Analysis and Design of Authenticated Encryption Schemes

虽然在大多数人的心目中，机密性是密码学的主要目标，但消息身份验证可以说同样重要。密码学家早就意识到隐私和完整性目标的重要性。然而，解决保密性和完整性问题的传统方法一直是孤立地考虑这两个目标；安全研究人员设计了加密方案来保护数字通信的隐私，他们独立地设计了消息认证码来保护其完整性。最近，由于错误应用机密性和真实性原语，发生了一系列灾难性的攻击。因此，继国家标准与技术研究所(NIST)高级加密标准(AES)竞赛、欧盟eStream竞赛和NIST SHA-3散列函数竞赛之后，由NIST资助的新的认证加密竞赛：安全性、适用性和健壮性(CAESAR)宣布。虽然这是一个相对较新的竞赛，但它为密码学研究社区提供了一个推动，让他们考虑分析和设计认证加密(AE)原语。在2014年3月开始的第一阶段比赛中，共收到57份参赛作品。自本次大赛开幕以来，AE方案可能是对称密钥密码学领域中访问最多、最具挑战性的话题。

While in most people’s minds confidentiality is the primary goal of cryptography, message authentication is arguably as important. Cryptographers have long realized the importance of the privacy and integrity goals. However, the traditional approach to tackle the problem of achieving confidentiality and integrity has been to consider these two goals in isolation; security researchers designed encryption schemes to protect the privacy of digital communication and they independently designed message authentication codes to protect its integrity.  Recently, there have been a series of disastrous attacks resulting from the wrong application of confidentiality and authenticity primitives. Consequently, and following the National Institute for Standards and Technology (NIST) Advanced Encryption Standard (AES) competition, the European Union eStream competition, and the NIST SHA-3 hash function competition, a new Competition for Authenticated Encryption: Security, Applicability, and Robustness (CAESAR) funded by NIST was announced. While being relatively new, this competition has provided a boost to the cryptographic research community to consider the analysis and design of authenticated encryption (AE) primitives. In the first phase of this competition, which started in March 2014, 57 submissions were received. Since this competition has been opened, AE schemes are probably the most frequently visited and challenging topic in the area of symmetric key cryptology.