Forgery attacks on ++AE authenticated encryption mode

In this paper, we analyse a block cipher mode of operation submitted in 2014 to the cryptographic competition for authenticated encryption (CAESAR). This mode is designed by Recacha and called ++AE (plus-plus-ae). We propose a chosen plaintext forgery attack on ++AE that requires only a single chosen message query to allow an attacker to construct multiple forged messages. Our attack is deterministic and guaranteed to pass ++AE integrity check. We demonstrate the forgery attack using 128-bit AES as the underlying block cipher. Hence, ++AE is insecure as an authenticated encryption mode of operation.

A network forensics tool for precise data packet capture and replay in cyber-physical systems

Network data packet capture and replay capabilities are basic requirements for forensic analysis of faults and security-related anomalies, as well as for testing and development. Cyber-physical networks, in which data packets are used to monitor and control physical devices, must operate within strict timing constraints, in order to match the hardware devices' characteristics. Standard network monitoring tools are unsuitable for such systems because they cannot guarantee to capture all data packets, may introduce their own traffic into the network, and cannot reliably reproduce the original timing of data packets. Here we present a high-speed network forensics tool specifically designed for capturing and replaying data traffic in Supervisory Control and Data Acquisition systems. Unlike general-purpose "packet capture" tools it does not affect the observed network's data traffic and guarantees that the original packet ordering is preserved. Most importantly, it allows replay of network traffic precisely matching its original timing. The tool was implemented by developing novel user interface and back-end software for a special-purpose network interface card. Experimental results show a clear improvement in data capture and replay capabilities over standard network monitoring methods and general-purpose forensics solutions.

Initialisation flaws in the A5-GMR-1 satphone encryption algorithm

A5-GMR-1 is a synchronous stream cipher used to provide confidentiality for communications between satellite phones and satellites. The keystream generator may be considered as a finite state machine, with an internal state of 81 bits. The design is based on four linear feedback shift registers, three of which are irregularly clocked. The keystream generator takes a 64-bit secret key and 19-bit frame number as inputs, and produces an output keystream of length between $2^8$ and $2^{10}$ bits. Analysis of the initialisation process for the keystream generator reveals serious flaws which significantly reduce the number of distinct keystreams that the generator can produce. Multiple (key, frame number) pairs produce the same keystream, and the relationship between the various pairs is easy to determine. Additionally, many of the keystream sequences produced are phase shifted versions of each other, for very small phase shifts. These features increase the effectiveness of generic time-memory tradeoff attacks on the cipher, making such attacks feasible.

Positive associations of serum Perfluoroalkyl substances with uric acid and hyperuricemia in children from Taiwan

To investigate the risk of hyperuricemia in relation to Perfluoroalkyl substances (PFASs) in children from Taiwan, 225 Taiwanese children aged 12-15 years were recruited from 2009 to 2010. Linear and logistic regression models were employed to examine the influence of PFASs on serum uric acid levels. Findings revealed that eight of ten PFASs analyses were detected in > 94% of the participants' serum samples. Multivariate linear regression models revealed that perfluorooctanic acid (PFOA) was positively associated with serum uric acid levels (β=0.1463, p<0.05). Of all the PFASs analyses, only PFOA showed a significant effect on elevated levels of hyperuricemia (aOR=2.16, 95%CI: 1.29-3.61). When stratified by gender, the association between serum PFOA and uric acid levels was only evident among boys (aOR=2.76, 95%CI: 1.37-5.56). In conclusion, PFOA was found to be associated with elevated serum levels of uric acid in Taiwanese children, especially boys. Further research is needed to elucidate these links.

Associations of serum perfluoroalkyl acid levels with T-helper cell-specific cytokines in children: By gender and asthma status

Perfluoroalkyl acids (PFAAs) are a group of common chemicals that ubiquitously exist in wildlife and humans. Experimental data suggest that they may alter T-lymphocyte functioning in situ by preferentially enhancing the development of T-helper 2 (TH2)- and inhibiting TH1-lymphocyte development and might increase allergic inflammation, but few human studies have been conducted. To evaluate the association between serum PFAAs concentrations and T-lymphocyte-related immunological markers of asthma in children, and further to assess whether gender modified this association, 231 asthmatic children and 225 non-asthmatic control children from Northern Taiwan were recruited into the Genetic and Biomarker study for Childhood Asthma. Serum concentrations of ten PFAAs and levels of TH1 [interferon (IFN)-γ, interleukin (IL)-2] and TH2 (IL-4 and IL-5) cytokines were measured. The results showed that asthmatics had significantly higher serum PFAAs concentrations compared with the healthy controls. When stratified by gender, a greater number of significant associations between PFAAs and asthma outcomeswere found in males than in females. Among males, adjusted odds ratios for asthma among those with the highest versus lowest quartile of PFAAs exposure ranged from 2.59 (95% CI: 1.14, 5.87) for the perfluorobutanesulfonate (PFBS) to 4.38 (95% CI: 2.02, 9.50) for perfluorooctanesulfonate (PFOS); and serum PFAAs were associated positively with TH2 cytokines and inversely with TH1 cytokines among male asthmatics. Among females, no significant associations between PFAAs and TH2 cytokines could be detected. In conclusion, increased serum PFAAs levels may promote TH cell dysregulation and alter the availability of key TH1 and TH2 cytokines, ultimately contributing to the development of asthma that may differentially impact males to a greater degree than females. These results have potential relevance in asthma prevention.

Combining unsupervised and invigilated assessment of introductory programming

We compared student performance on large-scale take-home assignments and small-scale invigilated tests that require competency with exactly the same programming concepts. The purpose of the tests, which were carried out soon after the take home assignments were submitted, was to validate the students' assignments as individual work. We found widespread discrepancies between the marks achieved by students between the two types of tasks. Many students were able to achieve a much higher grade on the take-home assignments than the invigilated tests. We conclude that these paired assessments are an effective way to quickly identify students who are still struggling with programming concepts that we might otherwise assume they understand, given their ability to complete similar, yet more complicated, tasks in their own time. We classify these students as not yet being at the neo-Piagetian stage of concrete operational reasoning.