Algebraic attacks on clock-controlled stream ciphers

Stream ciphers are encryption algorithms used for ensuring the privacy of digital telecommunications. They have been widely used for encrypting military communications, satellite communications, pay TV encryption and for voice encryption of both fixed lined and wireless networks. The current multi year European project eSTREAM, which aims to select stream ciphers suitable for widespread adoptation, reflects the importance of this area of research. Stream ciphers consist of a keystream generator and an output function. Keystream generators produce a sequence that appears to be random, which is combined with the plaintext message using the output function. Most commonly, the output function is binary addition modulo two. Cryptanalysis of these ciphers focuses largely on analysis of the keystream generators and of relationships between the generator and the keystream it produces. Linear feedback shift registers are widely used components in building keystream generators, as the sequences they produce are well understood. Many types of attack have been proposed for breaking various LFSR based stream ciphers. A recent attack type is known as an algebraic attack. Algebraic attacks transform the problem of recovering the key into a problem of solving multivariate system of equations, which eventually recover the internal state bits or the key bits. This type of attack has been shown to be effective on a number of regularly clocked LFSR based stream ciphers. In this thesis, algebraic attacks are extended to a number of well known stream ciphers where at least one LFSR in the system is irregularly clocked. Applying algebriac attacks to these ciphers has only been discussed previously in the open literature for LILI-128. In this thesis, algebraic attacks are first applied to keystream generators using stop-and go clocking. Four ciphers belonging to this group are investigated: the Beth-Piper stop-and-go generator, the alternating step generator, the Gollmann cascade generator and the eSTREAM candidate: the Pomaranch cipher. It is shown that algebraic attacks are very effective on the first three of these ciphers. Although no effective algebraic attack was found for Pomaranch, the algebraic analysis lead to some interesting findings including weaknesses that may be exploited in future attacks. Algebraic attacks are then applied to keystream generators using (p; q) clocking. Two well known examples of such ciphers, the step1/step2 generator and the self decimated generator are investigated. Algebraic attacks are shown to be very powerful attack in recovering the internal state of these generators. A more complex clocking mechanism than either stop-and-go or the (p; q) clocking keystream generators is known as mutual clock control. In mutual clock control generators, the LFSRs control the clocking of each other. Four well known stream ciphers belonging to this group are investigated with respect to algebraic attacks: the Bilateral-stop-and-go generator, A5/1 stream cipher, Alpha 1 stream cipher, and the more recent eSTREAM proposal, the MICKEY stream ciphers. Some theoretical results with regards to the complexity of algebraic attacks on these ciphers are presented. The algebraic analysis of these ciphers showed that generally, it is hard to generate the system of equations required for an algebraic attack on these ciphers. As the algebraic attack could not be applied directly on these ciphers, a different approach was used, namely guessing some bits of the internal state, in order to reduce the degree of the equations. Finally, an algebraic attack on Alpha 1 that requires only 128 bits of keystream to recover the 128 internal state bits is presented. An essential process associated with stream cipher proposals is key initialization. Many recently proposed stream ciphers use an algorithm to initialize the large internal state with a smaller key and possibly publicly known initialization vectors. The effect of key initialization on the performance of algebraic attacks is also investigated in this thesis. The relationships between the two have not been investigated before in the open literature. The investigation is conducted on Trivium and Grain-128, two eSTREAM ciphers. It is shown that the key initialization process has an effect on the success of algebraic attacks, unlike other conventional attacks. In particular, the key initialization process allows an attacker to firstly generate a small number of equations of low degree and then perform an algebraic attack using multiple keystreams. The effect of the number of iterations performed during key initialization is investigated. It is shown that both the number of iterations and the maximum number of initialization vectors to be used with one key should be carefully chosen. Some experimental results on Trivium and Grain-128 are then presented. Finally, the security with respect to algebraic attacks of the well known LILI family of stream ciphers, including the unbroken LILI-II, is investigated. These are irregularly clock- controlled nonlinear filtered generators. While the structure is defined for the LILI family, a particular paramater choice defines a specific instance. Two well known such instances are LILI-128 and LILI-II. The security of these and other instances is investigated to identify which instances are vulnerable to algebraic attacks. The feasibility of recovering the key bits using algebraic attacks is then investigated for both LILI- 128 and LILI-II. Algebraic attacks which recover the internal state with less effort than exhaustive key search are possible for LILI-128 but not for LILI-II. Given the internal state at some point in time, the feasibility of recovering the key bits is also investigated, showing that the parameters used in the key initialization process, if poorly chosen, can lead to a key recovery using algebraic attacks.

Randomized trial of effect of bifocal and prismatic bifocal spectacles on myopic progression

Objective: To determine whether bifocal and prismatic bifocal spectacles could control myopia in children with high rates of myopic progression. ---------- Methods: This was a randomized controlled clinical trial. One hundred thirty-five (73 girls and 62 boys) myopic Chinese Canadian children (myopia of 1.00 diopters [D]) with myopic progression of at least 0.50 D in the preceding year were randomly assigned to 1 of 3 treatments: (1) single-vision lenses (n = 41), (2) +1.50-D executive bifocals (n = 48), or (3) +1.50-D executive bifocals with a 3–prism diopters base-in prism in the near segment of each lens (n = 46). ---------- Main Outcome Measures: Myopic progression measured by an automated refractor under cycloplegia and increase in axial length (secondary) measured by ultrasonography at 6-month intervals for 24 months. Only the data of the right eye were used. ---------- Results: Of the 135 children (mean age, 10.29 years [SE, 0.15 years]; mean visual acuity, –3.08 D [SE, 0.10 D]), 131 (97%) completed the trial after 24 months. Myopic progression averaged –1.55 D (SE, 0.12 D) for those who wore single-vision lenses, –0.96 D (SE, 0.09 D) for those who wore bifocals, and –0.70 D (SE, 0.10 D) for those who wore prismatic bifocals. Axial length increased an average of 0.62 mm (SE, 0.04 mm), 0.41 mm (SE, 0.04 mm), and 0.41 mm (SE, 0.05 mm), respectively. The treatment effect of bifocals (0.59 D) and prismatic bifocals (0.85 D) was significant (P < .001) and both bifocal groups had less axial elongation (0.21 mm) than the single-vision lens group (P < .001). ---------- Conclusions: Bifocal lenses can moderately slow myopic progression in children with high rates of progression after 24 months.

Thermal analysis and infrared emission spectroscopic study of halloysite-potassium acetate intercalation compound

The thermal decomposition of halloysite-potassium acetate intercalation compound was investigated by thermogravimetric analysis and infrared emission spectroscopy. The X-ray diffraction patterns indicated that intercalation of potassium acetate into halloysite caused an increase of the basal spacing from 1.00 to 1.41 nm. The thermogravimetry results show that the mass losses of intercalation the compound occur in main three main steps, which correspond to (a) the loss of adsorbed water (b) the loss of coordination water and (c) the loss of potassium acetate and dehydroxylation. The temperature of dehydroxylation and dehydration of halloysite is decreased about 100 °C. The infrared emission spectra clearly show the decomposition and dehydroxylation of the halloysite intercalation compound when the temperature is raised. The dehydration of the intercalation compound is followed by the loss of intensity of the stretching vibration bands at region 3600-3200 cm-1. Dehydroxylation is followed by the decrease in intensity in the bands between 3695 and 3620 cm-1. Dehydration was completed by 300 °C and partial dehydroxylation by 350 °C. The inner hydroxyl group remained until around 500 °C.

Empirical comparison of machine learning algorithms for image texture classification with application to vegetation management in power line corridors

This paper reports on the empirical comparison of seven machine learning algorithms in texture classification with application to vegetation management in power line corridors. Aiming at classifying tree species in power line corridors, object-based method is employed. Individual tree crowns are segmented as the basic classification units and three classic texture features are extracted as the input to the classification algorithms. Several widely used performance metrics are used to evaluate the classification algorithms. The experimental results demonstrate that the classification performance depends on the performance matrix, the characteristics of datasets and the feature used.

Increased Langerhan cell density and corneal nerve damage in diabetic patients : role of immune mechanisms in human diabetic neuropathy

Aim/hypothesis Immune mechanisms have been proposed to play a role in the development of diabetic neuropathy. We employed in vivo corneal confocal microscopy (CCM) to quantify the presence and density of Langerhans cells (LCs) in relation to the extent of corneal nerve damage in Bowman's layer of the cornea in diabetic patients. Methods 128 diabetic patients aged 58±1 yrs with a differing severity of neuropathy based on Neuropathy Deficit Score (NDS—4.7±0.28) and 26 control subjects aged 53±3 yrs were examined. Subjects underwent a full neurological evaluation, evaluation of corneal sensation with non-contact corneal aesthesiometry (NCCA) and corneal nerve morphology using corneal confocal microscopy (CCM). Results The proportion of individuals with LCs was significantly increased in diabetic patients (73.8%) compared to control subjects (46.1%), P=0.001. Furthermore, LC density (no/mm2) was significantly increased in diabetic patients (17.73±1.45) compared to control subjects (6.94±1.58), P=0.001 and there was a significant correlation with age (r=0.162, P=0.047) and severity of neuropathy (r=−0.202, P=0.02). There was a progressive decrease in corneal sensation with increasing severity of neuropathy assessed using NDS in the diabetic patients (r=0.414, P=0.000). Corneal nerve fibre density (P<0.001), branch density (P<0.001) and length (P<0.001) were significantly decreased whilst tortuosity (P<0.01) was increased in diabetic patients with increasing severity of diabetic neuropathy. Conclusion Utilising in vivo corneal confocal microscopy we have demonstrated increased LCs in diabetic patients particularly in the earlier phases of corneal nerve damage suggestive of an immune mediated contribution to corneal nerve damage in diabetes.

Age and gender differences in ambulance utilisation in Queensland

Introduction Queensland has the highest ambulance utilisation (150 per 1000 population) in Australia and growing 4.4% annually. However, the impact of gender and age on utilisation is unknown. Methods & Materials Data on ambulance utilisation from Queensland Ambulance Service for the period 2002-2009 were analysed. Results Between 2002 and 2009, the number of ambulance patients per 1000 population increased overall by 17% (females) and 18% (males). The utilisation rate remained highest among the elderly but grew differently across age groups. For females, the rates were 55% (0-14yo), 73% (15-29yo), 38% (30-44yo), 22% (45-59yo), -9% (60-74yo) and -6% (75,+ yo); for males they were 48%, 59%, 38%, 17%, -13% and -2% respectively. Within the same age groups and period, the population adjusted number of males per 100 females (M:F ratio) changed from 134 to 128 (-5% growth), 98 to 91 (-8%), 101 to 100 (-0.4%), 115 to 111 (-3%), 114 to 108 (-5%) and 106 to 111 (4%). Conclusion Understanding the impact of patients’ demographic profiles on service utilisation and broader effects on the emergency health system is imperative for policy-making, demand management, designing public health campaigns and health promotions. Gender and age characteristics of ambulance users in Queensland appear to be changing most noticeably in the youngest and oldest groups. Physical and mental health, attitudinal, lifestyle, parenting, financial and socio-cultural reasons may account for these trends, but little evidence exists. A theoretical framework will be discussed to contextualise the findings.

Nurse-led telephone interventions for people with cardiac disease : A review of the research literature

Background: Nurse-led telephone follow-up offers a relatively inexpensive method of delivering education and support for assisting recovery in the early discharge period; however, its efficacy is yet to be determined. Aim: To perform a critical integrative review of the research literature addressing the effectiveness of nurse-led telephone interventions for people with coronary heart disease (CHD). Methods: A literature search of five health care databases; Sciencedirect, Cumulative Index to Nursing and Allied Health Literature, Pubmed, Proquest and Medline to identify journal articles between 1980 and 2009. People with cardiac disease were considered for inclusion in this review. The search yielded 128 papers, of which 24 met the inclusion criteria. Results: A total of 8330 participants from 24 studies were included in the final review. Seven studies demonstrated statistically significant differences in all outcomes measured, used two group experimental research design and valid and reliable instruments. Some positive effects were detected in eight studies in regards to nurse-led telephone interventions for people with cardiac disease and no differences were detected in nine studies. Discussion: Studies with some positive effects generally had stronger research designs, large samples, used valid and reliable instruments and extensive nurse-led educative interventions. Conclusion: The results suggest that people with cardiac disease showed some benefits from nurse-led/delivered telephone interventions. More rigorous research into this area is needed.

Users verses IT: Understanding prejudice in information systems development project teams

This paper investigated the phenomenon of prejudice among ISD project members. We presented a theoretical discussion followed by one qualitative and one quantitative study. In the qualitative study, we interviewed different members of the project teams to understand the different types of prejudice possessed by team members. Results of this interview study led to the development of prejudice scales for IT members and users, which was used in the quantitative study. We surveyed 128 ISD teams and found that prejudice was related task and relationship conflict, satisfaction and willingness to work together in the future. Furthermore, prejudice exerts stronger influences on users than IT members in terms of increasing task and relationship conflicts and decreasing goal commitment.

Injuries across adolescence : an investigation using the Extended Adolescent Injury Checklist (E-AIC)

Injury is the leading cause of death among adolescents, and in many countries, accounts for more deaths than all other causes combined. Rates of death due to injury also increase dramatically across adolescence. The Australian Institute of Health and Welfare reported that, in 2005, there were 954 deaths of young Australians due to injury, which is a rate of 26 deaths per 100,000 young people. Of these deaths, 4% were adolescents aged 12-14, 17% were aged 15-17, and 80% were aged 18-24 years. Issues addressed: Injuries are the leading cause of death among adolescents. The current research examined a measure of adolescent injury in terms of whether it encompasses the diverse injury experiences of Australian adolescents, including high-risk and normative adolescents, and thus determine its utility as a tool for health promotion research. Grade 9 students from two Brisbane high schools (n=202, aged 13-14 years) and adolescents recruited from the Emergency Department waiting rooms of four Brisbane hospitals (n=98, aged 16-18 years) completed the Extended Adolescent Injury Checklist (E-AIC). The most common cause of injury among adolescents was a sports activity, followed by fights for all participants except schoolbased males, who experienced more bicycle injuries. Alcohol use was most frequently reported in association with interpersonal violence injuries. A broad variety of injuries, occurring in context of multiple risk as well as normative behaviours, were reported by adolescents in both school and ED settings, and were captured by the E-AIC. Findings suggest that the E-AIC is a useful measure that captures the injury experiences of adolescents in different contexts. The high occurrence of injuries that do not result in formal medical treatment also indicates scope for interventions to be based around lessons in first aid, while also incorporating injury prevention components.

Secure data aggregation in wireless sensor networks

A Wireless Sensor Network (WSN) is a set of sensors that are integrated with a physical environment. These sensors are small in size, and capable of sensing physical phenomena and processing them. They communicate in a multihop manner, due to a short radio range, to form an Ad Hoc network capable of reporting network activities to a data collection sink. Recent advances in WSNs have led to several new promising applications, including habitat monitoring, military target tracking, natural disaster relief, and health monitoring. The current version of sensor node, such as MICA2, uses a 16 bit, 8 MHz Texas Instruments MSP430 micro-controller with only 10 KB RAM, 128 KB program space, 512 KB external ash memory to store measurement data, and is powered by two AA batteries. Due to these unique specifications and a lack of tamper-resistant hardware, devising security protocols for WSNs is complex. Previous studies show that data transmission consumes much more energy than computation. Data aggregation can greatly help to reduce this consumption by eliminating redundant data. However, aggregators are under the threat of various types of attacks. Among them, node compromise is usually considered as one of the most challenging for the security of WSNs. In a node compromise attack, an adversary physically tampers with a node in order to extract the cryptographic secrets. This attack can be very harmful depending on the security architecture of the network. For example, when an aggregator node is compromised, it is easy for the adversary to change the aggregation result and inject false data into the WSN. The contributions of this thesis to the area of secure data aggregation are manifold. We firstly define the security for data aggregation in WSNs. In contrast with existing secure data aggregation definitions, the proposed definition covers the unique characteristics that WSNs have. Secondly, we analyze the relationship between security services and adversarial models considered in existing secure data aggregation in order to provide a general framework of required security services. Thirdly, we analyze existing cryptographic-based and reputationbased secure data aggregation schemes. This analysis covers security services provided by these schemes and their robustness against attacks. Fourthly, we propose a robust reputationbased secure data aggregation scheme for WSNs. This scheme minimizes the use of heavy cryptographic mechanisms. The security advantages provided by this scheme are realized by integrating aggregation functionalities with: (i) a reputation system, (ii) an estimation theory, and (iii) a change detection mechanism. We have shown that this addition helps defend against most of the security attacks discussed in this thesis, including the On-Off attack. Finally, we propose a secure key management scheme in order to distribute essential pairwise and group keys among the sensor nodes. The design idea of the proposed scheme is the combination between Lamport's reverse hash chain as well as the usual hash chain to provide both past and future key secrecy. The proposal avoids the delivery of the whole value of a new group key for group key update; instead only the half of the value is transmitted from the network manager to the sensor nodes. This way, the compromise of a pairwise key alone does not lead to the compromise of the group key. The new pairwise key in our scheme is determined by Diffie-Hellman based key agreement.