AES Based White Box Cryptography in Digital Signature Verification

• Published in: Sensors (Basel, Switzerland) Vol. 22; no. 23; p. 9444
• Main Authors: Shukla, Piyush Kumar, Aljaedi, Amer, Pareek, Piyush Kumar, Alharbi, Adel R, Jamal, Sajjad Shaukat
• Format: Journal Article
• Language: English
• Published: Switzerland MDPI AG 02.12.2022; MDPI
• Subjects: AES; Algorithms; attack; Communication; Computer Security; Confidentiality; Cryptography; Data security; digital signature; Digital signatures; Internet of Things; Models, Theoretical; Security services; Software; Verification; white box cryptography; Germany; digital signature; white box cryptography; attack; AES
• ISSN: 1424-8220; 1424-8220
• DOI: 10.3390/s22239444

According to the standard paradigm, white box cryptographic primitives are used to block black box attacks and protect sensitive information. This is performed to safeguard the protected information and keys against black box assaults. An adversary in such a setting is aware of the method and can analyze many system inputs and outputs, but is blind to the specifics of how a critical instantiation primitive is implemented. This is the focus of white-box solutions, which are designed to withstand attacks that come from the execution environment. This is significant because an attacker may obtain unrestricted access to the program's execution in this environment. The purpose of this article is to assess the efficiency of white-box implementations in terms of security. Our contribution is twofold: first, we explore the practical implementations of white-box approaches, and second, we analyze the theoretical foundations upon which these implementations are built. First, a research proposal is crafted that details white-box applications of DES and AES encryption algorithms. To begin, this preparation is necessary. The research effort planned for this project also includes cryptanalysis of these techniques. Once the general cryptanalysis results have been examined, the white-box design approaches will be covered. We have decided to launch an investigation into creating a theoretical model for white box, since no prior formal definitions have been offered, and suggested implementations have not been accompanied by any assurance of security. This is due to the fact that no formal definition of "white box" has ever been provided. In this way lies the explanation for why this is the situation. We define WBC to encompass the security requirements of WBC specified over a white box cryptography technology and a security concept by studying formal models of obfuscation and shown security. This definition is the product of extensive investigation. This state-of-the-art theoretical model provides a setting in which to investigate the security of white-box implementations, leading to a wide range of positive and negative conclusions. As a result, this paper includes the results of a Digital Signature Algorithm (DSA) study which may be put to use in the real world with signature verification. Possible future applications of White Box Cryptography (WBC) research findings are discussed in light of these purposes and areas of investigation.