Information-theoretic security explained

A cryptosystem is considered to have information-theoretic security (also called unconditional security^[1]) if the system is secure against adversaries with unlimited computing resources and time. In contrast, a system which depends on the computational cost of cryptanalysis to be secure (and thus can be broken by an attack with unlimited computation) is called computationally, or conditionally, secure.^[2]

Overview

An encryption protocol with information-theoretic security is impossible to break even with infinite computational power. Protocols proven to be information-theoretically secure are resistant to future developments in computing. The concept of information-theoretically secure communication was introduced in 1949 by American mathematician Claude Shannon, one of the founders of classical information theory, who used it to prove the one-time pad system was secure.^[3] Information-theoretically secure cryptosystems have been used for the most sensitive governmental communications, such as diplomatic cables and high-level military communications.

There are a variety of cryptographic tasks for which information-theoretic security is a meaningful and useful requirement. A few of these are:

1. Secret sharing schemes such as Shamir's are information-theoretically secure (and also perfectly secure) in that having less than the requisite number of shares of the secret provides no information about the secret.
2. More generally, secure multiparty computation protocols often have information-theoretic security.
3. Private information retrieval with multiple databases can be achieved with information-theoretic privacy for the user's query.
4. Reductions between cryptographic primitives or tasks can often be achieved information-theoretically. Such reductions are important from a theoretical perspective because they establish that primitive

\Pi can be realized if primitive \Pi' can be realized.

1. Symmetric encryption can be constructed under an information-theoretic notion of security called entropic security, which assumes that the adversary knows almost nothing about the message being sent. The goal here is to hide all functions of the plaintext rather than all information about it.
2. Information-theoretic cryptography is quantum-safe.

Physical layer encryption

Technical limitations

Algorithms which are computationally or conditionally secure (i.e., they are not information-theoretically secure) are dependent on resource limits. For example, RSA relies on the assertion that factoring large numbers is hard.

A weaker notion of security, defined by Aaron D. Wyner, established a now-flourishing area of research that is known as physical layer encryption.^[4] It exploits the physical wireless channel for its security by communications, signal processing, and coding techniques. The security is provable, unbreakable, and quantifiable (in bits/second/hertz).

Wyner's initial physical layer encryption work in the 1970s posed the Alice–Bob–Eve problem in which Alice wants to send a message to Bob without Eve decoding it. If the channel from Alice to Bob is statistically better than the channel from Alice to Eve, it had been shown that secure communication is possible.^[5] That is intuitive, but Wyner measured the secrecy in information theoretic terms defining secrecy capacity, which essentially is the rate at which Alice can transmit secret information to Bob. Shortly afterward, Imre Csiszár and Körner showed that secret communication was possible even if Eve had a statistically better channel to Alice than Bob did.^[6] The basic idea of the information theoretic approach to securely transmit confidential messages (without using an encryption key) to a legitimate receiver is to use the inherent randomness of the physical medium (including noises and channel fluctuations due to fading) and exploit the difference between the channel to a legitimate receiver and the channel to an eavesdropper to benefit the legitimate receiver.^[7] More recent theoretical results are concerned with determining the secrecy capacity and optimal power allocation in broadcast fading channels.^{[8] [9]} There are caveats, as many capacities are not computable unless the assumption is made that Alice knows the channel to Eve. If that were known, Alice could simply place a null in Eve's direction. Secrecy capacity for MIMO and multiple colluding eavesdroppers is more recent and ongoing work,^{[10] [11]} and such results still make the non-useful assumption about eavesdropper channel state information knowledge.

Still other work is less theoretical by attempting to compare implementable schemes. One physical layer encryption scheme is to broadcast artificial noise in all directions except that of Bob's channel, which basically jams Eve. One paper by Negi and Goel details its implementation, and Khisti and Wornell computed the secrecy capacity when only statistics about Eve's channel are known.^{[12] [13]}

Parallel to that work in the information theory community is work in the antenna community, which has been termed near-field direct antenna modulation or directional modulation.^[14] It has been shown that by using a parasitic array, the transmitted modulation in different directions could be controlled independently.^[15] Secrecy could be realized by making the modulations in undesired directions difficult to decode. Directional modulation data transmission was experimentally demonstrated using a phased array.^[16] Others have demonstrated directional modulation with switched arrays and phase-conjugating lenses.^{[17] [18] [19]}

That type of directional modulation is really a subset of Negi and Goel's additive artificial noise encryption scheme. Another scheme using pattern-reconfigurable transmit antennas for Alice called reconfigurable multiplicative noise (RMN) complements additive artificial noise.^[20] The two work well together in channel simulations in which nothing is assumed known to Alice or Bob about the eavesdroppers.

Secret key agreement

The different works mentioned in the previous part employ, in one way or another, the randomness present in the wireless channel to transmit information-theoretically secure messages.Conversely, we could analyze how much secrecy one can extract from the randomness itself in the form of a secret key.That is the goal of secret key agreement.

In this line of work, started by Maurer^[21] and Ahlswede and Csiszár,^[22] the basic system model removes any restriction on the communication schemes and assumes that the legitimate users can communicate over a two-way, public, noiseless, and authenticated channel at no cost. This model has been subsequently extended to account for multiple users^[23] and a noisy channel^[24] among others.

See also

• Leftover hash lemma (privacy amplification)
• Semantic security

Notes and References

1. Diffie . Whitfield . Hellman . Martin E. . New Directions in Cryptography . IEEE Transactions on Information Theory . November 1976 . IT-22 . 6 . 646 . 8 December 2021.
2. Book: Maurer . Ueli . Advances in Cryptology — CRYPTO' 99 . Information-Theoretic Cryptography . Lecture Notes in Computer Science . August 1999 . 1666 . 47–64 . 10.1007/3-540-48405-1_4 . 978-3-540-66347-8 . https://crypto.ethz.ch/publications/Maurer99.html. free .
3. Shannon . Claude E. . Communication Theory of Secrecy Systems . Bell System Technical Journal . 28 . 4 . 656–715 . October 1949 . 10.1002/j.1538-7305.1949.tb00928.x . 2011-12-21. 10338.dmlcz/119717 .
4. Web site: Information Theoretic Security. Koyluoglu. 16 July 2010. 11 August 2010.
5. Wyner . A. D. . The Wire-Tap Channel . Bell System Technical Journal . 54 . 8 . 1355–1387 . October 1975 . 10.1002/j.1538-7305.1975.tb02040.x . 21512925 . 2013-04-11 . https://web.archive.org/web/20140204010357/http://www3.alcatel-lucent.com/bstj/vol54-1975/articles/bstj54-8-1355.pdf . 2014-02-04 . dead .
6. Csiszár . I. . Körner . J. . Broadcast Channels with Confidential Messages . IEEE Transactions on Information Theory . IT-24 . 3 . 339–348 . May 1978 . 10.1109/TIT.1978.1055892 . 206733433 .
7. Liang . Y. . Vincent Poor . H. . Shamai . S. . Information Theoretic Security . Foundations and Trends in Communications and Information Theory . 5 . 4–5 . 355–580 . 2008 . 10.1561/0100000036 .
8. Liang . Yingbin . Poor . Vincent . Shamai (Shitz) . Shlomo . Shlomo Shamai . Secure Communication Over Fading Channels . IEEE Transactions on Information Theory . 54 . 6 . 2470–2492 . June 2008 . 10.1109/tit.2008.921678 . cs/0701024 . 7249068 .
9. Gopala . P. . Lai . L. . El Gamal . H. . On the Secrecy Capacity of Fading Channels . IEEE Transactions on Information Theory . 54 . 10 . 4687–4698 . October 2008 . 10.1109/tit.2008.928990 . cs/0610103 . 3264079 .
10. Khisti . Ashish . Wornell . Gregory . Secure Transmission with Multiple Antennas II: The MIMOME Wiretap Channel . IEEE Transactions on Information Theory . 56 . 11 . 5515–5532 . November 2010 . 10.1109/tit.2010.2068852 . 1006.5879 . 2010arXiv1006.5879K . 1428 .
11. Oggier . F. . Frédérique Oggier . Hassibi . B. . The Secrecy Capacity of the MIMO Wiretap Channel . IEEE Transactions on Information Theory . 57 . 8 . 4961–4972 . August 2011 . 10.1109/tit.2011.2158487. 0710.1920 . 1586 .
12. Negi . R. . Goel . S. . Guaranteeing secrecy using artificial noise . IEEE Transactions on Wireless Communications . 7 . 6 . 2180–2189 . 2008 . 10.1109/twc.2008.060848 . 5430424 .
13. Khisti . Ashish . Wornell . Gregory . Secure transmission with multiple antennas I: The MISOME wiretap channel . IEEE Transactions on Information Theory . 56 . 7 . 3088–3104 . Jul 2010 . 10.1109/tit.2010.2048445 . 10.1.1.419.1480 . 47043747 .
14. Daly . M.P. . Bernhard . J.T. . Directional modulation technique for phased arrays . IEEE Transactions on Antennas and Propagation . 57 . 9 . 2633–2640 . Sep 2009 . 10.1109/tap.2009.2027047 . 2009ITAP...57.2633D . 27139656 .
15. Babakhani . A. . Rutledge . D.B. . Hajimiri . A. . Transmitter architectures based on near-field direct antenna modulation . IEEE Journal of Solid-State Circuits . 76 . 12 . 2674–2692 . IEEE . Dec 2008 . 2008IJSSC..43.2674B . 10.1109/JSSC.2008.2004864 . 14595636 .
16. Daly . M.P. . Daly . E.L. . Bernhard . J.T. . Demonstration of directional modulation using a phased array . IEEE Transactions on Antennas and Propagation . 58 . 5 . 1545–1550 . May 2010 . 10.1109/tap.2010.2044357 . 2010ITAP...58.1545D . 40708998 .
17. Hong . T. . Song . M.-Z. . Liu . Y. . RF directional modulation technique using a switched antenna array for physical layer secure communication applications . Progress in Electromagnetics Research . 116 . 363–379 . 2011 . 10.2528/PIER11031605 . free .
18. Shi . H. . Tennant . A. . Direction dependent antenna modulation using a two element array . Proceedings 5th European Conference on Antennas and Propagation(EUCAP) . 812–815 . April 2011 .
19. Malyuskin . O. . Fusco . V. . Spatial data encryption using phase conjugating lenses . IEEE Transactions on Antennas and Propagation . 60 . 6 . 2913–2920 . 2012 . 10.1109/tap.2012.2194661 . 2012ITAP...60.2913M . 38743535 .
20. Daly . Michael . Physical layer encryption using fixed and reconfigurable antennas . Ph.D. . University of Illinois at Urbana-Champaign . 2012 .
21. Maurer . U. M. . Secret key agreement by public discussion from common information . IEEE Transactions on Information Theory . 39 . 3 . 733–742 . May 1993 . 10.1109/18.256484 .
22. Ahlswede . R. . Csiszár . I. . Common randomness in information theory and cryptography. I. Secret sharing . IEEE Transactions on Information Theory . 39 . 4 . 1121–1132 . July 1993 . 10.1109/18.243431 .
23. Narayan . Prakash . Tyagi . Himanshu . Multiterminal Secrecy by Public Discussion . Foundations and Trends in Communications and Information Theory . 13 . 2–3 . 129–275 . 2016 . 10.1561/0100000072 .
24. Bassi . G. . Piantanida . P. . Shamai . S. . Shlomo Shamai . The Secret Key Capacity of a Class of Noisy Channels with Correlated Sources . Entropy . 21 . 8 . 732 . 2019 . 10.3390/e21080732 . 33267446 . 7515261 . 2019Entrp..21..732B . free .