CAREER: Cryptographic Security at Internet Scale

密码学是现代计算机安全的基石，在我们日常所依赖的计算机系统中无处不在。然而，在形式化安全模型提供的理论保证和当今部署的系统中存在的现实之间存在着巨大的差距。该项目的中心研究目标是在全球范围内对密码部署进行实证研究，并开发一个实验性密码安全研究的框架。该项目开发和传播衡量密码安全性的工具，并将通过检测和消除缺陷，提高实际使用的密码软件和硬件的安全性。研究成果面向学术界发表，并向非学术和行业受众普及，并纳入课程材料。该项目产生了基本的新见解，并加深了对现实世界中加密部署的理解。主要活动包括改进现有方法和开发收集和处理大规模加密数据集的新工具。该研究还调查了用于实时密码异常检测的高效算法工具的开发，用于跟踪漏洞到实现的改进的方法，用于密码分析的高性能计算的进展，以及对密码系统的更精确的安全模型和要求的开发。

Cryptography is a cornerstone of modern computer security and is ubiquitous on the computer systems we depend on daily. However, there is a significant gap between the theoretical guarantees provided by formalized security models, and the reality present in deployed systems today. The central research goals of this project are to perform an empirical study of cryptographic deployments on a global scale and to develop a framework for experimental cryptographic security research. This project develops and disseminates tools for measuring cryptographic security, and will result in increased security for cryptographic software and hardware in real use by detecting and eliminating flaws. Results are published for the academic community as well as popularized for nonacademic and industry audiences and incorporated into course materials.The project yields fundamental new insights and deepens the understanding of cryptographic deployments in the real world. The main activities include the refinement of existing methods and development of new tools for collecting and processing large-scale cryptographic datasets. The research also investigates the development of efficient algorithmic tools for real-time cryptographic anomaly detection, improved methodology for tracing vulnerabilities to implementations, advancements in the state of high-performance computing for cryptanalysis, and the development of more precise security models and requirements for cryptographic systems.