On Symmetric Encryption with Distinguishable Decryption Failures
On Symmetric Encryption with Distinguishable Decryption Failures
复制标题
关于可区分解密失败的对称加密
DOI：
--
复制
发表时间：
2013
期刊：
影响因子：
--
通讯作者：
Martijn Stam
中科院分区：
文献类型：
--
作者：
A. Boldyreva;Jean Paul Degabriele;K. Paterson;Martijn Stam
我们建议放宽对称加密安全模型中解密失败不可区分的假设。我们的主要目的是构建更好地反映密码实现现实的模型，并揭示由此产生的安全问题。我们系统地探索了这种放松的后果，并对我们对这一基本密码原语的理解产生了一些令人惊讶的结果。我们的结果应该对希望建立准确的实现模型并进行分析的实践者有用。它们对提出新加密方案的更多理论密码学家也应该是有价值的，在理想情况下，他们将被迫考虑他们的方案可能泄露的不仅仅是简单的解密失败。
We propose to relax the assumption that decryption failures are indistinguishable in security models for symmetric encryption. Our main purpose is to build models that better reflect the reality of cryptographic implementations, and to surface the security issues that arise from doing so. We systematically explore the consequences of this relaxation, with some surprising consequences for our understanding of this basic cryptographic primitive. Our results should be useful to practitioners who wish to build accurate models of their implementations and then analyse them. They should also be of value to more theoretical cryptographers proposing new encryption schemes, who, in an ideal world, would be compelled by this work to consider the possibility that their schemes might leak more than simple decryption failures.