Home⇛Scientific Augustinian⇛vol. 15 no. 1 (2025)

Chaotic Water Caustic Patterns as a Physical Entropy Source for Cryptographic Key Generation in Cloud Computing Security

Yohann Jed R. Alamon | Gegan Ray G. Cahilig | Ion Nathaniel F. De Paula | Russell N. Gorre | Kalvin Joy Bauno

Discipline: Pharmacology

 

Abstract:

The increasing volume of data stored and transmitted in cloud computing environments raises critical concerns regarding privacy, confidentiality, and cybersecurity. This study proposes an entropy-driven cryptographic key derivation framework that utilizes chaotic water caustic patterns as a natural physical entropy source. An experimental computational design was employed using two independent experimental setups involving varying image resolutions (320 × 240, 640 × 480, 800 × 600, 1280 × 720, and 1920 × 1080) and plaintext types (repetitive text, sequential text, natural language text, pseudo-random strings, and heterogeneous Unicode text). The proposed framework captures dynamic water caustic patterns through a camera-based acquisition system, converts the captured patterns into cryptographic seeds using SHA-256 hashing, and integrates the resulting entropy into a HMAC-based Key Derivation Function (HKDF) for implementation within a ChaCha20-Poly1305 authenticated encryption scheme. Results demonstrated consistently high randomness quality, with several experimental conditions achieving complete pass rates in the applied NISTSP 800-22 statistical randomness tests. No statistically significant differences were observed across image resolutions and plaintext types for key performance metrics, including known-plaintext attack resistance (~50%), differential rate (~50%), avalanche effect (~50%), and encryption time (~0.18–0.21 s). However, Shannon entropy differed significantly across image resolutions (H(4) = 41.307, p < 0.001), with post hoc analysis revealing selective pairwise differences. Similarly, chosen-plaintext attack (CPA) entropy significantly varied across plaintext types (F(4, 245) = 1300.176, p < 0.001), with all pairwise comparisons showing statistical significance, suggesting that ciphertext statistical characteristics may vary according to plaintext structure under the tested conditions. Overall, the findings support the preliminary feasibility of using chaotic water caustics as a physical entropy source for cryptographic key generation. Nevertheless, the results also highlight the need for further validation under real-world deployment conditions, larger-scale cloud computing environments, and more comprehensive adversarial testing frameworks.



References:

  1. Alghamdi, Y., & Munir, A. (2024). Image encryption algorithms: A survey of design and evaluation metrics. Journal of Cybersecurity and Privacy, 4(1), 126–152. https://doi.org/10.3390/jcp4010007
  2. Bakiri, M., Couchot, J.-F., & Guyeux, C. (2017). One random jump and one permutation: Sufficient conditions to chaotic, statistically faultless, and large throughput PRNG for FPGA. arXiv preprint arXiv:1706.08093. https://arxiv.org/abs/1706.08093
  3. Bartley, K. (2024, December 11). Big data statistics: How much data is there in the world? Rivery. https://rivery.io/blog/big-data-statistics-how-much-data-is-there-in-the-world/
  4. Boccaletti, S., Grebogi, C., Lai, Y.-C., Mancini, H., & Maza, D. (2000). The control of chaos: Theory and applications. Physics Reports, 329(3), 103–197. https://doi.org/10.1016/S0370-1573(99)00096-4
  5. Cao, Y., Liu, W., Qin, L., Liu, B., Chen, S., Ye, J., Xia, X., & Wang, C. (2022). Entropy sources based on silicon chips: True random number generator and physical unclonable function. Entropy, 24(11), 1566. https://doi.org/10.3390/e24111566
  6. Chen, H., Liu, Z., Tanougast, C., Liu, F., & Blondel, W. (2021). A novel chaos-based optical cryptosystem for multiple images using DNA-blend and Gyrator transform. Optics and Lasers in Engineering, 138, 106448. https://doi.org/10.1016/j.optlaseng.2020.106448
  7. Easttom, C. (2022). Basic information theory. In Modern cryptography: Applied mathematics for security engineers (pp. 51–73). Springer. https://doi.org/10.1007/978-3-031-12304-7_3
  8. Fluhrer, S., Mantin, I., & Shamir, A. (2001). Weaknesses in the key scheduling algorithm of RC4. In S. Vaudenay & A. M. Youssef (Eds.), Selected Areas in Cryptography (pp. 1–24). Springer. https://doi.org/10.1007/3-540-45537-X_1
  9. Gao, X. (2021). Image encryption algorithm based on 2D hyperchaotic map. Optics & Laser Technology, 142, 107252. https://doi.org/10.1016/j.optlastec.2021.107252
  10. Ghanbari, B., & Nisar, K. S. (2020). Some effective numerical techniques for chaotic systems involving fractal-fractional derivatives with different laws. Frontiers in Physics, 8, Article 192. https://doi.org/10.3389/fphy.2020.00192
  11. Hua, Z., Zhu, Z., Chen, Y., & Li, Y. (2021). Color image encryption using orthogonal Latin squares and a new 2D chaotic system. Nonlinear Dynamics, 104(4), 4505–4522. https://doi.org/10.1007/s11071-021-06472-6
  12. Kerrigan, B., & Chen, Y. (2012). A study of entropy sources in cloud computers: Random number generation on cloud hosts. In Proceedings of the 6th International Conference on Mathematical Methods, Models, and Architectures for Computer Network Security (MMM-ACNS 2012). Binghamton University. https://bingweb.binghamton.edu/~ychen/chenkerrigan.pdf
  13. Koch, R. (2023, October 5). What is password entropy? Proton. https://proton.me/blog/what-ispassword-entropy
  14. Koozi, N. (2016). Caustics as envelopes of reflected rays in geometric optics. In A. Dvoretzki (Ed.), Caustics, orthotomics, and reflecting curve with source at infinity (pp. 7–12). CEUR Workshop Proceedings. https://ceur-ws.org/Vol-2744/paper66.pdf
  15. Landon, C., & Callas, J. (1998). Method for seeding a pseudo-random number generator with a cryptographic hash of a digitization of a chaotic system (U.S. Patent No. 5,732,138). U.S. Patent and Trademark Office. https://patents.google.com/patent/US5732138A/en
  16. Liebow-Feeser, J. (2017, November 6). LavaRand in production: The nitty-gritty technical details. Cloudflare Blog. https://blog.cloudflare.com/lavarand-in-production-the-nitty-gritty-technicaldetails/
  17. Malik, A., Gupta, S., & Dhall, S. (2020). Analysis of traditional and modern image encryption algorithms under realistic ambience. Multimedia Tools and Applications, 79(37–38), 27941–27993. https://doi.org/10.1007/s11042-020-09279-6
  18. McIntosh, A. D. (1988). An equation for the caustic curve. In Experiments in physics (pp. 171–172). University of Sydney. http://users.df.uba.ar/sgil/physics_paper_doc/papers_phys/ondas_optics/caustica1.pdf
  19. Menezes, A. J., van Oorschot, P. C., & Vanstone, S. A. (1996). Handbook of applied cryptography. CRC Press.
  20. National Institute of Standards and Technology. (2015). Recommendation for random number generation using deterministic random bit generators (NIST Special Publication 800-90A Rev. 1). https://doi.org/10.6028/NIST.SP.800-90Ar1
  21. Pachghare, V. K. (2019). Cryptography and information security (3rd ed.). PHI Learning Private Limited.
  22. Pahlavan, K., & Krishnamurthy, P. (2021). Evolution and impact of Wi-Fi technology and applications: A historical perspective. International Journal of Wireless Information Networks, 28(1), 3–19. https://doi.org/10.1007/s10776-020-00501-8
  23. Raghavan, R., & Poston, T. (2021). Uses of caustics: Creating and steering stable hotspots in acoustics and optics. ResearchGate. https://doi.org/10.13140/RG.2.2.24300.49284
  24. Rizzo, J., & Duong, T. (2012). Practical nonce misuse in TLS. In Black Hat USA 2012. Black Hat. https://www.blackhat.com/docs/us-12/briefings/Rizzo/BH_US_12_Rizzo_CRIME_Slides.pdf
  25. Schneier, B. (1996). Applied cryptography (2nd ed.). Wiley.
  26. Suh, G. E., Clarke, D., Gassend, B., van Dijk, M., & Devadas, S. (2016). Entropy-as-a-service: Unlocking the full potential of cryptography. Communications of the ACM, 59(9), 84–91. https://doi.org/10.1145/2898445
  27. Sun, P. (2020). Security and privacy protection in cloud computing: Discussions and challenges. Journal of Network and Computer Applications, 160, 102642. https://doi.org/10.1016/j.jnca.2020.102642
  28. Venables, S. V., Drerup, C., Powell, S. B., Marshall, N. J., Herbert-Read, J. E., & How, M. J. (2022). Polarization vision mitigates visual noise from flickering light underwater. Science Advances, 8, eabq2770. https://doi.org/10.1126/sciadv.abq2770
  29. Viega, J. (2003). The myths of security: What the computer security industry doesn’t want you to know. O’Reilly Media.
  30. Yang, Y., Xiong, X., Liu, Z., Jin, S., & Wang, J. (2024). High-performance encryption algorithms for dynamic image transmission. Electronics, 13(1), 131. https://doi.org/10.3390/electronics13010131