Modeling cryptographic algorithms validation and developing block ciphers with electronic code book for a control system at nuclear power plants
1
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
Nuclear power plants have recognized the importance of nuclear cybersecurity. Based on regulatory guidelines and security-related standards issued by regulatory agencies around the world including IAEA, NRC, and KINAC, nuclear operating organizations and related systems manufacturing organizations, design companies, and regulatory agencies are considering methods to prepare for nuclear cybersecurity. Cryptographic algorithms have to be developed and applied in order to meet nuclear cybersecurity requirements. This paper presents methodologies for validating cryptographic algorithms that should be continuously applied at the critical control system of I&C in NPPs. Through the proposed schemes, validation programs are developed in the PLC, which is a critical system of a NPP’s I&C, and the validation program is verified through simulation results. Since the development of a cryptographic algorithm validation program for critical digital systems of NPPs has not been carried out, the methodologies proposed in this paper could provide guidelines for Cryptographic Module Validation Modeling for Control Systems in NPPs. In particular, among several CMVP, specific testing techniques for ECB modebased block ciphers are introduced with program codes and validation models
Abstract
Nuclear power plants have recognized the importance of nuclear cybersecurity. Based on regulatory guidelines and security-related standards issued by regulatory agencies around the world including IAEA, NRC, and KINAC, nuclear operating organizations and related systems manufacturing organizations, design companies, and regulatory agencies are considering methods to prepare for nuclear cybersecurity. Cryptographic algorithms have to be developed and applied in order to meet nuclear cybersecurity requirements. This paper presents methodologies for validating cryptographic algorithms that should be continuously applied at the critical control system of I&C in NPPs. Through the proposed schemes, validation programs are developed in the PLC, which is a critical system of a NPP’s I&C, and the validation program is verified through simulation results. Since the development of a cryptographic algorithm validation program for critical digital systems of NPPs has not been carried out, the methodologies proposed in this paper could provide guidelines for Cryptographic Module Validation Modeling for Control Systems in NPPs. In particular, among several CMVP, specific testing techniques for ECB modebased block ciphers are introduced with program codes and validation models
참고문헌 (19)
- "Cyber security programs for nuclear facilities", U.S, Nuclear Regulatory Commission, Regulatory Guide 5, 71~ (2010)
- "Criteria for use of computers in safety systems of nuclear power plants", U.S, Nuclear Regulatory Commission, Regulatory Guide 1.152 (2011 July). Revision 3, ~ (2011)
- "Regulatory Standard on Cyber Security for Nuclear Facilities", Korea, KINAC., 2016 Dec. RS 015, ~ (2016)
- IAEA, "Computer Security at Nuclear Facilities, IAEA nuclear security series no. 17. Technical guidance", ~ (2011)
- "Conducting Computer Security Assessments at Nuclear Facilities", IAEA, ~ (2016)
- D. Joan, "AES Proposal, Rijndael, The Rijndael Block Cipher", ~ (1999)
- "Computer Security Resource Center"[URL]
- Behrouz Forouzan, "Cryptography and Network Security" (2008)
- K.C. Kwon, "Qualification of safety-critical software for digital reactor safety system in nuclear power plant-s", Nuclear safety and Simulation, 4(3) (2013)
- J. Lee, "A Description of the ARIA Encryption Algorithm", RFC 5794, Category:Informational, ISSN, 20170~21721 (2013)
- L. Donald, "Security Requirements for Cryptographic Modules", U.S. NIST, FIPS PUB 140-2. Category: Computer security, ~ (2001)
- "Announcing the Advanced Encryption Standard", NIST, Federal Information Processing Standards Publication 197, ~ (2001)
- McGrew D. A, "the Galois", Counter Mode of Operation (GCM)
- Counter Mode (GCM) and GMAC, "Recommendation for Block Cipher Modes of Operation Galois", pp.2007, M. Dworkin
- "Korea Cryptographic Module Validation Program"[URL]
- "Description of Known Answer Tests and Monte Carlo Tests for Advanced Encryption Standard Candidate Algorithm Submissions", ~ (1998)
- "Specifications of Cryptographic Algorithm Implementation Testing", IPA, JCMVP, ~ (2009)
- J.Y. Son, "Cryptographic Algorithm Function Validation Modeling for Nuclear I&C Systems", NPIC & HMIT (2019)
- "Security Requirements for Cryptographic Modules", U.S. NIST vol. 22, FIPS PUB 140-3, Category: Information security, Subcategory:Cryptography, ~ (2019)