TWC: Medium: Collaborative: Distribution-Sensitive Cryptography

当代加密方案几乎完全是分布不可知的。它们的安全性与明文的统计特性无关，并且这些方案的输出是均匀分布的比特串的密文，而与用例无关。虽然概念上很简单，但这种加密方案无法满足基本的现实需求，并且在关键安全应用中留下了长期的功能空白。该项目研究新的形式主义和方法，以指导对这些安全挑战的科学探索，并产生由实验验证和稳健实用的设计支持的新颖的原则性解决方案。 该项目开发了一个新的框架，称为分布式敏感加密（DSC），用于加密工具设计，将连接和改进现有的几个原语，并产生全新的原语。DSC可用于创建新的解决方案，以应对历史上难以找到的安全挑战，包括对基于密码的加密的暴力攻击，加密协议的审查以及保护人工生成的身份验证秘密。调查人员正在积极与行业合作伙伴合作，收集现实世界的需求，并将新工具投入实践。

Contemporary encryption schemes are almost exclusively distribution-agnostic. Their security properties are independent of the statistical characteristics of plaintexts, and the output of these schemes are ciphertexts that are uniformly distributed bit strings, irrespective of use case. While conceptually simple, such encryption schemes fail to meet basic, real-world requirements and have left longstanding functional gaps in key security applications. This project investigates new formalisms and methodologies to guide scientific exploration of such security challenges and yield novel, principled solutions backed by experimental validation and robust, practical design. The project develops a new framework, called Distribution-Sensitive Cryptography (DSC), for cryptographic tool design that will connect and improve upon several existing primitives and produce entirely new ones. DSC can be applied to create new solutions to security challenges for which good approaches have historically been elusive, including brute-force attacks against password-based encryption, censorship of encrypted protocols, and securing human-generated authentication secrets. The investigators are actively engaged with industry partners, to glean real-world requirements and to transition the new tools into practice.