Top Banner
DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK [email protected] http://www.dcs.warwick.ac.uk/ ~feng/dsp.html
37
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

DCSP-11

Jianfeng Feng

Department of Computer Science Warwick Univ., UK

[email protected]

http://www.dcs.warwick.ac.uk/~feng/dsp.html

Page 2: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

Error detection coding

Page 3: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

A very common code is the single parity check code.

Page 4: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

A very common code is the single parity check code.

This code appends to each K data bits an additional bit whose value is taken to make the K+1 word even or odd.

Page 5: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

A very common code is the single parity check code.

This code appends to each K data bits an additional bit whose value is taken to make the K+1 word even or odd.

Such a choice is said to have even (odd) parity.

Page 6: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

A very common code is the single parity check code.

This code appends to each K data bits an additional bit whose value is taken to make the K+1 word even or odd.

Such a choice is said to have even (odd) parity.

With even off parity, a single bit error will make the received word odd (even).

Page 7: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

To see how the additional of a parity bit can improve error performance, consider the following example.

Page 8: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

To see how the additional of a parity bit can improve error performance, consider the following example.

A common choice of code block is eight.

Suppose that BER is p=10-4. Then

Page 9: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

So, the probability of a transmission with an error is as above.

With the additional of a parity error bit we can detect any single bit error.

Page 10: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

As can be seen the addition of a parity bit has reduced theuncorrected error rate by three orders or magnitude.

Page 11: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

Single parity bits are common in asynchronous transmission.

Where synchronous transmission is used, additional parity symbols are added that check not only the parity of each 8 bit row, but also the parity of each 8 bit column.

The column is formed by listing each successive 8 bit word one beneath the other.

This type of parity checking is called lock sum checking, and it can correct any single 2 bit error in the transmitted block of rows and columns.

However, there are some combinations of errors that will go undetected in such a scheme.

Page 12: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.
Page 13: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

Parity checking in this way provides good protection against single and multiple errors when the probability of the errors are independent.

However, in many circumstances, errors occur in groups, or bursts.

Parity checking the kind just described than provides little protection.

In these circumstances, a polynomial code is used.

Page 14: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

Encryption

Page 15: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

EncryptionIn all our discussion of coding, we have not mentioned what

is popularly supposed to be the purpose of coding: security.

Page 16: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

EncryptionIn all our discussion of coding, we have not mentioned what

is popularly supposed to be the purpose of coding: security.

We have only considered coding as a mechanism for improving the integrity of the communication system in the presence of noise.

Page 17: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

EncryptionIn all our discussion of coding, we have not mentioned what

is popularly supposed to be the purpose of coding: security.

We have only considered coding as a mechanism for improving the integrity of the communication system in the presence of noise.

The use of coding for security has a different name: encryption.

Page 18: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

EncryptionIn all our discussion of coding, we have not mentioned what

is popularly supposed to be the purpose of coding: security.

We have only considered coding as a mechanism for improving the integrity of the communication system in the presence of noise.

The use of coding for security has a different name: encryption.

encryption is the process of obscuring information to make it unreadable without special knowledge

The use of digital computers has made highly secure communication a normal occurrence.

Page 21: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

The basis for key based encryption is that is very much easier to encrypt with knowledge of the key than it is to decipher without knowledge of the key.

Secret key cryptography:

uses a single secret key for both encryption and decryption.

Page 22: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

• Public key cryptography, also known as matched key cryptography, is a form of cryptography in which a user has a pair of cryptographic keys - a public key and a private key.

Page 23: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

• Public key cryptography, also known as matched key cryptography, is a form of cryptography in which a user has a pair of cryptographic keys - a public key and a private key.

The private key is kept secret, while the public key may be widely distributed.

The keys are related mathematically, but the private key cannot be practically derived from the public key.

Page 24: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

• Public key cryptography, also known as matched key cryptography, is a form of cryptography in which a user has a pair of cryptographic keys - a public key and a private key.

The private key is kept secret, while the public key may be widely distributed.

The keys are related mathematically, but the private key cannot be practically derived from the public key.

A message encrypted with the public key can only be decrypted with the corresponding private key.

Page 25: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

This key is use by the sender to encrypt the message.

This message is unintelligible to anyone not in possession of the second, private key.

In this way the private key need not be transferred.

The most famous of such scheme is the public Key mechanism using work of Rivest, Shamir and Adleman (RSA).

It is based on the use of multiplying extremely large numbers and, with current technology, is computationally very expensive.

Page 26: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

RSA numbers are composite numbers having exactly two prime factors that have been listed in the Factoring Challenge of RSA Security® and have been particularly chosen to be difficult to factor.

While RSA numbers are much smaller than the largest known primes, their factorization is significant because of the curious property of numbers that proving or disproving a number to be prime ("primality testing") seems to be much easier than actually identifying the factors of a number ("prime factorization").

Page 27: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

Thus, while it is trivial to multiply two large numbers and together, it can be extremely difficult to determine the factors if only their product is given.

With some ingenuity, this property can be used to create practical and efficient encryption systems for electronic data.

RSA Laboratories sponsors the RSA Factoring Challenge to encourage research into computational number theory and the practical difficulty of factoring large integers, and because it can be helpful for users of the RSA encryption public-key cryptography algorithm for choosing suitable key lengths for an appropriate level of security.

A cash prize is awarded to the first person to factor each challenge number.

Page 28: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

RSA numbers were originally spaced at intervals of 10 decimal digits between 100 and 500 digits, and prizes were awarded according to a complicated formula.

These original numbers were named according to the number of decimal digits, so RSA-100 was a hundred-digit number.

As computers and algorithms became faster, the unfactored challenge numbers were removed from the prize list and replaced with a set of numbers with fixed cash prizes.

At this point, the naming convention was also changed so that the trailing number would indicate the number of digits in the binary representation of the number.

Page 29: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

Hence, RSA-640 has 640 binary digits, which translates to 193 digits in decimal.

RSA numbers received widespread attention when a 129-digit number known as RSA-129 was used by R. Rivest, A. Shamir, and L. Adleman to publish one of the first public-key messages together with a $100 reward for the message's decryption (Gardner 1977).

Despite widespread belief at the time that the message encoded by RSA-129 would take millions of years to break, it was factored in 1994 using a distributed computation which harnessed networked computers spread around the globe performing a multiple polynomial quadratic sieve (Leutwyler 1994).

The corresponding factorization (into a 64-digit number and a 65-digit number) is

Page 30: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

                                                                                  

x

Page 31: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

RSA-129 is referred to in the Season 1 episode "Prime Suspect" of the television crime drama NUMB3RS.

On Feb. 2, 1999, a group led by H. te Riele

completed factorization of RSA-140 into two 70-digit primes.

In a preprint dated April 16, 2004, Aoki et al. factored RSA-150 into two 75-digit primes.

On Aug. 22, 1999, a group led by H. te Riele completed factorization of RSA-155 into two 78-digit primes (te Riele 1999b, Peterson 1999).

Page 32: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

On December 2, Jens Franke circulated an email announcing factorization of the smallest prize number RSA-576 (Weisstein 2003).

This factorization into two 87-digit factors was accomplished using a prime factorization algorithm known as the general number field sieve (GNFS).

On May 9, 2005, the group led by Franke announced factorization of RSA-200 into two 100-digits primes (Weisstein 2005a), and in November 2005, the same group announced the factorization of RSA-674 (Weisstein 2005b).

As the following table shows, RSA-704 to RSA-2048

remain open, carrying awards from ? to ? to whoever is clever and persistent enough to track them down.

Page 33: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

A list of the open Challenge numbers may be downloaded from RSA homepage

Page 34: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

Number digits prize factored (references)

RSA-100 100  Apr. 1991RSA-110 110  Apr. 1992RSA-120 120  Jun. 1993RSA-129 129 Apr. 1994 (Leutwyler 1994, Cipra 1995)RSA-130 130  Apr. 10, 1996RSA-140 140  Feb. 2, 1999 (te Riele 1999a)RSA-150 150  Apr. 6, 2004 (Aoki 2004)RSA-155 155  Aug. 22, 1999 (te Riele 1999b, Peterson 1999)RSA-160 160  Apr. 1, 2003 (Bahr et al. 2003)RSA-200 200  May 9, 2005 (see Weisstein 2005a)RSA-576 10000 Dec. 3, 2003 (Franke 2003; see Weisstein 2003)

RSA-640 20000 Nov. 4, 2005 (see Weisstein 2005b)RSA-704 30000 open RSA-768 50000 open RSA-896 75000 openRSA-102 100000 openRSA-153 150000 openRSA-204 200000 open

Page 35: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

An Example

RSA numbers: 7 and 23 (another number 55 is found)

So, we'll take what's left and create the following character set:

  2  3  4  6  7  8  9 12 13 14 16 17 18  A  B  C  D  E  F  G  H  I  J  K  L  M 

19 21 23 24 26 27 28 29 31 32 34 36 37   N  O  P  Q  R  S  T  U  V  W  X  Y  Z 

38 39 41 42 43 46 47 48 49 51 52 53   sp  0  1  2  3  4  5  6  7  8  9  * 

Page 36: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

The message we will encrypt is "VENIO" (Latin for "I come"):

  V E  N  I  O  31 7 19 13 21

To encode it, we simply need to raise each number to the power of P modulo R.

 V:31^7 (mod 55) = 27512614111 (mod 55) =26  E: 7^7 (mod 55) =     823543 (mod 55) =28  N:19^7 (mod 55) =  893871739 (mod 55) =24  I:13^7 (mod 55) =   62748517 (mod 55) = 7  O:21^7 (mod 55) = 1801088541 (mod 55) =21

So, our encrypted message is 26, 28, 24, 7, 21 -- or "RTQEO" in our personalized character set.

Page 37: DCSP-11 Jianfeng Feng Department of Computer Science Warwick Univ., UK Jianfeng.feng@warwick.ac.uk feng/dsp.html.

When the message "RTQEO" arrives on the other end of our insecure phone line, we can decrypt it simply by repeating the process -- this time using Q, our private key, in place of P.

R:26^23 (mod 55) = 350257144982200575261531309080576 (mod 55) =31 

T:28^23 (mod 55) =1925904380037276068854119113162752 (mod 55) = 7 

Q:24^23 (mod 55) =  55572324035428505185378394701824 (mod 55) =19 

E: 7^23 (mod 55) =              27368747340080916343 (mod 55) =13 

O:21^23 (mod 55) =   2576580875108218291929075869661 (mod 55) =21

The result is 31, 7, 19, 13, 21 -- or "VENIO", our original message.