance with the adopted security model. However, when choosing the sizes of common parameters and keys, a signi...

Research and analysis of implementations of the NIST PQC competition second round candidates focused on the Xilinx FPGA family

Radiotekhnika, 2021

Today, the question of the stability of modern existing cryptographic mechanisms to quantum algor... more Today, the question of the stability of modern existing cryptographic mechanisms to quantum algorithms of cryptanalysis in particular and quantum computers in general is quite acute. This issue is actively discussed at the international level. Therefore, to solve it, NIST USA has decided to organize and is currently holding a competition for candidates for post-quantum cryptographic algorithms NIST PQC. The result of the competition should be the adoption of various types of cryptographic algorithms for standardization, namely, asymmetric encryption, key encapsulation and electronic signature (at least one algorithm of each type). 82 algorithms were submitted by the start of the competition for the standardization process. Based on the minimum eligibility criteria defined by NIST, 69 algorithms were considered for the 1st round. Given several parameters, namely, security, cost, performance, implementation characteristics, etc., 43 and 11 algorithms were excluded at the end of the 1s...

Generation of general system parameters for Rainbow electronic signature scheme for 384 and 512 security bits

Radiotekhnika, 2021

Today, there is rapid progress in the creation of quantum computers to solve various computationa... more Today, there is rapid progress in the creation of quantum computers to solve various computational problems and for different purposes. At the same time, special efforts are made to create such a quantum computer that can solve the problems of cryptanalysis of existing cryptosystems: asymmetric ciphers, key encapsulation protocols, electronic signatures, etc. Prevention of such threats can be achieved by developing cryptographic systems that will be protected against both quantum and classical attacks, and be able to interact with existing protocols and communication networks. There is also a significant need for protection against attacks by side channels. Currently, significant efforts of cryptologists are focused on the NIST PQC open competition. The main idea of the NIST PQC competition is to define mathematical methods based on which standards for asymmetric cryptotransformations, primarily electronic signatures, as well as asymmetric ciphers and key encapsulation protocols ca...

Substantiation of requirements and ways of their realization at synthesis of proof-stable perspective electronic signatures

Physico-mathematical modelling and informational technologies, 2021

The paper identifies and substantiates the requirements and ways to implement these requirements ... more The paper identifies and substantiates the requirements and ways to implement these requirements at the synthesis of proof-stable perspective electronic signatures. Today there is a problem of building post-quantum electronic signatures. At the stages of solving this problem, a wide range of requirements for technical, technical-economical and other capabilities is formed. At the national and international levels, in the most generalized form, these requirements are implemented at the NIST USA level during the NIST PQC competition for electronic signatures, asymmetric ciphers and key encapsulation protocols. In Ukraine, work is also underway to synthesize such post-quantum cryptotransformations. Requirements in these areas are justified and approved at the state level. The peculiarity of the national requirements is that the requirements for protection against special quantum attacks and attacks through side channels have been significantly increased.