TC: Small: Higher-Speed Cryptography

TC：小型：高速密码学

• 批准号: 1018836
• 负责人: Daniel Bernstein
• 金额: $ 43.62万
• 依托单位: University of Illinois at Chicago
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2010
• 资助国家: 美国
• 起止时间: 2010-09-01 至 2015-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1018836&HistoricalAwards=false
• 关键词: TC; Small; Higher; Speed; Cryptography

Internet users can now use https://www.google.com instead of http://www.google.com, protecting their text searches against espionage and sabotage by network attackers. However, Google still does not support encryption for high-volume data such as images and maps.Other sites encrypt even less. More than 99% of Internet web pages and Internet mail messages remain unencrypted. Furthermore, most encryption used on the Internet is at a surprisingly low security level. For example, in June 2010, https://paypal.com was still using 1024-bit RSA, a key size easily breakable by the Conficker botnet. Government recommendations to move to at least 2048-bit RSA have triggered widespread objections.The underlying problem is that cryptography is too slow. Even when the necessary cryptographic software has been written and installed, users are often forced to disable or limit the software, or compromise security, so that their computers are not overloaded.This project directly addresses this problem by making cryptography faster---without compromising security. The research has a broad vertical scope spanning high-speed engineering of high-speed software, CPU-specific optimization, algorithm analysis and design, analysis and design of cryptographic functions, and optimization of cryptographic Internet protocols.

互联网用户现在可以使用https://www.google.com而不是http://www.google.com，保护他们的文本搜索免受网络攻击者的间谍活动和破坏。然而，Google仍然不支持对大量数据（如图像和地图）进行加密。其他网站的加密程度更低。超过99%的互联网网页和互联网邮件信息仍然未加密。此外，互联网上使用的大多数加密都处于令人惊讶的低安全级别。 例如，在2010年6月，https://paypal.com仍然使用1024位RSA，Conficker僵尸网络很容易破坏这种密钥大小。政府建议迁移到至少2048位RSA，这引发了广泛的反对。根本问题是加密速度太慢。即使已经编写并安装了必要的加密软件，用户也常常被迫禁用或限制软件，或者牺牲安全性，以使他们的计算机不过载。本项目通过使加密更快而不牺牲安全性来直接解决这个问题。该研究具有广泛的垂直范围，涵盖高速软件的高速工程，CPU特定的优化，算法分析和设计，加密功能的分析和设计，以及加密互联网协议的优化。