CT-ISG: High-Speed Cryptography

CT-ISG：高速密码学

• 批准号: 0716498
• 负责人: Daniel Bernstein
• 金额: $ 40万
• 依托单位: University of Illinois at Chicago
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2007
• 资助国家: 美国
• 起止时间: 2007-09-01 至 2012-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0716498&HistoricalAwards=false
• 关键词: CT; ISG; Speed; Cryptography

Abstract: Anyone with a moderate amount of skill can intercept Internet mail messages and private web pages to see what they say; can modify messages in transit, changing their content without any trace; and can send fake messages that are indistinguishable from legitimate messages. Cryptography responds to these threats by scrambling and unscrambling packets to protect against forgery and against espionage. An attacker who forges a message can't scramble it in the right way; when legitimate users' computers unscramble the message, they see that it's a forgery and that it should be thrown away. An attacker who intercepts a scrambled credit-card number can't figure out the original number. Unfortunately, cryptography is often too slow to deploy on busy network servers. Widely used web sites such as google.com and livejournal.com have installed all the necessary cryptographic software but use it for only a small fraction of their web pages. When a user tells his web browser to make a cryptographically protected connection to https://www.google.com, Google redirects the browser to http://www.google.com, turning off the cryptography! Similar comments apply to SMTP (mail), DNS (name lookup), and other Internet protocols: even when the necessary cryptographic software has been written and installed, users are often forced to disable or limit the software so that their computers are not overloaded. This research responds by producing new speed records for the cryptographic operations needed to protect the Internet. These speedups allow cryptography to handle a larger fraction of the total volume of Internet communication, reducing the Internet's overall exposure to attack.

摘要： 任何有一定技能的人都可以拦截互联网邮件 消息和私人网页以查看它们所说的内容;可以修改 在传输过程中的信息，不加追踪地更改其内容;以及 可以发送假消息， 充分和传播密码学通过扰乱和 整理数据包，以防止伪造和 间谍活动伪造消息的攻击者无法在 正确的方式;当合法用户的计算机解读消息时， 他们发现这是伪造的，应该扔掉一个 拦截加密信用卡号码的攻击者无法想象 原来的号码。 不幸的是，加密技术通常太慢，无法在忙碌的 网络服务器。广泛使用的网站，如google.com和 livejournal.com已经安装了所有必要的加密 软件，但只使用它的网页的一小部分。 当用户告诉他的网络浏览器以加密方式进行 受保护的连接到https://www.google.com，谷歌重定向 浏览器到http://www.google.com，关闭密码！ 类似的评论也适用于SMTP（邮件）、DNS（名称查找）和其他 互联网协议：即使必要的加密软件 已编写并安装，用户往往被迫禁用或 限制软件，使他们的计算机不超载。这 研究的回应是创造新的速度记录， 保护互联网所需的加密操作。这些 加速使密码学能够处理更大比例的 互联网通信量，减少了互联网的整体 暴露于攻击。