Military Communications and Information Technology: A Trusted ...

Effective Generation of Cryptographic Material
for Large Hierarchical Communication Networks
Marcin Grzonkowski 1 , Jacek Jarmakiewicz 2 , Wojciech Oszywa 2
1 Cryptography Division, MCI, Zegrze, Poland,
m.grzonkowski@wil.waw.pl
2 Communication Systems Division, C4I Systems, MUT – MCI, Warszawa, Poland,
jjarmakiewicz@wat.edu.pl, j.jarmakiewicz@wil.waw.pl
Abstract: In this paper, the problem of increasing the efficiency of cryptographic material generation
for communication networks of large IT systems is presented. As it results from the conducted
tests, it is possible to improve the performance of the cryptographic data generation several times,
after multi-core/multi-process computer systems are applied and appropriate parallel cryptographic
data generation system is designed. The IT network class described in the paper corresponds to, e.g.
a system for the public administration purposes, where numerous IT relations between the system
components within the superior-subordinate relationship are present.
Keywords: electronic key management systems, parallel key generation
I. Introduction
Experiences related to cyber-attacks on information systems of various countries
(Georgia, Estonia, Germany, Great Britain) indicate that the destabilization
of information services has a real impact on national security and the public [1-7].
Organized cyber-attacks are often stimulated by political forces which transfer
international policy to cyber space which is characterized by not precisely defined
aspects of responsibility for unauthorized operations [8]. The attacks resemble typical
spy activities for the technical, military, political and economic spheres, which
leads to real and critical national security threats. The examples of unauthorized
operation sources include cyber-spy organizations such as GostNet, Zeus, SpyEye [7].
Therefore, the security within the IT systems, in particular those that provide
services to citizens, is very important. Information services of public administration
authorities (PA) are particularly important in the context of public life and security
of citizens, which is why actions aimed at ensuring the security of information flow
in organized networks for the PA are necessary [6].
One of the effective manners for avoiding unauthorized information flow is to
organize the data encryption in PA networks, thus eliminating the possibility of un-