CT-ISG: High-Speed Cryptography

摘要：任何具有中等技能的人都可以拦截互联网邮件消息和私人网页，以查看他们说了什么；可以在传输过程中修改消息，更改其内容而不留任何痕迹；可以发送与合法消息难以区分的虚假消息。密码学通过对数据包进行加扰和解密来应对这些威胁，以防止伪造和间谍活动。伪造消息的攻击者无法以正确的方式对其进行加扰；当合法用户的计算机对消息进行解扰时，他们会发现这是伪造的，应该将其丢弃。攻击者拦截了一个加扰的信用卡号码，却无法弄清楚原来的号码。不幸的是，加密通常太慢，无法在繁忙的网络服务器上部署。被广泛使用的网站，如google.com和liveJournal.com，已经安装了所有必要的加密软件，但只在其网页中使用了一小部分。当用户告诉他的网络浏览器建立到https://www.google.com，的加密保护连接时，谷歌将浏览器重定向到http://www.google.com，，关闭加密！类似的评论适用于SMTP(邮件)、DNS(名称查找)和其他Internet协议：即使编写并安装了必要的加密软件，用户也经常被迫禁用或限制该软件，以使他们的计算机不会超载。这项研究的回应是，为保护互联网所需的加密操作创造了新的速度记录。这些加速使加密技术可以处理更大比例的互联网通信总量，从而减少互联网受到攻击的总体风险。

Abstract: Anyone with a moderate amount of skill can intercept Internet mail messages and private web pages to see what they say; can modify messages in transit, changing their content without any trace; and can send fake messages that are indistinguishable from legitimate messages. Cryptography responds to these threats by scrambling and unscrambling packets to protect against forgery and against espionage. An attacker who forges a message can't scramble it in the right way; when legitimate users' computers unscramble the message, they see that it's a forgery and that it should be thrown away. An attacker who intercepts a scrambled credit-card number can't figure out the original number. Unfortunately, cryptography is often too slow to deploy on busy network servers. Widely used web sites such as google.com and livejournal.com have installed all the necessary cryptographic software but use it for only a small fraction of their web pages. When a user tells his web browser to make a cryptographically protected connection to https://www.google.com, Google redirects the browser to http://www.google.com, turning off the cryptography! Similar comments apply to SMTP (mail), DNS (name lookup), and other Internet protocols: even when the necessary cryptographic software has been written and installed, users are often forced to disable or limit the software so that their computers are not overloaded. This research responds by producing new speed records for the cryptographic operations needed to protect the Internet. These speedups allow cryptography to handle a larger fraction of the total volume of Internet communication, reducing the Internet's overall exposure to attack.