Geração e distribuição de chaves criptográficas simétricas através da sincronização intermitente de circuitos eletrônicos caóticos acoplados

Abstract

The present work proposes an innovative and secure symmetric cryptographic key generation and distribution concept. The concept is innovative because the keys are generated from the out-of-sync events of two chaotic coupled oscillators and, unlike traditional symmetric key encryption schemes, they do not need to be previously shared between the transmitter and the receiver. It is safe because the generated key meets the four requirements of the one-time pad, which makes it unbreakable. It has been shown numerically and experimentally that once chaotic synchronization between the transmitter and receiver is achieved, the same random cryptographic key can be generated by sampling the signal from the desynchronization events that occur between the master oscillator and its auxiliary, on the transmitter side. , and between the slave oscillator and its auxiliary, on the receiver side. The proof of concept was carried out using the Gauthier-Bienfang chaotic oscillator as a platform, but it could have been implemented on optoelectronic or photonic platforms. As the main interest was to prove the validity of the concept, it was decided to use the Gauthier-Bienfang chaotic oscillator solely and exclusively because it is an electronic circuit with simple mathematical modeling, easy construction and mainly low cost. The key generation method from chaotic signals is flexible and can be made as robust as you like. Although the method used here was quite simple, it proved effective when subjected to the statistical tests of the National Institute of Standards and Technology (NIST) protocol suite. The results achieved in NIST tests make clear the randomness of keys, which is fundamental for any cryptographic system. In view of the above, the system proposed in the present work presents itself as an excellent alternative to classical cryptography and quantum cryptography in terms of guaranteeing information security for people, institutions and governments on the Internet.