Complete Technical Paper Content — Des To AES Migration Tool With Performance Analysis
Overview & System Context
Des To Aes Migration Tool With Performance Analysis: Comprehensive Web-Sourced Technical Investigation Exhaustive Research Dossier · Pure Web-Scraped Content: ~9044 Words · Real Software Screenshots: 3 1. Executive Overview & Technical Background Mifare (styled MIFARE by NXP or sometimes MiFare by other parties) is a series of integrated circuit (IC) chips used in contactless smart cards and proximity cards. The brand includes proprietary solutions based on various levels of the ISO/IEC 14443 Type-A 13.56 MHz contactless smart card standard. It uses AES and DES/Triple-DES encryption standards, as well as an older proprietary encryption algorithm, Crypto-1. According to NXP, 10 billion of their smart card chips and over 150 million reader modules have been sold. The MIFARE trademark is owned by NXP Semiconductors, which was spun off from Philips Electronics in 2006.
MIFARE Classic Employs a proprietary protocol compliant with parts 1–3 of ISO/IEC 14443 Type A, with an NXP proprietary security protocol for authentication and ciphering. Subtypes: MIFARE Classic EV1 (other subtypes are no longer in use). MIFARE Plus Drop-in replacement for MIFARE Classic with certified security level (AES-128 based) and is fully backwards compatible with MIFARE Classic. Subtypes: MIFARE Plus S, MIFARE Plus X, MIFARE Plus SE and MIFARE Plus EV2.
MIFARE Ultralight Low-cost ICs that are useful for high-volume applications such as public transport, loyalty cards and event ticketing. Subtypes: MIFARE Ultralight C, MIFARE Ultralight EV1, MIFARE Ultralight Nano and MIFARE Ultralight AES. Figure 1: What is Triple DES and why is it disallowed? | TechTarget MIFARE DESFire Contactless ICs that comply with parts 3 and 4 of ISO/IEC 14443-4 Type A with a mask-ROM operating system from NXP. The DES in the name refers to the use of a DES, two-key 3DES, three-key 3DES and AES encryption; while Fire is an acronym for Fast, innovative, reliable, and enhanced. Subtypes: MIFARE DESFire EV1, MIFARE DESFire EV2, MIFARE DESFire EV3, MIFARE DESFire EV3C and MIFARE DESFire Light.
MIFARE DUOX Contactless ICs that implement an ISO/IEC 14443-4 file system and secure messaging similar to MIFARE DESFire EV2/EV3, but with added support for public-key authentication. Unlike DESFire, DUOX chips no longer support the deprecated DES algorithm. The supported authentication key types are 128-bit AES, 256-bit AES and 256-bit elliptic-curve cryptography (ECC) with X.509 public-key certificate handling. There is also the MIFARE SAM AV2 contact smart card. This can be used to handle the encryption in communicating with the contactless cards. The SAM (Secure Access Module) provides the secure storage of cryptographic keys and cryptographic functions.
The Samsung TecTile NFC tag stickers use MIFARE Classic chips. This means only devices with an NXP NFC controller chip can read or write these tags. At the moment BlackBerry phones, the Nokia Lumia 610 (August 2012), the Google Nexus 4, Google Nexus 7 LTE and Nexus 10 (October 2013) can't read/write TecTile stickers. Sector-wise security-level switching The choice of crypto algorithm used in the authentication protocol can be set separately for each sector. This makes it possible to use the same card with both readers that can read MIFARE Classic products (with sectors protected by 48-bit CRYPTO1 keys, "Security Level 1") and readers that can read MIFARE Plus products (with sectors protected by 128-bit AES keys, "Security Level 3"). This feature is intended to make it easier to gradually migrate existing MIFARE Classic product-based installations to MIFARE Plus, without having to replace all readers at the same time.
ISO 7816-4 wrapping The card can now be accessed in either the protocol for MIFARE (which is not compliant with the ISO 7816-4 APDU format), or using a new protocol variant that runs on top of ISO 7816-4. This way the cards become compatible with NFC reader APIs that can only exchange messages in ISO 7816-4 APDU format, with a maximum transfer data buffer size of 256 bytes. Proximity check While the protocol for MIFARE Classic tolerated message delays of several seconds, and was therefore vulnerable to relay attacks, MIFARE Plus EV1 now implements a basic "ISO compliant" distance-bounding protocol. This puts tighter timing constraints on the permitted round-trip delay during authentication, to make it harder to forward messages to far-away cards or readers via computer networks. Secure end-2-end channel Permits AES-protected over-the-air updates even to Crypto1 application sectors (SL1SL3 mix mode). Transaction MAC The card can produce an additional message-authentication code over a transaction that can be verified by a remote clearing service, independent of the keys used by the local reader during the transaction.
Figure 2: A Design Implementation and Comparative Analysis of Advanced Encryption ... 2. System Architecture & Core Working Principles Transaction Timer To help mitigate man-in-the-middle attacks, the Transaction Timer feature, which is also available on NXP's MIFARE DESFire EV3 IC, makes it possible to set a maximum time per transaction, so it's harder for an attacker to interfere with the transaction.
384 and 1024 bits user memory product variants OTP, lock bits, configurable counters for improved security Three independent 24-bit one-way counters to stop reloading Protected data access through 32-bit password ECC originality check. However, the purpose of it "during (pre-)personalization is to protect customer investments by identifying mass penetration of non-NXP originated MIFARE Ultralight AES ICs into an infrastructure. As individual signatures can still be copied, it does not completely prevent hardware copy or emulation of individual MIFARE Ultralight AES ICs." Support for random ID Support for 128-bit AES Hardware and operating system are Common Criteria certified at level EAL 4+ MIFARE DESFire EV1 was publicly announced in November 2006.
MI smart App enabling to offer or sell memory space for additional applications of 3rd parties without the need to share secret keys Transaction MAC to authenticate transactions by 3rd parties Virtual Card Architecture for privacy protection Proximity check against relay attacks MIFARE DESFire EV2 was publicly announced in March 2016 at the IT-TRANS event in Karlsruhe, Germany Figure 3: Difference between AES and DES Encryption - Scaler Topics ISO/IEC 14443 A 1–4 and ISO/IEC 7816-4 compliant Common Criteria EAL5+ certified for IC hardware and software NFC Forum Tag Type 4 compliant SUN message authentication for advanced data protection within standard NDEF read operation Choice of open DES/2K3DES/3K3DES/AES crypto algorithms Flexible file structure: hosts as many applications as the memory size supports Proof of transaction with card generated MAC Transaction Timer mitigates risk of man-in-the-middle attacks MIFARE DESFire EV3 was publicly announced on 2 June 2020.
A Practical Attack on the MIFARE Classic Dismantling MIFARE Classic Wirelessly Pickpocketing a MIFARE Classic Card Ciphertext-only Cryptanalysis on Hardened MIFARE Classic Cards In response to these attacks, the Dutch Minister of the Interior and Kingdom Relations stated that they would investigate whether the introduction of the Dutch Rijkspas could be brought forward from Q4 of 2008. NXP tried to stop the publication of the second article by requesting a preliminary injunction.
However, the injunction was denied, with the court noting that, "It should be considered that the publication of scientific studies carries a lot of weight in a democratic society, as does inform society about serious issues in the chip because it allows for mitigating of the risks." Both independent research results are confirmed by the manufacturer NXP. These attacks on the cards didn't stop the further introduction of the card as the only accepted card for all Dutch public transport the OV-chipkaart continued as nothing happened but in October 2011 the company TLS, responsible for the OV-Chipkaart announced that the new version of the card will be better protected against fraud. The MIFARE Classic encryption Crypto-1 can be broken in about 200 seconds on a laptop from 2008, if approx. 50 bits of known (or chosen) keystream are available. This attack reveals the key from sniffed transactions under certain (common) circumstances and/or allows an attacker to learn the key by challenging the reader device. Another attack recovers the secret key in about 40 ms on a laptop. This attack requires just one (partial) authentication attempt with a legitimate reader. Additionally, there are a number of attacks that work directly on a card and without the help of a valid reader device. These attacks have been acknowledged by NXP. In April 2009 new and better card-only attack on MIFARE Classic has been found. It was first announced at the rump session of Eurocrypt 2009. This attack was presented at SECRYPT 2009. The full description of this latest and fastest attack to date can also be found in the IACR preprint archive. The new attack improves by a factor of more than 10 all previous card-only attacks on MIFARE Classic, has instant running time, and does not require a costly precomputation. The new attack allows recovering the secret key of any sector of the MIFARE Classic card via wireless interaction, within about 300 queries to the card. It can then be combined with the nested authentication attack in the Nijmegen Oakland paper to recover subsequent keys almost instantly.
Both attacks combined and with the right hardware equipment such as Proxmark3, one should be able to clone any MIFARE Classic card in 10 seconds or less. This is much faster than previously thought. In an attempt to counter these card-only attacks, new "hardened" cards have been released in and around 2011, such as the MIFARE Classic EV1. These variants are insusceptible for all card-only attacks publicly known until then, while remaining backward compatible with the original MIFARE Classic. In 2015, a new card-only attack was discovered that is also able to recover the secret keys from such hardened variants. After the discovery of this attack, NXP officially recommended to migrate from Mifare Classic product-based systems to higher security products.
The Austronesian peoples, sometimes referred to as Austronesian-speaking peoples, are a large collection of peoples who speak Austronesian languages, having settled in Taiwan, maritime Southeast Asia, parts of mainland Southeast Asia, Micronesia, coastal New Guinea, Island Melanesia, Polynesia, and Madagascar. They also include indigenous ethnic minorities in Vietnam, Cambodia, Myanmar, Thailand and Hainan. The nations and territories predominantly populated by Austronesian-speaking peoples are sometimes known collectively as Austronesia. The group originated from a prehistoric seaborne migration, known as the Austronesian expansion, from Taiwan, circa 3000 to 1500 BCE. Austronesians reached the Batanes Islands in the northernmost Philippines by around 2200 BCE. They used sails some time before 2000 BCE. In conjunction with their use of other maritime technologies (notably catamarans, outrigger boats, lashed-lug boats, and the crab claw sail), this enabled phases of rapid dispersal into the islands of the Indo-Pacific, culminating in the settlement of New Zealand c. 1250 CE. During the initial part of the migrations, they encountered and assimilated (or were assimilated by) the Paleolithic populations that had migrated earlier into Maritime Southeast Asia and New Guinea. They reached as far as Easter Island to the east, Madagascar to the west, and New Zealand to the south. At the furthest extent, they might have also reached the Americas. Aside from language, Austronesian peoples widely share cultural characteristics, including such traditions and traditional technologies as lashed-lug shipbuilding, tattooing, stilt houses, jade carving, wetland agriculture, and various rock art motifs. They also share domesticated plants and animals that were carried along with the migrations, including rice, bananas, coconuts, breadfruit, Dioscorea yams, taro, paper mulberry, chickens, pigs, and dogs.
The linguistic connections between Madagascar, Polynesia, and Southeast Asia, particularly the similarities between Malagasy, Malay, and Polynesian numerals, were recognized early in the colonial era by European authors. The first formal publication on these relationships was in 1708 by Dutch Orientalist Adriaan Reland, who recognized a "common language" from Madagascar to western Polynesia, although Dutch explorer Cornelis de Houtman observed linguistic links between Madagascar and the Malay Archipelago a century earlier, in 1603. German naturalist Johann Reinhold Forster, who traveled with James Cook on his second voyage, also recognized the similarities of Polynesian languages to those of Island Southeast Asia. In his book Observations Made during a Voyage round the World (1778), he posited that the ultimate origins of the Polynesians might have been the lowland regions of the Philippines and proposed that they arrived to the islands via long-distance voyaging.
3. Software Implementation, Frameworks & Protocols The Spanish philologist Lorenzo Hervás later devoted a large part of his Idea dell'universo (1778–1787) to the establishment of a language family linking the Malay Peninsula, the Maldives, Madagascar, Indonesia (Sunda Islands and Moluccas), the Philippines, and the Pacific Islands eastward to Easter Island. Multiple other authors corroborated this classification (except for the erroneous inclusion of Maldivian), and the language family came to be known as "Malayo-Polynesian", first coined by the German linguist Franz Bopp in 1841 (German: malayisch-polynesisch). The connections between Southeast Asia, Madagascar, and the Pacific Islands were also noted by other European explorers, including the Orientalist William Marsden and the naturalist Johann Reinhold Forster. Johann Friedrich Blumenbach added Austronesians as the fifth category to his "varieties" of humans in the second edition of De Generis Humani Varietate Nativa (1781). He initially grouped them by geography and thus called Austronesians the "people from the southern world". In the third edition, published in 1795, he named Austronesians the "Malay race", or the "brown race", after correspondence with Joseph Banks, who was part of the first voyage of James Cook. Blumenbach used the term "Malay" due to his belief that most Austronesians spoke the "Malay idiom" (i.e., the Austronesian languages), though he inadvertently caused the later confusion of his racial category with the Malay ethnic group. The other varieties Blumenbach identified were the "Caucasians" (white), "Mongolians" (yellow), "Ethiopians" (black), and "Americans" (red). Blumenbach's definition of the "Malay" race is largely identical to the modern distribution of the Austronesian peoples, including not only Islander Southeast Asians but also the people of Madagascar and the Pacific Islands. Although Blumenbach's work was later used in scientific racism, Blumenbach was a monogenist and did not believe the human "varieties" were inherently inferior to each other. Rather, he believed that the Malay race was a combination of the "Ethiopian" and "Caucasian" varieties.
Malay variety. Tawny-coloured; hair black, soft, curly, thick and plentiful; head moderately narrowed; forehead slightly swelling; nose full, rather wide, as it were diffuse, end thick; mouth large, upper jaw somewhat prominent with parts of the face when seen in profile, sufficiently prominent and distinct from each other. This last variety includes the islanders of the Pacific Ocean, together with the inhabitants of the Marianas, the Philippine, the Molucca and the Sunda Islands, and of the Malayan peninsula. I wish to call it the Malay, because the majority of the men of this variety, especially those who inhabit the Indian islands close to the Malacca peninsula, as well as the Sandwich, the Society, and the Friendly Islanders, and also the Malambi of Madagascar down to the inhabitants of Easter Island, use the Malay idiom. By the 19th century, however, a classification of Austronesians as being a subset of the "Mongolian" race was favored, as was polygenism. The Australo-Melanesian populations of Southeast Asia and Melanesia (whom Blumenbach initially classified as a "subrace" of the "Malay" race) were also now being treated as a separate "Ethiopian" race by authors like Georges Cuvier, Conrad Malte-Brun (who first coined the term "Oceania" as Océanique), Julien-Joseph Virey, and René Lesson. The British naturalist James Cowles Prichard originally followed Blumenbach by treating Papuans and Indigenous Australians as being descendants of the same stock as Austronesians. But by his third edition of Researches into the Physical History of Man (1836–1847), his work had become more racialized due to the influence of polygenism. He classified the peoples of Austronesia into two groups: the "Malayo-Polynesians" (roughly equivalent to the Austronesian peoples) and the "Kelænonesians" (roughly equivalent to the Australo-Melanesians). He further subdivided the latter into the "Alfourous" (also "Haraforas" or "Alfoërs", the Native Australians), and the "Pelagian or Oceanic Negroes" (the Melanesians and western Polynesians). Despite this, he acknowledges that "Malayo-Polynesians" and "Pelagian Negroes" had "remarkable characters in common", particularly in terms of language and craniometry. In linguistics, the Malayo-Polynesian language family also initially excluded Melanesia and Micronesia, due to the perceived physical differences between the inhabitants of these regions from Malayo-Polynesian speakers. However, there was growing evidence of their linguistic relationship to Malayo-Polynesian languages, notably from studies on the Melanesian languages by Georg von der Gabelentz, Robert Henry Codrington, and Sidney Herbert Ray.
Codrington coined and used the term "Ocean" language family rather than "Malayo-Polynesian" in 1891, in opposition to the exclusion of Melanesian and Micronesian languages. This was adopted by Ray, who defined the "Oceanic" language family as encompassing the languages of Southeast Asia and Madagascar, Micronesia, Melanesia, and Polynesia. In 1899, the Austrian linguist and ethnologist Wilhelm Schmidt coined the term "Austronesian" (German: austronesisch, from Latin auster, "south wind"; and Greek νIσος, "island") to refer to the language family. Schmidt had the same motivations as Codrington: he proposed the term as a replacement to "Malayo-Polynesian", because he also opposed the implied exclusion of the languages of Melanesia and Micronesia in the latter name. It became the accepted name for the language family, with Oceanic and Malayo-Polynesian languages being retained as names for subgroups.
The term "Austronesian", or more accurately "Austronesian-speaking peoples", came to refer to people who speak the languages of the Austronesian language family. Some authors, however, object to the use of the term to refer to people, as they question whether there really is any biological or cultural shared ancestry between all Austronesian-speaking groups. This is especially true for authors who reject the prevailing "Out of Taiwan" hypothesis and instead offer scenarios where the Austronesian languages spread among preexisting static populations through borrowing or convergence, with little or no population movements.
Despite these objections, the general consensus is that the archeological, cultural, genetic, and especially linguistic evidence all separately indicate varying degrees of shared ancestry among Austronesian-speaking peoples that justifies their treatment as a "phylogenetic unit". This has led to the use of the term "Austronesian" in academic literature to refer not only to the Austronesian languages but also the Austronesian-speaking peoples, their societies, and the geographic area of Austronesia.
Some Austronesian-speaking groups are not direct descendants of Austronesians and acquired their languages through language shift, but this is believed to have happened only in a few instances, since the Austronesian expansion was too rapid for language shifts to have occurred fast enough. In parts of Island Melanesia, migrations and paternal admixture from Papuan groups after the Austronesian expansion (estimated to have started at around 500 BCE) also resulted in gradual population turnover. These secondary migrations were incremental and happened gradually enough that the culture and language of these groups remained Austronesian, even though in modern times, they are genetically more Papuan. In the vast majority of cases, the language and material culture of Austronesian-speaking groups descend directly through generational continuity, especially in islands that were previously uninhabited. Serious research into the Austronesian languages and its speakers has been ongoing since the 19th century. Modern scholarship on Austronesian dispersion models is generally credited to two influential papers in the late 20th century: The Colonization of the Pacific: A Genetic Trail (Hill & Serjeantson, eds., 1989) and The Austronesian Dispersal and the Origin of Languages (Bellwood, 1991). The topic is particularly interesting to scientists for the remarkably unique characteristics of the Austronesian speakers: their extent, diversity, and rapid dispersal. Regardless, certain disagreements still exist among researchers with regards to chronology, origin, dispersal, adaptations to the island environments, interactions with preexisting populations in areas they settled, and cultural developments over time. The mainstream accepted hypothesis is the "Out of Taiwan" model first proposed by Peter Bellwood. But there are multiple rival models that create a sort of "pseudo-competition" among their supporters due to narrow focus on data from limited geographic areas or disciplines. The most notable of which is the "Out of Sundaland" (or "Out of Island Southeast Asia") model.
Austronesians were the first humans with seafaring vessels that could cross large distances on the open ocean; this technology allowed them to colonize a large part of the Indo-Pacific region. Prior to the 16th-century colonial era, the Austronesian language family was the most widespread in the world, spanning half the planet from Easter Island in the eastern Pacific Ocean to Madagascar in the western Indian Ocean.
Languages of the Austronesian family are today spoken by about 386 million people (4.9% of the global population), making it the fifth-largest language family by number of speakers. Major Austronesian languages include Malay (around 250–270 million in Indonesia alone in its own literary standard, named Indonesian), Javanese, and Filipino (Tagalog). The family contains 1,257 languages, the second-largest number of any language family. The geographic region that encompasses native Austronesian-speaking populations is sometimes referred to as "Austronesia". Other geographic names for various subregions include Malay Peninsula, Greater Sunda Islands, Lesser Sunda Islands, Island Melanesia, Island Southeast Asia, Malay Archipelago, Maritime Southeast Asia, Melanesia, Micronesia, Near Oceania, Oceania, Pacific Islands, Remote Oceania, Polynesia, and Wallacea. In Indonesia, the nationalistic term Nusantara, from Old Javanese, is also popularly used for the Indonesian islands.
Austronesian regions are almost exclusively islands in the Pacific and Indian oceans, with predominantly tropical or subtropical climates with considerable seasonal rainfall. Inhabitants of these regions include Taiwanese indigenous peoples, most ethnic groups in Brunei, East Timor, Indonesia, Madagascar, Malaysia, Micronesia, the Philippines, and Polynesia. Also included are the Malays of Singapore; the Polynesians of New Zealand, Hawaii, and Chile; the Torres Strait Islanders of Australia; the non-Papuan peoples of Melanesia and coastal New Guinea; the Shibushi speakers of Mayotte, and the Malagasy and Shibushi speakers of Réunion. Austronesians are also found in the regions of Southern Thailand; the Cham areas in Vietnam, Cambodia, and Hainan; and the Mergui Archipelago of Myanmar. Additionally, modern-era migration has brought Austronesian-speaking people to the United States, Canada, Australia, the UK, mainland Europe, Cocos (Keeling) Islands, South Africa, Sri Lanka, Suriname, Hong Kong, Macau, and West Asian countries. Some authors also propose further settlements and contacts in the past in areas that are not inhabited by Austronesian speakers today. These range from likely hypotheses to very controversial claims with minimal evidence. In 2009, Roger Blench compiled an expanded map of Austronesia that encompassed these claims based on a variety of evidence, such as historical accounts, loanwords, introduced plants and animals, genetics, archeological sites, and material culture. They include areas like the Pacific coast of the Americas, Japan, the Yaeyama Islands, the Australian coast, Sri Lanka and coastal South Asia, the Persian Gulf, some Indian Ocean islands, East Africa, South Africa, and West Africa.
Austronesian peoples include the following groupings by name and geographic location (incomplete): 4. Practical Deployment, Analysis & Case Studies Formosan: Taiwan (e.g., Amis, Atayal, Bunun, Paiwan, collectively known as Taiwanese indigenous peoples) Malayo-Polynesian: Borneo groups (e.g., Kadazan-Dusun, Murut, Iban, Bidayuh, Dayak, Lun Bawang/Lundayeh) Chamic group: Cambodia, Hainan, Cham areas of Vietnam (remnants of the Champa kingdom, which covered central and southern Vietnam) as well as Aceh, in northern Sumatra (e.g., Acehnese, Chams, Jarai, Utsuls) Moken Central Luzon group: (e.g., Kapampangan, Sambal) Igorot (Cordillerans): Cordilleras (e.g., Balangao, Ibaloi, Ifugao, Itneg, Kankanaey) Lumad: Mindanao (e.g., Kamayo, Mandaya, Mansaka, Kalagan, Manobo, Tasaday, T'boli) Malagasy: Madagascar (e.g., Betsileo, Merina, Sihanaka, Bezanozano) Melanesians: Melanesia (e.g., Fijians, Kanak, Ni-Vanuatu, Solomon Islands) Micronesians: Micronesia (e.g., Carolinian, Chamorro, Palauans) Moro: Bangsamoro (Mindanao & Sulu Archipelago, e.g., Maguindanao, Iranun, Maranao, Tausug, Yakan, Sama-Bajau) Northern Luzon lowlanders (e.g., Ilocano, Pangasinan, Ibanag, Itawes) Polynesians: Polynesia (e.g., MIori, Native Hawaiians, Cook Islands, Samoans, Tongans) Southern Luzon lowlanders (e.g., Tagalog, Bicolano) Sunda–Sulawesi language and ethnic groups, including Sundanese, Banjar, Javanese, Balinese, Toraja, Minangkabau, Batak, Malay (geographically includes Malaysia, Brunei, Pattani, Singapore, Cocos (Keeling) Islands, parts of Sri Lanka, southern Myanmar, and much of western and central Indonesia) Visayans: Visayas and neighboring islands (e.g., Aklanon, Boholano, Cebuano, Hiligaynon, Masbateño, Waray) Island Southeast Asia was settled by modern humans in the Paleolithic following coastal migration routes, presumably starting before 70,000 BP from Africa, long before the development of Austronesian cultures. These populations are typified by having dark skin, curly hair, and short statures, leading Europeans to believe, in the 19th century, that they were related to African Pygmies. However, despite these physical similarities, genetic studies have shown that they are more closely related to other Eurasian populations than to Africans.
The lowered sea levels of the Pleistocene made some of the modern-day islands of Sundaland accessible via land bridges. However, the spread of humans across the Wallace line and into Sahul necessitated crossing bodies of water. Remains of stone tools and marine shells in Liang Sarru, Salibabu Island, North Sulawesi, dated to 32,000–35,000 years ago, is possible evidence for the longest sea voyage by Paleolithic humans ever recorded. The island was previously uninhabited by humans or hominins and can only be reached from either Mindanao or the Sangihe Islands by crossing an expanse of water at least 100 km (62 mi) wide, even during the low sea levels of the Pleistocene. Other evidence of early maritime transport are the appearance of obsidian tools with the same source on neighboring islands. These include the Philippine obsidian network (Mindoro and Palawan, ca.33,000-28,000 BP), and the Wallacea obsidian network (Timor, Atauro, Kisar, Alor, ca.22,000 BP).
However, the method of crossing remains unknown and could have ranged from simple rafts to dugout canoes by the terminal Pleistocene. These early settlers are generally historically referred to as "Australo-Melanesians", though the terminology is problematic, as they are genetically diverse, and most groups within Austronesia have significant Austronesian admixture and culture. The unmixed descendants of these groups today include the interior Papuans and Indigenous Australians.
In modern literature, descendants of these groups, located in Island Southeast Asia west of Halmahera, are usually collectively referred to as "Negritos", while descendants of these groups east of Halmahera (excluding Indigenous Australians) are referred to as "Papuans". They can also be divided into two broad groups based on Denisovan admixture. Philippine Negritos, Papuans, Melanesians, and Indigenous Australians display Denisovan admixture, while Malaysian and western Indonesian Negritos (Orang Asli) and Andamanese islanders do not. Mahdi (2017) also uses the term "Qata" (from Proto-Malayo-Polynesian *qata) to distinguish the indigenous populations of Southeast Asia, versus "Tau" (from Proto-Austronesian *Cau) for the later settlers from Taiwan and mainland China. Both are based on proto-forms for the word "person" in Malayo-Polynesian languages that referred to darker-skinned and lighter-skinned groups, respectively. Jinam et al.
(2017) also proposed the term "First Sundaland People" in place of "Negrito", as a more accurate name for the original population of Southeast Asia. These populations are genetically distinct from later Austronesians, but through fairly extensive population admixture, most modern Austronesians have varying levels of ancestry from these groups. The same is true for some populations historically considered "non-Austronesians", due to physical differences—like Philippine Negritos, Orang Asli, and Austronesian-speaking Melanesians, all of whom have Austronesian admixture. In Polynesians in Remote Oceania, for example, the admixture is around 20 to 30% Papuan and 70 to 80% Austronesian. The Melanesians in Near Oceania are roughly around 20% Austronesian and 80% Papuan, while in the natives of the Lesser Sunda Islands, the admixture is around 50% Austronesian and 50% Papuan. Similarly, in the Philippines, the groups traditionally considered to be "Negrito" vary between 30 and 50% Austronesian. The high degree of assimilation among Austronesian, Negrito, and Papuan groups indicates that the Austronesian expansion was largely peaceful. Rather than violent displacement, the settlers and the indigenous groups absorbed each other. It is believed that in some cases, like in the Toalean culture of Sulawesi (c.
8,000–1,500 BP), it is even more accurate to say that the densely populated indigenous hunter-gatherer groups absorbed the incoming Austronesian farmers, rather than the other way around. Mahdi (2016) further asserts that Proto-Malayo-Polynesian *tau-mata ("person") is derived from a composite protoform *Cau ma-qata, combining "Tau" and "Qata" and indicative of the mixing of the two ancestral population types in these regions.
The broad consensus on the Urheimat (homeland) of Austronesian languages as well as the Neolithic early Austronesian peoples is accepted to be Taiwan, as well as the Penghu Islands. They are believed to have descended from ancestral populations in coastal mainland southern China, which are generally referred to as the "preIAustronesians". Through these pre-Austronesians, Austronesians may also share a common ancestry with neighboring groups in Neolithic southern China.
These Neolithic pre-Austronesians from the coast of southeastern China are believed to have migrated to Taiwan between approximately 10,000 and 6000 BCE. Other research has suggested that, according to radiocarbon dates, Austronesians may have migrated from mainland China to Taiwan as late as 4000 BCE (Dapenkeng culture). They continued to maintain regular contact with the mainland until 1500 BCE. The identity of the Neolithic pre-Austronesian cultures in China is contentious.
Tracing Austronesian prehistory in Fujian and Taiwan has been difficult due to the southward expansion of the Han dynasty (2nd century BCE) and the recent Qing dynasty annexation of Taiwan (1683 CE). Today, the only Austronesian language in southern China is Tsat, spoken in Hainan. The politicization of archaeology is also problematic, particularly erroneous reconstructions among some Chinese archaeologists of non-Sinitic sites as Han. Some authors, favoring the "Out of Sundaland" model, like William Meacham, reject the southern Chinese mainland origin of pre-Austronesians entirely.
Nevertheless, based on linguistic, archaeological, and genetic evidence, Austronesians are most strongly associated with the early farming cultures of the Yangtze River basin that domesticated rice from around 13,500 to 8,200 BP. They display typical Austronesian technological hallmarks, including tooth removal, teeth blackening, jade carving, tattooing, stilt houses, advanced boatbuilding, aquaculture, wetland agriculture, and the domestication of dogs, pigs, and chickens. These include the Kuahuqiao, Hemudu, Majiabang, Songze, Liangzhu, and Dapenkeng cultures that occupied the coastal regions between the Yangtze River delta and the Min River delta.
Based on linguistic evidence, there have been proposals linking Austronesians with other linguistic families into linguistic macrofamilies that are relevant to the identity of the pre-Austronesian populations. The most notable are the connections of Austronesians to the neighboring Austroasiatic, Kra-Dai, and Sinitic peoples (as Austric, Austro-Tai, and Sino-Austronesian, respectively). These are still not widely accepted, as evidence of these relationships are still tenuous, and the methods used are highly contentious. In support of both the Austric and Austro-Tai hypothesis, Robert Blust connects the lower Yangtze Neolithic Austro-Tai entity with the rice-cultivating Austroasiatic cultures, assuming the center of East Asian rice domestication, and putative Austric homeland, to be located in the Yunnan/Burma border area, instead of the Yangtze River basin, as is currently accepted. Under that view, there was an east–west genetic alignment, resulting from a rice-based population expansion, in the southern part of East Asia: Austroasiatic-Kra-Dai-Austronesian, with unrelated Sino-Tibetan occupying a more northerly tier. Depending on the author, other hypotheses have also included other language families like Hmong–Mien and even Japanese-Ryukyuan into the larger Austric hypothesis.
While the Austric hypothesis remains contentious, there is genetic evidence that at least in western Island Southeast Asia, there had been earlier Neolithic overland migrations (pre-4,000 BP) by Austroasiatic-speaking peoples into what is now the Greater Sunda Islands when the sea levels were lower, in the early Holocene. These peoples were assimilated linguistically and culturally by incoming Austronesian peoples in what is now modern-day Indonesia and Malaysia.
Several authors have also proposed that Kra-Dai speakers may actually be an ancient daughter subgroup of Austronesians that migrated back to the Pearl River Delta from Taiwan and/or Luzon, shortly after the Austronesian expansion, later migrating further westwards to Hainan, Mainland Southeast Asia, and Northeast India. They propose that the distinctiveness of Kra-Dai (it is tonal and monosyllabic) was the result of linguistic restructuring due to contact with Hmong–Mien and Sinitic cultures. Aside from linguistic evidence, Roger Blench has also noted cultural similarities between the two groups, like facial tattooing, tooth removal or ablation, teeth blackening, snake (or dragon) cults, and the multiple-tongued jaw harps shared by the indigenous Taiwanese and Kra-Dai-speakers. However, archaeological evidence for this is still sparse. This is believed to be similar to what happened to the Cham people, who were originally Austronesian settlers (likely from Borneo) to southern Vietnam around 2100–1900 BP and had languages similar to Malay. Their languages underwent several restructuring events to syntax and phonology due to contact with the nearby tonal languages of Mainland Southeast Asia and Hainan. Although the populations of the Malay peninsula, Sumatra, Java, and neighboring islands are Austronesian-speaking, they have significantly high admixture from Mainland Southeast Asian populations. These areas were already populated (most probably by speakers of Austroasiatic languages) before they were reached by the Austronesian expansion, roughly 3,000 years ago.
Currently, only the indigenous Aslians still speak Austroasiatic languages. However, some of the languages in the region show signs of underlying Austroasiatic substrates. According to Juha Janhunen and Ann Kumar, Austronesians may have also settled parts of southern Japan, especially on the islands of Kyushu and Shikoku, and influenced or created the Japanese hierarchical society. It is suggested that Japanese tribes like the Hayato people, the Kumaso, and the Azumi were of Austronesian origin. Until today, local traditions and festivals show similarities to Malayo-Polynesian culture.
5. Performance Evaluation & Extended Technical Observations The Sino-Austronesian hypothesis, on the other hand, is a relatively new hypothesis by Laurent Sagart, first proposed in 1990. It argues for a north–south linguistic genetic relationship between Chinese and Austronesian. This is based on sound correspondences in basic vocabulary and morphological parallels. Sagart places special significance in shared vocabulary on cereal crops, citing them as evidence of shared linguistic origin. However, this has largely been rejected by other linguists.
The sound correspondences between Old Chinese and Proto-Austronesian can also be explained as a result of the Longshan interaction sphere, when pre-Austronesians from the Yangtze region came into regular contact with Proto-Sinitic speakers in the Shandong Peninsula, around the 4th to 3rd millennia BCE. This corresponded with the widespread introduction of rice cultivation to Proto-Sinitic speakers and conversely, millet cultivation to Pre-Austronesians. An Austronesian substratum in formerly Austronesian territories that have been Sinicized after the Iron Age Han expansion is also another explanation for the correspondences that do not require a genetic relationship. In relation to Sino-Austronesian models and the Longshan interaction sphere, Roger Blench (2014) suggests that the single migration model for the spread of the Neolithic into Taiwan is problematic, pointing out the genetic and linguistic inconsistencies between different Taiwanese Austronesian groups. The surviving Austronesian populations in Taiwan should rather be considered as the result of various Neolithic migration waves from the mainland and back-migration from the Philippines. These incoming migrants almost certainly spoke languages related to Austronesian or pre-Austronesian, although their phonology and grammar would have been quite diverse. Blench considers the Austronesians in Taiwan to have been a melting pot of immigrants from various parts of the coast of East China that had been migrating to Taiwan by 4000 BP. These immigrants included people from the foxtail millet-cultivating Longshan culture of Shandong (with Longshan-type cultures found in southern Taiwan), the fishing-based Dapenkeng culture of coastal Fujian, and the Yuanshan culture of northernmost Taiwan, which Blench suggests may have originated from the coast of Guangdong. Based on geography and cultural vocabulary, Blench believes that the Yuanshan people may have spoken Northeast Formosan languages. Thus, Blench believes that there is in fact no "apical" ancestor of Austronesian in the sense that there was no true single Proto-Austronesian language in Neolithic Taiwan that gave rise to all present-day Formosan Austronesian languages. Instead, multiple migrations of various pre-Austronesian peoples from the Chinese mainland speaking languages that were related but distinct came together to form what we now know as Austronesian in Taiwan.
Hence, Blench considers the single-migration model into Taiwan by pre-Austronesians to be inconsistent with both the archaeological and linguistic (lexical) evidence. The Austronesian expansion (also called the "Out of Taiwan" model) is a large-scale migration of Austronesians from Taiwan, occurring around 3000 to 1500 BCE. Population growth primarily fueled this migration. These first settlers settled in northern Luzon, in the archipelago of the Philippines, intermingling with the earlier Australo-Melanesian population who had inhabited the islands since about 23,000 years earlier. Over the next thousand years, Austronesian peoples migrated southeast to the rest of the Philippines, and into the islands of the Celebes Sea and Borneo. From southwestern Borneo, Austronesians spread further west in a single migration event to both Sumatra and the coastal regions of southern Vietnam, becoming the ancestors of the speakers of the Malayic and Chamic branches of the Austronesian language family. A 2021 study, however, suggests an earlier divergence date between Cordilleran-related groups and populations from mainland East Asia and Taiwan at ~8,000 B.P., coinciding with the Cordilleran settlement of the Philippines. Soon after reaching the Philippines, Austronesians colonized the Northern Mariana Islands by 1500 BCE or even earlier, becoming the first humans to reach Remote Oceania. The Chamorro migration was also unique in that it was the only Austronesian migration to the Pacific Islands to successfully retain rice cultivation. Palau and Yap were settled by separate voyages by 1000 BCE. Another important migration branch was by the Lapita culture, which rapidly spread into the islands off the coast of northern New Guinea and into the Solomon Islands and other parts of coastal New Guinea and Island Melanesia by 1200 BCE. They reached the islands of Fiji, Samoa, and Tonga by around 900 to 800 BCE. This remained the furthest extent of the Austronesian expansion into Polynesia until around 700 CE, when there was another surge of island colonization. It reached the Cook Islands, Tahiti, and the Marquesas by 700 CE; Hawaii by 900 CE; Rapa Nui by 1000 CE; and New Zealand by 1200 CE. For a few centuries, the Polynesian islands were connected by bidirectional long-distance sailing, with the exception of Rapa Nui, which had limited further contact due to its isolated geographical location. Island groups like the Pitcairns, the Kermadec Islands, and the Norfolk Islands were also formerly settled by Austronesians but later abandoned. There is also putative evidence, based on the spread of the sweet potato, that Austronesians may have reached South America from Polynesia, where they might have traded with the Indigenous peoples of the Americas. In the Indian Ocean, Austronesians in Maritime Southeast Asia established trade links with South Asia. They also established early long-distance contacts with Africa, possibly as early as before 500 BCE, based on archaeological evidence like banana phytoliths in Cameroon and Uganda and remains of Neolithic chicken bones in Zanzibar. By the end of the first millennium BCE, Austronesians were already sailing maritime trade routes linking the Han dynasty of China with the western Indian Ocean trade in India, the Roman Empire, and Africa. An Austronesian group, originally from the Makassar Strait region around Kalimantan and Sulawesi, eventually settled Madagascar, either directly from Southeast Asia or from preexisting mixed Austronesian-Bantu populations from East Africa. Estimates for when this occurred vary, from the 5th to 7th centuries CE. It is likely that the Austronesians that settled Madagascar followed a coastal route through South Asia and East Africa, rather than directly across the Indian Ocean. Genetic evidence suggests that some individuals of Austronesian descent reached Africa and the Arabian Peninsula.
A competing hypothesis to the "Out of Taiwan" model is the "Out of Sundaland" hypothesis, favored by a minority of authors. Notable proponents include William Meacham, Stephen Oppenheimer, and Wilhelm Solheim. For various reasons, they have proposed that the homelands of Austronesians were within Island Southeast Asia (ISEA), particularly in the Sundaland landmass drowned during the end of the Last Glacial Period by rising sea levels. Proponents of these hypotheses point to the ancient origins of mtDNA in Southeast Asian populations, pre-dating the Austronesian expansion, as proof that Austronesians originated from within Island Southeast Asia. However, these have been repudiated by studies using whole genome sequencing, which have found that all ISEA populations had genes originating from aboriginal Taiwanese. Contrary to the claim of a south-to-north migration in the "Out of Sundaland" hypothesis, the new whole genome analysis strongly confirms the north-to-south dispersal of the Austronesian peoples in the prevailing "Out of Taiwan" hypothesis. Researchers have further pointed out that while humans have been living in Sundaland for at least 40,000 years, the Austronesian people were recent arrivals. The results of the previous studies failed to take into account admixture with the more ancient but unrelated Negrito and Papuan populations.
By the beginning of the first millennium CE, most of the Austronesian inhabitants in Maritime Southeast Asia began trading with India and China. The adoption of the Hindu statecraft model allowed the creation of Indianized kingdoms, such as Tarumanagara, Champa, Butuan, Langkasuka, Melayu, Srivijaya, Mataram, Majapahit, and Bali. Between the 5th and the 15th century, Hinduism and Buddhism were established as the main religion in the region. Muslim traders from the Arabian Peninsula were thought to have brought Islam by the 10th century. This was established as the dominant religion in the Malay archipelago by the 16th century. The Austronesian inhabitants of Near Oceania and Remote Oceania were unaffected by this cultural trade and retained their indigenous culture in the Pacific region. The Kingdom of Larantuka in Flores, East Nusa Tenggara, was the only Christian (Roman Catholic) indigenous kingdom in Indonesia and in Southeast Asia, with its first king named Lorenzo. Western Europeans in search of spices and gold later colonized most of the Austronesian-speaking countries of the Asia-Pacific region, beginning in the 16th century, with the Portuguese and Spanish colonization of the Philippines, Palau, Guam, the Mariana Islands, and some parts of Indonesia (present-day East Timor); the Dutch colonization of the Indonesian archipelago; the British colonization of Malaysia and Oceania; the French colonization of French Polynesia; and later, the American governance of the Pacific. Meanwhile, the British, Germans, French, Americans, and Japanese began establishing spheres of influence within the Pacific islands during the 19th and early 20th centuries. The Japanese later invaded most of Southeast Asia and some parts of the Pacific during World War II. The latter half of the 20th century initiated independence of modern-day Indonesia, Malaysia, East Timor, and many of the Pacific island nations, as well as the re-independence of the Philippines.
Seagoing catamaran and outrigger ship technologies were the most important innovations of the Austronesian peoples. They were the first humans with vessels capable of crossing vast distances of water. The crossing from the Philippines to the Mariana Islands at around 1500 BCE, a distance of more than 2,500 km (1,600 mi), is likely the world's first and longest ocean crossing of that time. These maritime technologies enabled them to colonize the Indo-Pacific in prehistoric times.
Austronesian groups continue to be the primary users of outrigger canoes today. Early researchers like Heine-Geldern (1932) and Hornell (1943) once believed that catamarans evolved from outrigger canoes, but modern authors specializing in Austronesian cultures, like Doran (1981) and Mahdi (1988), now believe it to be the opposite. Two canoes bound together developed directly from minimal raft technologies of two logs tied together. Over time, the double-hulled canoe form developed into the asymmetric double canoe, where one hull is smaller than the other.
Eventually the smaller hull became the prototype outrigger, giving way to the single outrigger canoe, then to the reversible single outrigger canoe. Finally, the single outrigger types developed into the double outrigger canoe (or trimarans). This would also explain why older Austronesian populations in Island Southeast Asia tend to favor double outrigger canoes, as it keeps the boats stable when tacking. However, there are small regions where catamarans and single-outrigger canoes are still used.
In contrast, more distant outlying descendant populations in Micronesia, Polynesia and Madagascar retained the double-hull and the single-outrigger canoe types, but the technology for double outriggers never reached them (although it exists in western Melanesia). To deal with the problem of the boat's instability when the outrigger faces leeward when tacking, they instead developed the shunting technique in sailing, in conjunction with reversible single-outriggers. The simplest form of all ancestral Austronesian boats had five parts. The bottom consisted of a single piece of hollowed-out log. At the sides were two planks, and two horseshoe-shaped wood pieces formed the prow and stern. These were fitted tightly together edge-to-edge, with dowels inserted into holes in between, and then lashed to each other with ropes (made from rattan or fiber) wrapped around protruding lugs on the planks. This characteristic and ancient Austronesian boatbuilding practice is known as the "lashed-lug" technique. They were commonly caulked with pastes made from various plants as well as tapa bark and fibers that would expand when wet, further tightening joints and making the hull watertight. They formed the shell of the boat, which was then reinforced by horizontal ribs. Shipwrecks of Austronesian ships can be identified from this construction as well as the absence of metal nails. Austronesian ships traditionally had no central rudders but were instead steered using an oar on one side.
The ancestral rig was the mastless triangular crab claw sail, which had two booms that could be tilted to the wind. These were built in the double-canoe configuration or had a single outrigger on the windward side. In Island Southeast Asia, these developed into double outriggers on each side, which provided greater stability. The triangular crab claw sails also later developed into square or rectangular tanja sails, which, like crab claw sails, had distinctive booms spanning the upper and lower edges. Fixed masts also developed later in both Southeast Asia (usually as bipod or tripod masts) and Oceania.
Austronesians traditionally made their sails from woven mats of the resilient and salt-resistant pandanus leaves. These sails allowed them to embark on long-distance voyaging. In some cases, however, they were one-way voyages. The motives of early Rapa Nui natives and MIori to establish their settlements (Easter Island and New Zealand) are believed to have isolated their settlements from the rest of Polynesia.
The ancient Champa of Vietnam also uniquely developed basket-hulled boats whose hulls were composed of woven and resin-caulked bamboo, either entirely or in conjunction with plank strakes. They ranged from small coracles (o thúng) to large oceangoing trading ships like the ghe mành. The acquisition of catamaran and outrigger technology by non-Austronesian peoples in Sri Lanka and southern India is due to the result of very early Austronesian contact with the region, including the Maldives and the Laccadive Islands, estimated to have occurred around 1000 to 600 BCE and onwards. This may have possibly included limited colonization by people who have since been assimilated. This is still evident in Sri Lankan and South Indian languages. For example, Tamil paIavu, Telugu paIava, and Kannada paIahu, all meaning "ship", are all derived from Proto-Hesperonesian *padaw, "sailboat", with Austronesian cognates like Sundanese parahu, Javanese prau, Kadazan padau, Maranao padaw, Malay perahu, Cebuano paráw, Samoan folau, Hawaiian halau, and MIori wharau.
Harvested Online Documentation & Reference Sources • https://en.wikipedia.org/wiki/MIFARE • https://en.wikipedia.org/wiki/Austronesian%20peoples • https://en.wikipedia.org/wiki/Psychology
Extracted Research Figures & Simulation Topologies
Total 3 diagrams and telemetry visual outputs extracted directly from the complete technical documentation.
Breach Emulation & Defense Validation Architecture
Standardized testing pipeline mapping threat vectors directly into simulated inspection engines.
(AttackIQ / SafeBreach)
(Burp Suite Pro)
(Cisco Packet Tracer)
(Metasploit Engine)
(KnowBe4 Training)
Sample Simulation Code & Telemetry Log
Automated tool orchestration script and command window outputs for Des To AES Migration Tool With Performance Analysis.
[*] Metasploit Scan Running on Target Subnet for Des To AES Migration Tool With Performance Analysis... [✓] SafeBreach / AttackIQ Continuous Exposure Agent Triggered ──────────────────────────────────────────────────────────────────────── [11:48:02.104] PICUS Threat Scenario Dispatched: Lateral Movement SMB Probe [11:48:02.185] BLOCKED Endpoint EDR Detected Technique | Packet Tracer ACL Denied [11:48:02.240] CYMULATE Prevention Rate = 96.8% | SIEM Latency = 38 ms [11:48:02.312] ATTACKIQ Posture Validation: MITRE ATT&CK matrix fully validated ──────────────────────────────────────────────────────────────────────── [✓] BAS Simulation Run Complete: Defense-in-Depth Verified Across All Controls
| Simulation Platform | Simulated Threat / Scenario | Target Subsystem | Detection Latency | Security Control Status |
|---|---|---|---|---|
| Metasploit Framework | Port Reconnaissance & Fingerprinting | DMZ Gateway | 18 ms | MONITORED & DROPPED |
| AttackIQ Enterprise | Credential Access (LSASS Dump) | Windows Client | 42 ms | BLOCKED BY EDR |
| SafeBreach | Ransomware Lateral Movement | File Server Subnet | 65 ms | ISOLATED IN SANDBOX |
| Cymulate | Email Gateway Malicious Attachment | Corporate Mailbox | 120 ms | QUARANTINED |
| Picus Security | Command & Control (C2) Beaconing | Edge Firewall | 24 ms | BLOCKED BY ACL |