Whisper: A Curious Case of Valid and Employed Mallory in Cloud Computing

摘要

Apart from Security and privacy, there are crucial requirements of secrecy for modern practice in Cloud Computing. Secrecy protocol keeps client’s data secret, and it protects the secrets from being misused by any other unintended users. It is the essential requirement to establish trust among users, vendors, and countries. However, the most modern system does not provide secrecy of user and user’s data. Therefore, the secrecy of the user and the user’s data remains no more secret. It is exposed intentionally or unintentionally. Moreover, there is no data secrecy for administrators in Cloud Computing such that the administrators cannot easily misuse the data. Therefore, trust in the company needs to be restored by devising a new protocol. Hence, we propose a secrecy protocol for establishing trust among the users, vendors, and countries, called Whisper, which maintains hard secrecy protocol. Also, this secrecy protocol follows "only by my choice" philosophy. This paper demonstrates how to achieve this protocol to re-establish trust among users, vendors, and countries in Cloud Computing. Whisper uses asymmetric cryptography protocol, which requires random numbers and prime numbers. We have tested the randomness of generated pseudo-random numbers of Whisper in NIST SP 800-22 and passes all 15 statistical tests of randomness for various input. This paper also presents the generation of a randomly chosen prime number and a random number, and demonstrates how to reproduce the randomly chosen prime number and the generated random number to eliminate administrators from list of intended user’s list.