Asymmetric image encryption scheme based on the Quantum logistic map and cyclic modulo diffusion

: In this study, a novel asymmetric image encryption scheme based on the Rivest-Shamir-Adleman (RSA) algorithm and Arnold transformation is proposed. First, the asymmetric public key RSA algorithm is used to generate the initial values for a quantum logistic map. Second, the parameters of the Arnold map are calculated. Then, Arnold scrambling operation is performed on the plain image to achieve the rough hiding of image information. Third, each row and each column of the image are taken as different units respectively and then exclusive-OR (XOR) diffusion is applied. Finally, the generated keystream is used to perform an end-to-start cyclic modulo diffusion operation for all rows and columns to produce the final cipher image. In addition, the keystream is related to the plain image, which can enhance the ability to resist chosen plaintext attack and known plaintext attack. The test results also show that the proposed encryption algorithm has strong plain sensitivity and key sensitivity.


Introduction
With rapid development of the Internet, information technology, and digital communications, the status of multimedia data transmission is increasing in modern society. Image is an important information carrier in human life to display or describe directly the objective phenomena. In recent years, owing to leakages of digital image information, serious consequences have occurred. Thus, image encryption protection has become particularly important. Traditional encryption algorithms in the fractional Hartley domain, a new phase image encryption scheme was proposed in [21]. Liu et al. [22] suggested a color image encryption algorithm using Arnold transformation and color mixing operation in the discrete cosine transform (DCT) domain. Arnold transformation was used to scramble the pixels of the three channels in color image, and the DCT was used to change the pixel values in the entire spatial distribution. Sui and Gao [23] proposed a color image encryption scheme using Gyrator transform and Arnold transformation, which has two security levels to protect image content. In the encryption and decryption processes, the rotation angle of the gyrator, number of iterations in Arnold transformation, parameters of the chaotic mapping, and generated accompanying phase function were all treated as the secret keys, thereby improving the security of the system. In [24], an optical color image encryption technique based on Arnold transformation and interferometry was proposed. Color image was decomposed into three channels R, G, B, and then each channel was encrypted into two random phase masks using Arnold transformation and interference method. Chen [25] used Arnold transformation to perturb the matrix pixels by encoding a single parameter, to form an image similar to color noise and to reduce the key space for storage and transmission applications. Wang et al. [26] suggested a fast algorithm for image encryption by parallel computing, in which parallelism of diffusion is designed to implement fast operation.
According to the classification of cryptosystems, cryptography can be divided into symmetric cryptography [27][28][29][30] and asymmetric (public key) cryptography [31][32][33][34][35][36]. In an asymmetric encryption algorithm, different keys are used for encrypting and decrypting, thereby realizing the nonlinearity of the algorithm, higher security, and convenient implementation of digital signature and verification. In [33], a scalable method of asymmetric image compression and encryption was proposed based on a discrete wavelet transform (DWT) and nonlinear operations in the cylindrical diffraction domain. DWT reduces the amount of data and is more conducive to data transmission. To enhance an encryption scheme with a larger key space than traditional cryptographic systems in the FT and FrFT fields, Ren et al. [37] designed an asymmetric image encryption scheme using a phase-truncated discrete multi-parameter FrFT. After a pixel scrambling and a random-phase mask, the asymmetric ciphertext with stable white noise was obtained through phase truncation.
In order to reduce the redundancy of image transmission, compression was also considered in image encryption. For example, Chai et al. [38] proposed a visually meaningful cipher image encryption by using technology of compressive sensing. Chaotic system, kronecker product, and singular value decomposition were all combined to produce the measurement matrix. In [39], a new chaotic color image encryption scheme was presented by multi-embedding strategy and compressive sensing. Each channel of R, G, and B were compressed to obtain measurements. Although there are many new image encryption algorithms have been published, some of them still have defects, for example, (i) The keystream is generated only dependent on the secret keys; (ⅱ) It is hard to ensure the secure management of keys. In view of this, this paper combines quantum logistic map, Arnold transformation, and diffusion technology together with RSA to design an asymmetric encryption scheme, aiming to carry out high security, strong anti-attack and more suitable for network transmission. The innovations of this paper are: 1) Extract the text information of the plain image to be plain message. 2) Generate the cipher message by RSA and produce the initial conditions for quantum system by a new mathematical model. 3) Update the initial conditions by the text information of the plain image to enhance the plaintext dependence. 4) Build an end-to-start cyclic modulo diffusion operation.
The rest of this article is organized as follows. Section 2 briefly introduces the public key RSA algorithm, Arnold transformation, and quantum logistic map. Section 3 gives the image encryption and decryption processes. Section 4 displays some experimental results. Section 5 discusses the various analytical tests of the encryption results. Section 6 presents the conclusions of this study.

RSA encryption algorithm
The public key RSA cryptosystem was proposed in 1978 by Rivest, Shamir, and Adleman. RSA encryption algorithm is an asymmetric encryption structure, which can complete the decryption operation without directly passing the keys. This method ensures security and avoids the risk of keys being cracked, which typically happens when keys are transmitted directly. In the whole encryption process, the key and algorithm are independently separated. Therefore, the key can be distributed more effectively. The specific description of the RSA algorithm is as follows: Step 1: Randomly and secretly choose two large prime numbers p and q .
Step 2: is the Euler function of n . Step 5: Open integers n and e , and keep d in secret.
Step 6: Encrypt plaintext m to be ciphertext c by mod e c m n  .
Step 7: Decrypt ciphertext c to be plaintext m by mod d m c n  .

Quantum logistic map
Logistic map is a classical mathematical model used to study the behaviors of complex systems, such as dynamic systems, fractals, and chaos. In physics, if a physical quantity has the smallest indivisible basic unit, then this physical quantity is quantized, and the smallest unit is called a quantum. The quantum state is introduced into the chaotic system to form a quantum logistic map. The coupling of the system and harmonic oscillator path will produce a quantum logistic map with quantum correction. Akhshani et al. [40] applied quantum logistic map for image encryption, and its quantum logistic map is defined as, where  and r represent the dissipation parameter and adjustable parameter, respectively, and   , the quantum logistic map shows higher chaotic characteristics [40]. So, in this study, 3.99 r  and 7   are set with all initial parameters be real numbers. As pointed by [40]: classical nonlinear chaotic systems are famous because of their exponential sensitivity to each initial condition. However, the linearity of quantum mechanics not only shows such sensitivity to each initial condition, and also the Heisenberg uncertainty principle (HUP) prevents us from talking about initial conditions in quantum mechanics. Therefore, for this interesting property, quantum logistic map can also be used in cryptography, for example image encryption. In view of these good characteristics of quantum logistic map, many image encryption algorithms [41][42][43] based on it have been proposed.

Arnold transformation
Arnold transformation is a scrambling operation that can randomly change the pixel position for an image, which is also called a cat map. By rearranging the pixels in a digital image matrix, the originally meaningful image will become a meaningless image. Arnold transformation is defined as follows: By replacing the matrix of above Arnold transformation, a generalized Arnold transformation can be obtained, which is defined as Arnold transformation is reversible, and it is easy to be implemented. Therefore, this study combines Arnold transformation with the quantum logistic system and other technologies to design a new image encryption scheme.

Image encryption process
This study integrates the quantum logistic map, the RSA algorithm, the Arnold transformation, and the diffusion operation to realize a new asymmetric image encryption scheme. The framework of the proposed image encryption scheme is shown in Figure 1. The detail encryption steps are as follows: Step 1: Select large prime numbers p and q , and calculate public key e and private key d .
Step 2: Read plain image P with size MN  .
Step 3: Extract the text information of the image, i.e., , for public information.
Step 4: Select three plain parameters ( 1,2,3) i ai  and encrypt them with the public key to obtain the public parameters mod e i i c a n  .
Step 6: Update the initial values: 0 Step 7: The updated initial values are substituted into quantum logistic map. After discarding the first 500 values of the sequence, the chaotic sequences ,, x y z are obtained.
Step 8: Process the sequences as, Step 9: Perform Arnold scrambling operation on the plain image P to obtain the scrambled image A . The values of ma ， mb ， and mc in the Arnold map are calculated as mod( Step 10: For the image A , perform XOR diffusion operation by row for it to obtain image B as, Step 11: Perform diffusion under modulo operation by row again to obtain image C as, Step 12: Connect the last row of image C with the first row of C and perform diffusion under modulo operation for rows again to obtain image D as, 1 1 1 mod( , 256) Step 13: The column direction is similar to the row direction. For image D , take the column as a unit and perform the XOR diffusion operation on the corresponding component of each column and Y to obtain image E as, where 1, 2, , jN  .
Step 14: Perform modulo diffusion to each column to obtain image F as, Mathematical Biosciences and Engineering Volume 18, Issue 5, 5427-5448.
Step 15: Connect the last column of the image F with the first column of F and perform modulo diffusion in the column direction again to obtain the cipher image G as, 1 1 where 2,3, , jN  . Figure 1. Flow of the proposed image encryption algorithm.

Image decryption process
The receiver has a cipher image G , public parameters 1 2 3 , , , , c c c r  , and R , and private key ( , ) dn. Figure 2 is the decryption flowchart of the proposed algorithm. The specific steps of decryption are as follows: Step 1: Use the private key ( , ) dn to decrypt the public parameters Step 5: By iterating quantum logistic map, and discarding the first 500 values of the sequence, obtain the chaotic sequence ,, x y z    .
Step 6: Use Eq (5) to process the sequence and get ,, Step 7: Calculate the two control parameters ma and mb of the Arnold map using Eqs (6) and (7).
Step 8: Use images G and Z  to perform the inverse modulo operation of the corresponding columns to derive image F  as, where 2,3, , jN  .
Step 9: Use image F  to perform the inverse modulo operation of the corresponding columns to derive image E as, Step 10: Use images E and Y  to perform the XOR diffusion operation of the corresponding column to derive image D as, where 1, 2, , jN  Step 11: The row direction is similar to the column direction. Use Z  to perform the inverse modulo diffusion operation in the row direction, and then use X  to perform the XOR diffusion of the corresponding rows to derive image A .
Step 12: According to the parameter values ma and mb , use Eq (4) to perform the inverse operation of the Arnold map and obtain the plain image P .

Experimental tests
Grayscale and color images (some from the USC-SIPI database) are taken for testing. Windows 10 operating system is used with an AMD Ryzen 7 1700 8-core processor and 8 GB memory, and the simulations are performed on MATLAB R2017b. Table 1 shows the values of each parameter in our test. Among them, 1 2 3 , , , , a a a q p and d are the private keys, as well as 12 , , , , e r c c  and 3 c are the public keys. Figures 3 and 4 present the test images and their corresponding cipher images, respectively. So, no useful information about the plain image can be seen from these cipher images. Figure 5 shows the corresponding correct decrypted images. So, the proposed cryptographic scheme can be applied to both grayscale and color images. Table 2 shows the time required to encrypt images of different sizes. As we see that our scheme can be implemented by a fast way.

Histogram analysis
Histogram analysis [44,45] shows how pixels are distributed in an image by plotting the number of observations for each brightness level. The frequency distribution of pixel values implies the statistical correlation between the plain images and the cipher images. A good image encryption system should have the ability to hide correlations; that is, the frequency distribution of the cipher on the pixel value is uniform, and the attacker cannot infer the plain information from it. To verify the uniformity of the pixel distribution of the proposed encryption algorithm, Figure 6 Figure 7 is the histogram of the Baboon color image with three channels. To further evaluate the uniformity of the histogram, the statistical chi-square test was also performed, which is defined as,  Table 3. Table 4 shows the chi-square comparison results. The smaller the chi-square value, the more uniform the pixel distribution and the higher the security. The histogram of the cipher image is evenly distributed, and the chi-square value is much smaller than the value of the plain image, which effectively improves resistivity against statistical attacks.

Correlation coefficient
Another measurement of statistical analyses is correlation [47][48][49][50]. For a natural digital image, there is a strong correlation between adjacent pixels in the horizontal, vertical, and diagonal directions. The lower correlation of adjacent pixels in a cipher image, the better performance of an encryption algorithm. A good cryptographic scheme should eliminate this correlation in a quantitative way to ensure security. The correlation coefficient is defined as where xy R  represents the correlation coefficient, x and y are the gray values of two adjacent pixels, and N is the total logarithm. Figure 8 shows the correlation of three directions of the grayscale image sailboat. Tables 5 and 6 show the correlation coefficient values of the test images. Table 7 shows the correlation coefficient comparisons of Baboon. The data in the tables show that the correlation coefficient of the plain images is close to 1, which means that the correlation coefficient between adjacent pixels is very strong. By using the proposed scheme, the values become close to 0, which means that our scheme can eliminate the strong correlation.

Information encryption
In information theory, entropy is an important index to measure the degree of randomness of a message. Ideally, each pixel of an 8-bit cipher image has a theory entropy value of 8. The higher the
information entropy value, the more uniform of gray value distribution and the more random of an image. The calculation formula of information entropy is, where () i px is the probability of the occurrence of i x , and N is the total number of i x . Tables 8  and 9 show the information entropy tests for different images. These results tell us that the information entropy values of the cipher image are very close to 8, indicating that the encryption scheme has strong randomness.

Local information encryption
Usually, an image has high data redundancy; therefore, its pixels have a high correlation with neighboring pixels. For a secure cipher image, the pixel values should be evenly distributed to achieve high randomness and high security. Local information entropy is another qualitative criterion for evaluating the randomness of an image, which is defined as, where i S represents the optional k groups of pixels in the image, and TB represents the number of pixels in i S . The local information entropy values of the grayscale and color images are tested and shown in Tables 10 and 11, respectively. Based on these results, it can be seen that the local information entropy of the cipher image has surpassed 7.95, indicating that the distribution of pixel values inside the image is very uniform and random.

Differential attack analysis
The ideal property of a good encryption method should be sensitive to any small change in the plain image. That is, when the plain image has a small change in any pixel, the difference of the cipher image is analyzed to evaluate the diffusion performance of the encryption algorithm and should have the ability to resist differential attacks. The number of pixel change rate (NPCR) and unified average changing intensity (UACI) are two standards used for testing. The formulas are, 12 12 0  (29) where 1 C is one cipher image, 2 C is another cipher image with one pixel in the same plain image changes. The theory values for NPCR and UACI are 99.6093 and 33.4635% respectively. Tables 12 and 13 present the average values of NPCR and UACI for grayscale and color images, respectively. Table 14 lists the comparisons by testing image Lena. All these test results show that the proposed asymmetric image encryption scheme has the ability to resist differential attacks.

Key sensitivity analysis
An extremely high key sensitivity can guarantee the security of an encryption system against the brute force attacks. To evaluate the sensitivity of keys, the 512 512  image Sailboat is used as an example for testing. Figure 9 shows the key sensitivity analysis results. Moreover, Figure 9(d) shows that even if a small key change occurs, the cipher image experiences a big difference. These test results show that only the correct key can decrypt the image, and the image encryption algorithm is highly sensitive to the keys and has the ability to resist brute force attacks.

Comparisons
The asymmetric image encryption algorithm proposed in this paper is suitable for grayscale and color images. Taking color image as an example, Table 15 shows the information entropy comparisons with other image encryption algorithms. The values in the table express that the information entropy result of the proposed scheme in this paper is closer to 8, indicating that the gray value distribution in the proposed asymmetric encryption scheme is more uniform and random than that of other algorithms. ; (d) difference of (b)-(c); (e) decrypted image using the keys of (c) for (b); (f) decrypted image using the keys of (b) for (c); (g) decrypted image with the correct key.

Conclusion and perspectives
This study employed a chaotic quantum logistic map, combining with both scrambling and diffusion operations, to propose a new asymmetric image encryption algorithm. First, the Arnold map was used to scramble the pixel positions of the plain images to achieve information hiding in the first layer. In the diffusion stage, different from the conventional point-to-point diffusion method, our solution took each row and each column as different units to perform diffusion operation. As to the row direction, the data in each row are first XOR-diffused. Then, each row in the image and the corresponding row in the keystream matrix are modulated and diffused; that is, two cyclic diffusions are realized by connecting the start and end. Operations to the column direction use a similar process to obtain the cipher image. Among them, the initial values of the quantum logistic map are related to the plain image, which can resist the known plaintext attack and chosen plaintext attack. Experimental tests and analyses show that the new asymmetric image encryption scheme proposed in this paper is suitable for both grayscale and color images, can better distribute pixel values be uniform, reduce high correlation, is highly sensitive to keys, and has the ability to resist various attacks.
However, there is still some disadvantages, for example, the compression operation was not considered in our scheme. So, in the future work, image can be compressed to reduce data redundancy, and how to achieve a good balance between the security and the complexity of image reconstruction should be taken into consideration. In addition, fast implement of encryption scheme is also an important issue in the future research.