Design and Analysis of Cryptographic Protocols for Secure Communication

安全通信密码协议的设计与分析

• 批准号: 0098123
• 负责人: Mihir Bellare
• 金额: $ 23.68万
• 依托单位: University of California-San Diego
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2001
• 资助国家: 美国
• 起止时间: 2001-07-01 至 2004-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0098123&HistoricalAwards=false
• 关键词: Design; Analysis; Cryptographic; Protocols; Secure

Innovations in computer and communications technologies are making it easierand faster to do things but also bring with them new security risks. Thisproposal is concerned with cryptography, which is an important component in theprovision of security in the electronic world. A cryptographer designsschemes, or protocols, for tasks such as data authentication, data encryption,identification, and key distribution which are implemented and incorporatedinto the computer systems and are responsible for imbuing data and transactionswith attributes like privacy and integrity. Providing high-quality,cost-effective cryptography is a challenge because cryptographic protocols areeasy to specify but hard to analyze, and notorious for containing bugs thattake a long time to be discovered. The goal of this project is to identify andtackle practical problems in cryptographic protocol design and analysis basedon theoretical techniques, delivering real-world usable protocols backed bytheoretically sound security analyses, and thereby impact implementation, usageand standardization of cryptography in the computer and communicationsindustry.The specific research proposed here is on three broad topics: anonymity,authenticated encryption and asymmetric identification protocols. The term``anonymity'' is broadly used to refer to issues regarding keeping private theidentities of parties engaging in electronic transactions. The researcherswill investigate anonymity for mix-nets, anonymous encryption, and blindsignatures. In each case they will look at both foundational issues such asdefinitions, and then the possibility of practical, proven secureconstructions. In the authenticated encryption domain they will investigate thesecurity of the popular encrypt-with-redundancy paradigm. Finally they willconsider the design of identification protocols secure against attackers havingthe powerful capability of resetting the internal state of the client machineand also seek improved transformations of identification protocols to digitalsignature schemes.

计算机和通信技术的创新正在使人们更容易、更快地做事，但同时也带来了新的安全风险。这项提议与密码学有关，密码学是提供电子世界安全的重要组成部分。密码学家为数据认证、数据加密、身份识别和密钥分发等任务设计方案或协议，这些方案或协议被实施并合并到计算机系统中，负责将数据和交易赋予隐私和完整性等属性。提供高质量、经济高效的密码是一个挑战，因为密码协议很容易指定，但很难分析，而且臭名昭著的是包含需要很长时间才能发现的漏洞。该项目的目标是在理论技术的基础上识别和解决密码协议设计和分析中的实际问题，提供现实世界中可用的协议，并通过理论上的安全分析来支持，从而影响密码技术在计算机和通信行业中的实现、使用和标准化。“匿名性”一词被广泛用来指与保密有关的问题，包括关于电子交易当事人身份的保密问题。研究人员将调查混合网络、匿名加密和盲签名的匿名性。在每一种情况下，他们都将研究定义等基础性问题，然后是实际的、经过验证的安全建设的可能性。在经过身份验证的加密域中，他们将研究流行的带冗余的加密范例的安全性。最后，他们将考虑设计对攻击者安全的身份识别协议，具有强大的重置客户端机器内部状态的能力，并寻求身份识别协议到数字签名方案的改进转换。