Encryption tool blocks reverse-engineering of software

30 July 2013
By Edd Gent
Mobile version
Share |
Researchers have developed an encryption system that maintains functionality of a program while preventing any deciphering of the code behind it

Researchers have developed an encryption system that maintains functionality of a program while preventing any deciphering of the code behind it

Computer scientists have developed a “mathematical jigsaw puzzle” that makes software impervious to reverse-engineering.

UCLA computer science professor Amit Sahai and a team of researchers have designed a system to encrypt software so that it only allows someone to use a program as intended while preventing any deciphering of the code behind it.

The process is known in computer science as "software obfuscation" and the method described by Sahai, who specializes in cryptography at UCLA's Henry Samueli School of Engineering and Applied Science, is the first time it has been accomplished.

"The real challenge and the great mystery in the field was: can you actually take a piece of software and encrypt it but still have it be runnable, executable and fully functional," Sahai said. "It's a question that a lot of companies have been interested in for a long time."

According to Sahai, the new system puts up an "iron wall" making it impossible for an adversary to reverse-engineer the software without solving mathematical problems that take hundreds of years to work out on today's computers.

"You write your software in a nice, reasonable, human-understandable way and then feed that software to our system," Sahai said. "It will output this mathematically transformed piece of software that would be equivalent in functionality, but when you look at it, you would have no idea what it's doing."

Sahai said previously developed techniques for obfuscation presented only a "speed bump," forcing an attacker to spend some effort, perhaps a few days, trying to reverse-engineer the software.

The researchers said their mathematical obfuscation mechanism can be used to protect intellectual property by preventing the theft of new algorithms and by hiding the vulnerability a software patch is designed to repair when the patch is distributed.

The key to this successful obfuscation mechanism is a new type of "multilinear jigsaw puzzle." Through this mechanism, attempts to find out why and how the software works will be thwarted with only a nonsensical jumble of numbers.

"The real innovation that we have here is a way of transforming software into a kind of mathematical jigsaw puzzle," Sahai said. "What we're giving you is just math, just numbers, or a sequence of numbers.

“But it lives in this mathematical structure so that these individual pieces, these sequences of numbers, can only be combined with other numbers in very specified ways.

"You can inspect everything, you can turn it upside-down, you can look at it from different angles and you still won't have any idea what it's doing," he added. "The only thing you can do with it is put it together the way that it was meant to interlock.

“If you tried to do anything else, like if you tried to bash this piece and put it in some other way, you'd just end up with garbage."

The new technique for software obfuscation paved the way for another breakthrough called functional encryption. With functional encryption, instead of sending an encrypted message, an encrypted function is sent in its place.

This offers a much more secure way to protect information, Sahai said. Previous work on functional encryption was limited to supporting very few functions; the new work can handle any computable function.

For example, a single message could be sent to a group of people in such a way that each receiver would obtain different information, depending on characteristics of that particular receiver.

In another example, a hospital could share the outcomes of treatment with researchers without revealing details such as identifying patient information.

"Through functional encryption, you only get the specific answer, you don't learn anything else," Sahai said.

A peer-reviewed paper explaining the method will be formally presented in October at the 54th annual IEEE Symposium on Foundations of Computer Science, and Sahai has also presented this research in recent invited talks at Stanford University and the Massachusetts Institute of Technology.

Sahai ollaborated with Sanjam Garg, who recently earned his doctorate at UCLA and is now at IBM Research; Craig Gentry, Shai Halevi and Mariana Raykova of IBM Research; and Brent Waters, an assistant professor of computer science at the University of Texas at Austin. Garg worked with Sahai as a student when the research was done.

Latest Issue

E&T cover image 1607

"As the dust settles after the referendum result, we consider what happens next. We also look forward to an international summer of sport."

E&T jobs

  • Digital Forensic Specialist (Audio)

    Met Police
    • London
    • Circa £37,305 plus £3,406 location allowance

    You’ll contribute to a wide range of research and development activities.

    • Recruiter: Met Police

    Apply for this job

  • MetOp-SG Receiver Project Manager

    Science and Technology Facilities Council (STFC)
    • STFC Rutherford Appleton Laboratory, Harwell, Oxfordshire
    • £37,213 - £50,926 (depending on experience)

    Project Manager to oversee the development, production and test of spaceflight components and integrated receiver systems

    • Recruiter: Science and Technology Facilities Council (STFC)

    Apply for this job

  • Systems Engineer

    Reaction Engines Ltd
    • Abingdon, Oxfordshire
    • Competitive + Benefits

    Perform general systems engineering tasks as necessary with specific focus on electronic systems and instrumentation.

    • Recruiter: Reaction Engines Ltd

    Apply for this job

  • Production Manager

    Reaction Engines Ltd
    • Abingdon, Oxfordshire
    • Competitive + Benefits

    An amazing opportunity to plan, direct and coordinate all manufacturing operations and activities in line with company strategy and business plan.

    • Recruiter: Reaction Engines Ltd

    Apply for this job

  • Navigation Sensors Principle Engineer

    MBDA
    • Stevenage
    • Competitive Salary & Benefits

    What?s the opportunity? An exciting opportunity has arisen in a rapidly evolving international team with increasing capabilities.  The Navigation Sensors Group is responsible for the...

    • Recruiter: MBDA

    Apply for this job

  • Technology Manager - External Communications

    BAE Systems
    • Frimley, England, Surrey
    • Negotiable

    Technology Manager - External Communications Would you like Lead the technical delivery of the External Communications System (ECS) capability sustainment & evolution projects within the common ECS (cECS) Baseline Design Management (BDM) programme? Th

    • Recruiter: BAE Systems

    Apply for this job

  • Graduate Process Engineer

    EFFECT Photonics
    • Brixham, Devon
    • £20,000 to £25,000

    Join our exciting journey to deliver new standards in the availability of data bandwidth.

    • Recruiter: EFFECT Photonics

    Apply for this job

  • Senior Principal Materials Engineer

    MBDA
    • Stevenage
    • Competitive salary & benefits

    What?s the opportunity? A fantastic opportunity has arisen for an experienced materials engineer/scientist specialising in non-metallic materials and processing. You will be given responsibility for...

    • Recruiter: MBDA

    Apply for this job

  • Postdoctoral Research Associate

    The University of Liverpool
    • Liverpool, Merseyside
    • £32,600 - £37,768 pa

    Applications are invited for a Postdoctoral Research Associate in a brand new area of communications.

    • Recruiter: The University of Liverpool

    Apply for this job

  • Test Engineering Opportunities

    HMGCC
    • Hanslope Park, Milton Keynes
    • Salary offered will depend on skills and experience

    Push incredible innovations beyond their limits. Opportunities for Software, Hardware, EMC, Test and Inspection Engineers!

    • Recruiter: HMGCC

    Apply for this job

More jobs ▶

Subscribe

Choose the way you would like to access the latest news and developments in your field.

Subscribe to E&T