Block-wise Authenticated DNA-based Image Encryption with Tamper Localization using HKDF-Derived Keys
DOI:
https://doi.org/10.62411/jcta.16605Keywords:
Authenticated image encryption, Chaotic image encryption, DNA cryptography, Encrypt-then-MAC, HKDF, HMAC, Tamper localization, X25519Abstract
Confidentiality alone cannot establish whether a medical, forensic, cloud-stored, or remotely sensed image has been modified during transmission, while a single global authentication verdict cannot identify the affected region. This paper presents a block-wise authenticated DNA-based image encryption framework that integrates a DNA-chaos confidentiality core with pre-decryption integrity verification and spatial tamper localization. An authenticated ephemeral X25519 key exchange establishes a session secret, which is expanded by HKDF-SHA256 into four transcript-bound, domain-separated subkeys for permutation, DNA operations, diffusion, and authentication. Chaotic seeds are derived from a canonical plaintext hash and block coordinates, preserving strong plaintext differential sensitivity while confining post-encryption modifications to the affected blocks. Ciphertext integrity is enforced using a block-wise encrypt-then-MAC construction with 128-bit truncated HMAC-SHA256 tags that authenticate both the canonical header and each ciphertext block. A reduction-based security argument shows that the authentication layer provides ciphertext integrity and conditionally upgrades an IND-CPA encryption core to IND-CCA security under standard HKDF and HMAC assumptions, while the confidentiality claim remains explicitly conditional on the encryption core. Experiments on 30 tuberculosis chest radiographs across five independent sessions achieved a ciphertext entropy of 7.9972, near-zero adjacent-pixel correlation, 99.61% NPCR, and 33.47% UACI. Across five representative tampering attacks, the proposed framework achieved an observed 100% block-level true-positive rate, 0% false-positive rate, and required only 2.847 ± 0.258 ms for block-wise authentication with 6.25% tag overhead using the default 16×16 block configuration. These results demonstrate that the proposed framework effectively combines statistical confidentiality, modern cryptographic key management, and reliable block-level tamper localization within a unified authenticated image encryption architecture.References
H. Zhang, X. Feng, J. Sun, and P. Yan, “Chaotic Image Security Techniques and Developments: A Review,” Mathematics, vol. 13, no. 12, p. 1976, Jun. 2025, doi: 10.3390/math13121976.
L. Huang, C. Ding, Z. Bao, H. Chen, and C. Wan, “A DNA Encoding Image Encryption Algorithm Based on Chaos,” Mathematics, vol. 13, no. 8, p. 1330, Apr. 2025, doi: 10.3390/math13081330.
C. Bhaya, M. Zain, and A. K. Singh, “A DNA-based color image cryptosystem using chaotic maps, spiral mixing and non-linear binary operator,” Sci. Rep., vol. 15, no. 1, p. 33813, Sep. 2025, doi: 10.1038/s41598-025-04021-4.
M. Samiullah et al., “An Image Encryption Scheme Based on DNA Computing and Multiple Chaotic Systems,” IEEE Access, vol. 8, pp. 25650–25663, 2020, doi: 10.1109/ACCESS.2020.2970981.
B. S. W. Poetro, K. Adi, and A. P. Widodo, “System-Level Secure Key Management For DNA-Based Image Cryptography Using Ephemeral ECDH and HKDF-SHA256,” Eng. Technol. Appl. Sci. Res., vol. 16, no. 3, pp. 36418–36426, Jun. 2026, doi: 10.48084/etasr.17609.
B. S. W. Poetro, K. Adi, and A. P. Widodo, “Autonomous Key Generation and Management using HKDF-SHA256 for Secure DNA-based Image Cryptography,” in 2025 3rd International Conference on Computer System, Information Technology, and Electrical Engineering (COSITE), Dec. 2025, pp. 381–384. doi: 10.1109/COSITE68330.2025.11414297.
H. Krawczyk and P. Eronen, “HMAC-based Extract-and-Expand Key Derivation Function (HKDF),” May 2010. doi: 10.17487/rfc5869.
A. Langley, M. Hamburg, and S. Turner, “Elliptic Curves for Security,” Jan. 2016. doi: 10.17487/RFC7748.
R. Serrano, C. Duran, M. Sarmiento, C.-K. Pham, and T.-T. Hoang, “ChaCha20–Poly1305 Authenticated Encryption with Additional Data for Transport Layer Security 1.3,” Cryptography, vol. 6, no. 2, p. 30, Jun. 2022, doi: 10.3390/cryptography6020030.
Y. Nir and A. Langley, “ChaCha20 and Poly1305 for IETF Protocols,” Jun. 2018. doi: 10.17487/RFC8439.
P. W. Adi, A. Sugiharto, M. M. Hakim, D. R. I. M. Setiadi, and E. Winarno, “Efficient fragile watermarking for image tampering detection using adaptive matrix on chaotic sequencing,” Intell. Syst. with Appl., vol. 26, p. 200530, Jun. 2025, doi: 10.1016/j.iswa.2025.200530.
T. Mendis, F. Kandah, and L. Medury, “MATADOR: a magic matrix-based framework for tamper detection and image recovery,” J. King Saud Univ. Comput. Inf. Sci., vol. 37, no. 5, p. 77, Jul. 2025, doi: 10.1007/s44443-025-00099-y.
B. Jasra and A. Hassan Moon, “Color image encryption and authentication using dynamic DNA encoding and hyper chaotic system,” Expert Syst. Appl., vol. 206, no. December 2021, p. 117861, Nov. 2022, doi: 10.1016/j.eswa.2022.117861.
H. Zhiqiang, A. Rauf, A. Nazir, F. Tchier, A. Aslam, and K. A. Tola, “Design and analysis of a secure image encryption algorithm using proposed non-linear RN chaotic system and ECC/HKDF key derivation with authentication support,” Sci. Rep., vol. 15, no. 1, p. 39951, Nov. 2025, doi: 10.1038/s41598-025-23592-w.
R. Bhargav and P. Singh, “A structure based block-wise image authentication framework for secure transmission and tamper localisation,” Results Eng., vol. 31, p. 111483, Sep. 2026, doi: 10.1016/j.rineng.2026.111483.
V. N. S. Kumaran, T. Manikandan, R. K. Dhanaraj, T. Al-Shehari, N. A. Alsadhan, and S. Selvarajan, “A secure medical image encryption technique based on DNA cryptography with elliptic curves,” Sci. Rep., vol. 15, no. 1, p. 20003, Jun. 2025, doi: 10.1038/s41598-025-03898-5.
A. Hennache, M. L. Hennache, and S. M. A. Ghaly, “Improving the RSA Encryption for Images by Introducing DNA Sequence Encoding,” Eng. Technol. Appl. Sci. Res., vol. 14, no. 6, pp. 17786–17791, Dec. 2024, doi: 10.48084/etasr.8557.
E. Winarno, K. Nugroho, P. W. Adi, and D. R. I. M. Setiadi, “Combined Interleaved Pattern to Improve Confusion-Diffusion Image Encryption Based on Hyperchaotic System,” IEEE Access, vol. 11, pp. 69005–69021, 2023, doi: 10.1109/ACCESS.2023.3285481.
E. Winarno, W. Hadikurniawati, K. Nugroho, and V. Lusiana, “Integrating Quadratic Polynomial and Symbolic Chaotic Map-Based Feistel Network to Improve Image Encryption Performance,” IEEE Access, vol. 12, pp. 106720–106734, 2024, doi: 10.1109/ACCESS.2024.3436558.
E. Winarno, K. Nugroho, P. W. Adi, and D. R. I. M. Setiadi, “Integrated dual hyperchaotic and Josephus traversing based 3D confusion-diffusion pattern for image encryption,” J. King Saud Univ. - Comput. Inf. Sci., vol. 35, no. 9, p. 101790, Oct. 2023, doi: 10.1016/j.jksuci.2023.101790.
Y. Sanjalawe, A. Al-Daraiseh, S. Al-E’mari, and S. N. Makhadmeh, “FileCipher: A Chaos-Enhanced CPRNG-Based Algorithm for Parallel File Encryption,” Algorithms, vol. 19, no. 2, p. 119, Feb. 2026, doi: 10.3390/a19020119.
C. W. Chuah, N. Z. Harun, and I. R. A. Hamid, “Key derivation function: key-hash based computational extractor and stream based pseudorandom expander,” PeerJ Comput. Sci., vol. 10, p. e2249, Aug. 2024, doi: 10.7717/peerj-cs.2249.
A. Saini and R. Sehrawat, “Enhancing Data Security through Machine Learning-based Key Generation and Encryption,” Eng. Technol. Appl. Sci. Res., vol. 14, no. 3, pp. 14148–14154, Jun. 2024, doi: 10.48084/etasr.7181.
M. Bellare and C. Namprempre, “Authenticated Encryption: Relations among Notions and Analysis of the Generic Composition Paradigm,” J. Cryptol., vol. 21, no. 4, pp. 469–491, Oct. 2008, doi: 10.1007/s00145-008-9026-x.
H. Krawczyk, M. Bellare, and R. Canetti, “HMAC: Keyed-Hashing for Message Authentication,” Feb. 1997. doi: 10.17487/rfc2104.
V. Tanksale, “Efficient Elliptic Curve Diffie–Hellman Key Exchange for Resource-Constrained IoT Devices,” Electronics, vol. 13, no. 18, p. 3631, Sep. 2024, doi: 10.3390/electronics13183631.
Q. H. Dang, “Recommendation for applications using approved hash algorithms,” Gaithersburg, MD, 2012. doi: 10.6028/NIST.SP.800-107r1.
D. Dolev and A. Yao, “On the security of public key protocols,” IEEE Trans. Inf. Theory, vol. 29, no. 2, pp. 198–208, Mar. 1983, doi: 10.1109/TIT.1983.1056650.
T. Rahman, A. Khandakar, and M. E. H. Chowdhury, “Tuberculosis (TB) Chest X-ray Database.” IEEE DataPort, 2020. doi: 10.21227/mps8-kb56.
T. Rahman et al., “Reliable Tuberculosis Detection Using Chest X-Ray With Deep Learning, Segmentation and Visualization,” IEEE Access, vol. 8, pp. 191586–191601, 2020, doi: 10.1109/ACCESS.2020.3031384.
Y. Wu, J. P. Noonan, and S. Agaian, “NPCR and UACI Randomness Tests for Image Encryption,” Cyber Journals Multidiscip. Journals Sci. Technol. J. Sel. Areas Telecommun. , pp. 31–38, 2011, Accessed: Sep. 27, 2019. [Online]. Available: https://pdfs.semanticscholar.org/2b47/9abce221135af6065f9f8352e09cbfb5733a.pdf
Downloads
Published
How to Cite
Issue
Section
License
Copyright (c) 2026 Bagus Satrio Waluyo Poetro, Kusworo Adi, Aris Puji Widodo
This work is licensed under a Creative Commons Attribution 4.0 International License.
