Wen Heping, Zhang Chongfu, Huang Lan, Ke Juxin, Xiong Dongqing
School of Electronic and Information, Zhongshan Institute, University of Electronic Science and Technology of China, Zhongshan 528402, China.
School of Information and Communication Engineering, University of Electronic Science and Technology of China, Chengdu 611731, China.
Entropy (Basel). 2021 Feb 23;23(2):258. doi: 10.3390/e23020258.
Fractional-order chaos has complex dynamic behavior characteristics, so its application in secure communication has attracted much attention. Compared with the design of fractional-order chaos-based cipher, there are fewer researches on security analysis. This paper conducts a comprehensive security analysis of a color image encryption algorithm using a fractional-order hyperchaotic system (CIEA-FOHS). Experimental simulation based on excellent numerical statistical results supported that CIEA-FOHS is cryptographically secure. Yet, from the perspective of cryptanalysis, this paper found that CIEA-FOHS can be broken by a chosen-plaintext attack method owing to its some inherent security defects. Firstly, the diffusion part can be eliminated by choosing some special images with all the same pixel values. Secondly, the permutation-only part can be deciphered by some chosen plain images and the corresponding cipher images. Finally, using the equivalent diffusion and permutation keys obtained in the previous two steps, the original plain image can be recovered from a target cipher image. Theoretical analysis and experimental simulations show that the attack method is both effective and efficient. To enhance the security, some suggestions for improvement are given. The reported results would help the designers of chaotic cryptography pay more attention to the gap of complex chaotic system and secure cryptosystem.
分数阶混沌具有复杂的动态行为特性,因此其在保密通信中的应用备受关注。与基于分数阶混沌的密码设计相比,安全分析方面的研究较少。本文对一种使用分数阶超混沌系统的彩色图像加密算法(CIEA - FOHS)进行了全面的安全分析。基于出色的数值统计结果进行的实验仿真表明,CIEA - FOHS在密码学上是安全的。然而,从密码分析的角度来看,本文发现由于CIEA - FOHS存在一些固有的安全缺陷,它可以被一种选择明文攻击方法破解。首先,通过选择一些所有像素值都相同的特殊图像,可以消除扩散部分。其次,一些选定的明文图像及其对应的密文图像可以破解仅置换部分。最后,利用在前两步中获得的等效扩散和置换密钥,可以从目标密文图像中恢复原始明文图像。理论分析和实验仿真表明,该攻击方法既有效又高效。为提高安全性,给出了一些改进建议。所报道的结果将有助于混沌密码学的设计者更加关注复杂混沌系统与安全密码系统之间的差距。