Abstract
This paper examines the impact of the primary symmetric key cryptographic operation on network data streams, encryption of user data, have on the overall traffic throughput. The encryption function which provides the basic confidentiality security service is studied from two cryptographic design perspectives based on the ability of a network cipher unit to dynamically re-parameterize itself while processing a high speed data stream. The designs studied in this paper were chosen based on their suitability for high speed network operation and their flexibility in satisfying dynamic security requirements. We develop analytical techniques to model the performance of each scheme.
This is a preview of subscription content, log in via an institution to check access.
Preview
Unable to display preview. Download preview PDF.
Similar content being viewed by others
References
The SafeNet ADSP2141L from Analog Devices, Inc. (March 1999), Available from http://www.analog.com/
The ATM Forum, Mountain View, CA. ATM Security Specification, Version 1.0, af-sec-0100.000 edition (February 1999)
Bahadur, R.R., Rao, R.R.: On deviations of the simple mean. Annals of Mathematical Statistics 31(2), 1015–1027 (1960)
Baudron, O., Gilbert, H., Granboulan, L., Handschuh, H., Joux, A., Nguyen, P., Noilhan, F., Pointcheval, D., Pornin, T., Poupard, G., Stern, J., Vaudenay, S.: Report on the AES candidates. In: Second Advanced Encryption Standard (AES) Candidate Conference, Rome, Italy. NIST (1999)
CDI 2100 cryptographic processor from Cognitive Designs, Inc, (May 1999), Available from http://www.cognitive-designs.com/
Chuang, S.-C.: Securing ATM networks. In: Proceedings of the Third ACM Conference on Computer and Communications Security (CCS 1996), New Delhi, India, pp. 19–30. ACM Press, New York (1996)
Chuang, S.-C.: Securing ATM networks. Journal of Computer Security 4, 289–329 (1996)
Claesen, L., Daemen, J., Genoe, M., Peeters, G.: Subterranean: A 600 Mbit/sec cryptographic VLSI chip. In: Straub, E. (ed.) Proceedings of the IEEE International Conference on Computer Design: VLSI in Computers and Processors (ICCD 1993), Cambridge, MA, pp. 610–613. IEEE Computer Society Press, Los Alamitos (1993)
Daemen, J., Rijmen, V.: The block cipher Rijndael. In: Proceedings of CAR-DIS 1998: Third Smart Card Research and Advanced Applications Conference, Louvain-la-Neuve, Belgium. LNCS, Springer, Heidelberg (1998)
Higginbottom, G.N.: Performance Evaluation of Computer Networks. Artech House, Inc., Norwood (1998)
National Bureau of Standards, U.S. Department of Commerce. Data Encryption Standard. Federal Information Processing Standards Publications (FIPS PUB) 46 (January 1977)
National Institute of Standards and Technology, U.S. Department of Commerce. DES Modes of Operation. Federal Information Processing Standards Publication (FIPS PUB) 186 (May 1994)
Onvural, R.O.: Asynchronous Transfer Mode Networks: Performance Issues. Ar-tech House, Inc., Norwood (1994)
Pierson, L.G., Witzke, E.L., Bean, M.O., Trombley, G.J.: Context-agile encryption for high speed communication networks. SIGCOMM Computer Communication Review 29(1), 9–9 (1999)
Rueppel, R.A.: Stream ciphers. In: Simmons, G.J. (ed.) Contemporary Cryptology: The Science of Information Integrity, pp. 65–134. IEEE Press, New York (1992)
Schneier, B., Kelsey, J., Whiting, D., Wagner, D., Hall, C.: On the twofish key schedule. In: Tavares, S., Meijer, H. (eds.) SAC 1998. LNCS, vol. 1556, pp. 27–42. Springer, Heidelberg (1998)
Schneier, B., Kelsey, J., Whiting, D., Wagner, D., Hall, C., Ferguson, N.: Performance comparison of the AES submissions. In: Second Advanced Encryption Standard (AES) Candidate Conference, Rome, Italy. NIST (March 1999)
Sholander, P.E., et al.: The effect of algorithm-agile encryption on ATM quality of service. In: Proceedings of IEEE GLOBECOM 1997, Phoenix, AZ, pp. 470–474. IEEE Computer Society Press, Los Alamitos (1997)
Smart, N.P.: One key to rule them all. Technical Report HPL-1999-26, Extended Enterprise Laboratory, HP Laboratories Bristol, UK (March 1999)
Stevenson, D., Hillery, N., Byrd, G.: Secure communications in ATM networks. Communications of the ACM 38(2), 45–52 (1995)
Tarman, T.D., Hutchinson, R.L., Pierson, L.G., Sholander, P.E., Witzke, E.L.: Algorithm-agile encryption in ATM networks. IEEE Computer 31(9), 57–64 (1998)
Tarman, T.D., Hutchinson, R.L., Sholander, P.E., Granfield, R.J., Pierson, L.G., Robertson, P.J., Witzke, E.L.: Final report for the robustness-agile asynchronous transfer mode (ATM) encryption laboratory directed research and development project. Technical Report SAND97-2902, Sandia National Laboratories, Albuquerque, NM (December 1997)
Walrand, J., Varaiya, P.: High-Performance Communication Networks. Morgan Kaufmann Publishers, Inc., San Francisco (1996)
Zhang, L., Deering, S., Estrin, D., Shenker, S., Zappala, D.: Rsvp: A new resource reservation protocol. IEEE Network Magazine 7, 8–18 (1993)
Zheng, Y.: The SPEED cipher. In: Hirschfeld, R. (ed.) FC 1997. LNCS, vol. 1318, pp. 71–89. Springer, Heidelberg (1997)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2000 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Gamage, C.G., Leiwo, J., Zheng, Y. (2000). High Performance Agile Crypto Modules. In: Dawson, E.P., Clark, A., Boyd, C. (eds) Information Security and Privacy. ACISP 2000. Lecture Notes in Computer Science, vol 1841. Springer, Berlin, Heidelberg. https://doi.org/10.1007/10718964_7
Download citation
DOI: https://doi.org/10.1007/10718964_7
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-67742-0
Online ISBN: 978-3-540-45030-6
eBook Packages: Springer Book Archive