The BRUTUS Automatic Cryptanalytic Framework: Testing CAESAR Authenticated Encryption Candidates for Weaknesses

This report summarizes our results from security analysis covering all 57 competitions for authenticated encryption: security, applicability, and robustness (CAESAR) first-round candidates and over 210 implementations. We have manually identified security issues with three candidates, two of which are more serious, and these ciphers have been withdrawn from the competition. We have developed a testing framework, BRUTUS, to facilitate automatic detection of simple security lapses and susceptible statistical structures across all ciphers. From this testing, we have security usage notes on four submissions and statistical notes on a further four. We highlight that some of the CAESAR algorithms pose an elevated risk if employed in real-life protocols due to a class of adaptive-chosen-plaintext attacks. Although authenticated encryption with associated data are often defined (and are best used) as discrete primitives that authenticate and transmit only complete messages, in practice, these algorithms are easily implemented in a fashion that outputs observable ciphertext data when the algorithm has not received all of the (attacker-controlled) plaintext. For an implementor, this strategy appears to offer seemingly harmless and compliant storage and latency advantages. If the algorithm uses the same state for secret keying information, encryption, and integrity protection, and the internal mixing permutation is not cryptographically strong, an attacker can exploit the ciphertext–plaintext feedback loop to reveal secret state information or even keying material. We conclude that the main advantages of exhaustive, automated cryptanalysis are that it acts as a very necessary sanity check for implementations and gives the cryptanalyst insights that can be used to focus more specific attack methods on given candidates.

Design, construction and testing of an air-cycle refrigeration system for road transport

The environmental attractions of air-cycle refrigeration are considerable. Following a thermodynamic design analysis, an air-cycle demonstrator plant was constructed within the restricted physical envelope of an existing Thermo King SL200 trailer refrigeration unit. This unique plant operated satisfactorily, delivering sustainable cooling for refrigerated trailers using a completely natural and safe working fluid. The full load capacity of the air-cycle unit at -20 °C was 7,8 kW, 8% greater than the equivalent vapour-cycle unit, but the fuel consumption of the air-cycle plant was excessively high. However, at part load operation the disparity in fuel consumption dropped from approximately 200% to around 80%. The components used in the air-cycle demonstrator were not optimised and considerable potential exists for efficiency improvements, possibly to the point where the air-cycle system could rival the efficiency of the standard vapour-cycle system at part-load operation, which represents the biggest proportion of operating time for most units.

Integration of shading and texture cues: testing the linear model

One of the first attempts to develop a formal model of depth cue integration is to be found in Maloney and Landy's (1989) "human depth combination rule". They advocate that the combination of depth cues by the visual sysetem is best described by a weighted linear model. The present experiments tested whether the linear combination rule applies to the integration of texture and shading. As would be predicted by a linear combination rule, the weight assigned to the shading cue did vary as a function of its curvature value. However, the weight assigned to the texture cue varied systematically as a function of the curvature value of both cues. Here we descrive a non-linear model which provides a better fit to the data. Redescribing the stimuli in terms of depth rather than curvature reduced the goodness of fit for all models tested. These results support the hypothesis that the locus of cue integration is a curvature map, rather than a depth map. We conclude that the linear comination rule does not generalize to the integration of shading and texture, and that for these cues it is likely that integration occurs after the recovery of surface curvature.

Testing solar forcing of pervasive Holocene climate cycles

The temporal and spatial extent of Holocene climate change is an area of considerable uncertainty, with solar forcing recently proposed to be the origin of cycles identified in the North Atlantic region. To address these issues we have developed an annually resolved record of changes in Irish bog tree populations over the last 7468 years which, together with radiocarbon-dated bog and lake-edge populations, extend the dataset back to 9000 yr ago. The Irish trees underpin the internationally accepted radiocarbon calibration curve, used to derive a proxy of solar activity, and allow us to test solar forcing of Holocene climate change. Tree populations and age structures provide unambiguous evidence of major shifts in Holocene surface moisture, with a dominant cyclicity of 800 yr, similar to marine cycles in the North Atlantic, indicating significant changes in the latitude and intensity of zonal atmospheric circulation across the region. The cycles, however, are not coherent with changes in solar activity (both being on the same absolute timescale), indicating that Holocene North Atlantic climate variability at the millennial and centennial scale is not driven by a linear response to changes in solar activity.