Paper 2022/1694

Security Analysis of a Color Image Encryption Scheme Based on Dynamic Substitution and Diffusion Operations

George Teseleanu
Abstract

In 2019, Essaid et al. proposed an encryption scheme for color images based on chaotic maps. Their solution uses two enhanced chaotic maps to dynamically generate the secret substitution boxes and the key bytes used by the cryptosystem. Note that both types of parameters are dependent on the size of the original image. The authors claim that their proposal provides enough security for transmitting color images over unsecured channels. Unfortunately, this is not the case. In this paper, we introduce two cryptanalytic attacks for Essaid et al.'s encryption scheme. The first one is a chosen plaintext attack, which for a given size, requires $256$ chosen plaintexts to allow an attacker to decrypt any image of this size. The second attack is a a chosen ciphertext attack, which compared to the first one, requires $512$ chosen ciphertexts to break the scheme for a given size. These attacks are possible because the generated substitution boxes and key bits remain unchanged for different plaintext images.

Metadata
Available format(s)
PDF
Category
Secret-key cryptography
Publication info
Published elsewhere. ICISSP 2023
Keywords
image encryption scheme chaos based encryption cryptanalysis
Contact author(s)
george teseleanu @ yahoo com
History
2022-12-10: approved
2022-12-07: received
See all versions
Short URL
https://ia.cr/2022/1694
License
Creative Commons Attribution-NonCommercial-ShareAlike
CC BY-NC-SA

BibTeX

@misc{cryptoeprint:2022/1694,
      author = {George Teseleanu},
      title = {Security Analysis of a Color Image Encryption Scheme Based on Dynamic Substitution and Diffusion Operations},
      howpublished = {Cryptology ePrint Archive, Paper 2022/1694},
      year = {2022},
      note = {\url{https://eprint.iacr.org/2022/1694}},
      url = {https://eprint.iacr.org/2022/1694}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.