Ultra high performance authenticated encryption

利用今天的现代通信技术，每天都有大量的电子金融交易在包括银行、企业和个人在内的广泛用户之间通过开放式网络进行。然而，由于开放网络的性质，在认证、数据完整性、机密性等方面存在着严重的安全威胁。为了减少这些威胁，许多通信系统越来越多地配备了某种形式的密码系统。伽罗瓦/计数器模式(GCM)是美国国家标准与技术研究所(NIST)通过联邦信息处理标准(FIPS)推荐的一种认证加密方案。GCM预计将得到广泛部署，主要针对高吞吐量的安全应用(如以太网链路安全和IPSec)，并提供数据机密性和机密数据真实性的保证。GCM还可以为未加密的额外数据提供认证保证。我们建议的研究将致力于为超高性能GCM开发高效的底层算法和体系结构。我们将为GCM认证所需的有限域运算设计次二次面积复杂性算法。我们将研究增加GCM吞吐量的方法，并将应用正式方法来验证基本的现场操作。我们希望在这个项目中创造的知识和技术将对加拿大工业以及处理通信安全的政府组织非常重要。

Using today's modern communication technologies, a huge number of electronic financial transactions aretaking place everyday among a wide spectrum of users including banks, businesses and individuals over opennetworks. However, because of the nature of the open networks, there exist serious security threats concerningauthentication, data integrity, confidentiality, etc. In order to reduce such threats, many communicationssystems are becoming increasingly equipped with some form of cryptosystems.Galois/counter mode (GCM) of operation is an authenticated encryption scheme recommended by NationalInstitute of Standards and Technology (NIST) through Federal Information Processing Standards (FIPS). GCMis expected to be deployed widely and is primarily targeted to high throughput security applications (e.g.,Ethernet link security and IPsec), and provides assurance of confidentiality of data as well as authenticity of theconfidential data. GCM can also provide authentication assurance for additional data that is not encrypted.Our proposed research will address the development of efficient underlying algorithms and architectures forultra high performance GCM. We will devise sub-quadratic area complexity algorithms for finite fieldoperations needed for GCM authentication. We will investigate methods to increase the GCM throughput andwill apply formal methods to verify the underlying field operations.The knowledge and technology we expect to create in this project will be of great importance to Canadianindustry as well as government organizations dealing with communication security.