Analysis and Design of Authenticated Encryption Schemes

点击翻译按钮获取中文摘要

While in most people’s minds confidentiality is the primary goal of cryptography, message authentication is arguably as important. Cryptographers have long realized the importance of the privacy and integrity goals. However, the traditional approach to tackle the problem of achieving confidentiality and integrity has been to consider these two goals in isolation; security researchers designed encryption schemes to protect the privacy of digital communication and they independently designed message authentication codes to protect its integrity.  Recently, there have been a series of disastrous attacks resulting from the wrong application of confidentiality and authenticity primitives. Consequently, and following the National Institute for Standards and Technology (NIST) Advanced Encryption Standard (AES) competition, the European Union eStream competition, and the NIST SHA-3 hash function competition, a new Competition for Authenticated Encryption: Security, Applicability, and Robustness (CAESAR) funded by NIST was announced. While being relatively new, this competition has provided a boost to the cryptographic research community to consider the analysis and design of authenticated encryption (AE) primitives. In the first phase of this competition, which started in March 2014, 57 submissions were received. Since this competition has been opened, AE schemes are probably the most frequently visited and challenging topic in the area of symmetric key cryptology.