IMPROVING THE STATISTICAL CHARACTERISTICS OF A SEQUENCE OF RANDOM NUMBERS OBTAINED FROM A WEB CAMERA FRAME - Наукові конференції
Головна
UA RU EN

Вас вітає Інтернет конференція!

Вітаємо на нашому сайті

Рік заснування видання - 2011

IMPROVING THE STATISTICAL CHARACTERISTICS OF A SEQUENCE OF RANDOM NUMBERS OBTAINED FROM A WEB CAMERA FRAME

12.06.2024 15:18

[1. Інформаційні системи і технології]

Автор: Dmytro Hanzhelo, PhD student, Chernivtsi National University name Yuriy Fedkovych, Chernivtsi; Denis Trembach, PhD student, Chernivtsi National University name Yuriy Fedkovych, Chernivtsi; Maksym Zhubia, student, Chernivtsi National University name Yuriy Fedkovych, Chernivtsi; Rostyslav Diachuk, PhD student, Chernivtsi National University name Yuriy Fedkovych, Chernivtsi


ORCID: 0000-0002-0836-4568 Dmytro Hanzhelo

ORCID: 0000-0001-8095-4186 Denis Trembach

The object of study of this work is the statistical characteristics of a sequence of random numbers (RNS) obtained from a web camera frame. The task under consideration was to improve the statistical indicators of the resulting sequence for compliance with cryptographic protection requirements.

In modern software engineering, there is an acute issue of generating RNS that would satisfy the requirements of cryptographic protection: randomness, long cycling period, uniformity of distribution.

Algorithms for software (pseudorandom) generation are publicly available, for example, Oracle Java documentation [1], and the hacking algorithm is described in detail in [2,3]. This demonstrates a purely theoretical attack on the generation algorithm, albeit with the involvement of huge computing power.

Thus, the task of creating a hardware RNS generator based on a natural stochastic source of non-deterministic chaos is becoming increasingly urgent. The sequence of numbers obtained from a web camera frame can be considered completely random due to the unpredictability of the image frame itself.

The use of web camera frames must satisfy a set of the basic rules of cryptographic strength, among them is the uniform distribution of elements by value. It is not always possible to quickly check such a sequence for compliance with NIST requirements - the minimum volume for verification is 100 Mbit.

In [4], the authors assessed the level of uniformity in the distribution of RNS elements generated using a web camera and concluded that in the general case this level does not meet the requirements of cryptographic protection.

In this work, it is proposed to create a graphical image, a snapshot from which will allow you to create a RNS with a uniform distribution of elements by value and volume both. To do this, the Java programming language was used, in particular the java.awt.image.BufferedImage and java.security.SecureRandom package. As a code snippet it would look like the following: 

var image = new BufferedImage(width, height, BufferedImage.TYPE_INT_RGB);

int limit = 255 * 255 * 255;

for (int x = 0; x < 1920; x++) {

    for (int y = 0; y < 1080; y++) {

        image.setRGB(x, y, new  SecureRandom().nextInt(0, limit));

    }

}

The above code creates a picture with a size of 1920×1080, where all colors are presented chaotically in the RGB range from (0,0,0) - absolutely black, to (255, 255, 255) - absolutely white. The location of these points on the frame is pseudo-random and uniformly distributed by default, because they were generated programmatically. Chaoticity and uniformity of distribution by value and volume are guaranteed by the java.security.SecureRandom package.

If you reproduce this image on the monitor screen and capture it with a web camera, then from this web camera frame you can obtain RNS that satisfies all the requirements of cryptographic protection.

Really, the randomness and uniformity of the distribution are guaranteed by the Java program language package java.security.SecureRandom, and the randomness is increased by the stochastic behaviour of the pixels of the photodiode matrix. Work [5] demonstrated a 60% level of avalanche effect the web camera matrix even for complete darkness (10-2 lux).

Figure 1 shows a sample of the generated image with a size of 1920 × 1080.




Figure 1. Uniform distribution of all colors and shades of the palette.

From this frame, the RNS was obtained in the QQVGA (176 × 144) mode, which introduced an additional amount of chaos. The statistical characteristics of this RNS confirmed preliminary compliance with the cryptographic strength requirements.

Conclusion: by selecting a web camera frame, it is possible to generate an absolutely random PNG in an apparatus mode that will satisfy the requirements of cryptographic protection.

References:

1. Class SecureRandom. All Implemented Interfaces. URL: https://docs.oracle.com/javase/8/docs/api/java/security/SecureRandom.html

2. M. Cornejo, S. Ruhault, “(In)Security of Java SecureRandom Implementations”, Journées Codage et Cryptographie, 2014. https://www-fourier.ujf-grenoble.fr/JC2/exposes/ruhault.pdf

3. Martinez, F. (2022). Attacks on Pseudo Random Number Generators Hiding a Linear Structure. In: Galbraith, S.D. (eds) Topics in Cryptology – CT-RSA 2022. CT-RSA 2022. Lecture Notes in Computer Science, vol 13161. Springer, Cham. https://doi.org/10.1007/978-3-030-95312-6_7

4. R. Li, "A True Random Number Generator algorithm from digital camera image noise for varying lighting conditions," SoutheastCon 2015, Fort Lauderdale, FL, USA, 2015, pp. 1-8, doi: 10.1109/SECON.2015.7132901. https://ieeexplore.ieee.org/document/7132901

5. HANZHELO D.V., PROKHOROV G.V., INVESTIGATION OF NUMERICAL RANDOM SEQUENCE OBTAINED FROM WEB CAMERA. (2024). Herald of Khmelnytskyi National University. Technical Sciences, 333(2), 120-124. https://doi.org/10.31891/2307-5732-2024-333-2-18



Creative Commons Attribution Ця робота ліцензується відповідно до Creative Commons Attribution 4.0 International License
допомога Знайшли помилку? Виділіть помилковий текст мишкою і натисніть Ctrl + Enter

Інші наукові праці даної секції

Конференції

Конференції 2024

Конференції 2023

Конференції 2022

Конференції 2021



Міжнародна інтернет-конференція з економіки, інформаційних систем і технологій, психології та педагогіки

Наукова спільнота - інтернет конференції

:: LEX-LINE :: Юридична лінія

Інформаційне суспільство: технологічні, економічні та технічні аспекти становлення