Chaotic Water Caustic Patterns as a Physical Entropy Source for Cryptographic Key Generation in Cloud Computing Security
Yohann Jed R. Alamon | Gegan Ray G. Cahilig | Ion Nathaniel F. De Paula | Russell N. Gorre | Kalvin Joy Bauno
Discipline: Pharmacology
Abstract:
The increasing volume of data stored and transmitted in cloud computing environments raises critical concerns
regarding privacy, confidentiality, and cybersecurity. This study proposes an entropy-driven cryptographic key
derivation framework that utilizes chaotic water caustic patterns as a natural physical entropy source. An
experimental computational design was employed using two independent experimental setups involving varying
image resolutions (320 × 240, 640 × 480, 800 × 600, 1280 × 720, and 1920 × 1080) and plaintext types (repetitive
text, sequential text, natural language text, pseudo-random strings, and heterogeneous Unicode text). The proposed
framework captures dynamic water caustic patterns through a camera-based acquisition system, converts the
captured patterns into cryptographic seeds using SHA-256 hashing, and integrates the resulting entropy into a
HMAC-based Key Derivation Function (HKDF) for implementation within a ChaCha20-Poly1305 authenticated
encryption scheme. Results demonstrated consistently high randomness quality, with several experimental
conditions achieving complete pass rates in the applied NISTSP 800-22 statistical randomness tests. No
statistically significant differences were observed across image resolutions and plaintext types for key performance
metrics, including known-plaintext attack resistance (~50%), differential rate (~50%), avalanche effect (~50%),
and encryption time (~0.18–0.21 s). However, Shannon entropy differed significantly across image resolutions
(H(4) = 41.307, p < 0.001), with post hoc analysis revealing selective pairwise differences. Similarly,
chosen-plaintext attack (CPA) entropy significantly varied across plaintext types (F(4, 245) = 1300.176,
p < 0.001), with all pairwise comparisons showing statistical significance, suggesting that ciphertext statistical
characteristics may vary according to plaintext structure under the tested conditions. Overall, the findings support
the preliminary feasibility of using chaotic water caustics as a physical entropy source for cryptographic key
generation. Nevertheless, the results also highlight the need for further validation under real-world deployment
conditions, larger-scale cloud computing environments, and more comprehensive adversarial testing frameworks.
References:
- Alghamdi, Y., & Munir, A. (2024). Image encryption algorithms: A survey of design and evaluation metrics. Journal of Cybersecurity and Privacy, 4(1), 126–152. https://doi.org/10.3390/jcp4010007
- Bakiri, M., Couchot, J.-F., & Guyeux, C. (2017). One random jump and one permutation: Sufficient conditions to chaotic, statistically faultless, and large throughput PRNG for FPGA. arXiv preprint arXiv:1706.08093. https://arxiv.org/abs/1706.08093
- Bartley, K. (2024, December 11). Big data statistics: How much data is there in the world? Rivery. https://rivery.io/blog/big-data-statistics-how-much-data-is-there-in-the-world/
- Boccaletti, S., Grebogi, C., Lai, Y.-C., Mancini, H., & Maza, D. (2000). The control of chaos: Theory and applications. Physics Reports, 329(3), 103–197. https://doi.org/10.1016/S0370-1573(99)00096-4
- Cao, Y., Liu, W., Qin, L., Liu, B., Chen, S., Ye, J., Xia, X., & Wang, C. (2022). Entropy sources based on silicon chips: True random number generator and physical unclonable function. Entropy, 24(11), 1566. https://doi.org/10.3390/e24111566
- Chen, H., Liu, Z., Tanougast, C., Liu, F., & Blondel, W. (2021). A novel chaos-based optical cryptosystem for multiple images using DNA-blend and Gyrator transform. Optics and Lasers in Engineering, 138, 106448. https://doi.org/10.1016/j.optlaseng.2020.106448
- Easttom, C. (2022). Basic information theory. In Modern cryptography: Applied mathematics for security engineers (pp. 51–73). Springer. https://doi.org/10.1007/978-3-031-12304-7_3
- Fluhrer, S., Mantin, I., & Shamir, A. (2001). Weaknesses in the key scheduling algorithm of RC4. In S. Vaudenay & A. M. Youssef (Eds.), Selected Areas in Cryptography (pp. 1–24). Springer. https://doi.org/10.1007/3-540-45537-X_1
- Gao, X. (2021). Image encryption algorithm based on 2D hyperchaotic map. Optics & Laser Technology, 142, 107252. https://doi.org/10.1016/j.optlastec.2021.107252
- Ghanbari, B., & Nisar, K. S. (2020). Some effective numerical techniques for chaotic systems involving fractal-fractional derivatives with different laws. Frontiers in Physics, 8, Article 192. https://doi.org/10.3389/fphy.2020.00192
- Hua, Z., Zhu, Z., Chen, Y., & Li, Y. (2021). Color image encryption using orthogonal Latin squares and a new 2D chaotic system. Nonlinear Dynamics, 104(4), 4505–4522. https://doi.org/10.1007/s11071-021-06472-6
- Kerrigan, B., & Chen, Y. (2012). A study of entropy sources in cloud computers: Random number generation on cloud hosts. In Proceedings of the 6th International Conference on Mathematical Methods, Models, and Architectures for Computer Network Security (MMM-ACNS 2012). Binghamton University. https://bingweb.binghamton.edu/~ychen/chenkerrigan.pdf
- Koch, R. (2023, October 5). What is password entropy? Proton. https://proton.me/blog/what-ispassword-entropy
- Koozi, N. (2016). Caustics as envelopes of reflected rays in geometric optics. In A. Dvoretzki (Ed.), Caustics, orthotomics, and reflecting curve with source at infinity (pp. 7–12). CEUR Workshop Proceedings. https://ceur-ws.org/Vol-2744/paper66.pdf
- Landon, C., & Callas, J. (1998). Method for seeding a pseudo-random number generator with a cryptographic hash of a digitization of a chaotic system (U.S. Patent No. 5,732,138). U.S. Patent and Trademark Office. https://patents.google.com/patent/US5732138A/en
- Liebow-Feeser, J. (2017, November 6). LavaRand in production: The nitty-gritty technical details. Cloudflare Blog. https://blog.cloudflare.com/lavarand-in-production-the-nitty-gritty-technicaldetails/
- Malik, A., Gupta, S., & Dhall, S. (2020). Analysis of traditional and modern image encryption algorithms under realistic ambience. Multimedia Tools and Applications, 79(37–38), 27941–27993. https://doi.org/10.1007/s11042-020-09279-6
- McIntosh, A. D. (1988). An equation for the caustic curve. In Experiments in physics (pp. 171–172). University of Sydney. http://users.df.uba.ar/sgil/physics_paper_doc/papers_phys/ondas_optics/caustica1.pdf
- Menezes, A. J., van Oorschot, P. C., & Vanstone, S. A. (1996). Handbook of applied cryptography. CRC Press.
- National Institute of Standards and Technology. (2015). Recommendation for random number generation using deterministic random bit generators (NIST Special Publication 800-90A Rev. 1). https://doi.org/10.6028/NIST.SP.800-90Ar1
- Pachghare, V. K. (2019). Cryptography and information security (3rd ed.). PHI Learning Private Limited.
- Pahlavan, K., & Krishnamurthy, P. (2021). Evolution and impact of Wi-Fi technology and applications: A historical perspective. International Journal of Wireless Information Networks, 28(1), 3–19. https://doi.org/10.1007/s10776-020-00501-8
- Raghavan, R., & Poston, T. (2021). Uses of caustics: Creating and steering stable hotspots in acoustics and optics. ResearchGate. https://doi.org/10.13140/RG.2.2.24300.49284
- Rizzo, J., & Duong, T. (2012). Practical nonce misuse in TLS. In Black Hat USA 2012. Black Hat. https://www.blackhat.com/docs/us-12/briefings/Rizzo/BH_US_12_Rizzo_CRIME_Slides.pdf
- Schneier, B. (1996). Applied cryptography (2nd ed.). Wiley.
- Suh, G. E., Clarke, D., Gassend, B., van Dijk, M., & Devadas, S. (2016). Entropy-as-a-service: Unlocking the full potential of cryptography. Communications of the ACM, 59(9), 84–91. https://doi.org/10.1145/2898445
- Sun, P. (2020). Security and privacy protection in cloud computing: Discussions and challenges. Journal of Network and Computer Applications, 160, 102642. https://doi.org/10.1016/j.jnca.2020.102642
- Venables, S. V., Drerup, C., Powell, S. B., Marshall, N. J., Herbert-Read, J. E., & How, M. J. (2022). Polarization vision mitigates visual noise from flickering light underwater. Science Advances, 8, eabq2770. https://doi.org/10.1126/sciadv.abq2770
- Viega, J. (2003). The myths of security: What the computer security industry doesn’t want you to know. O’Reilly Media.
- Yang, Y., Xiong, X., Liu, Z., Jin, S., & Wang, J. (2024). High-performance encryption algorithms for dynamic image transmission. Electronics, 13(1), 131. https://doi.org/10.3390/electronics13010131
Full Text:
Note: Kindly Login or Register to gain access to this article.