Design and Analysis of Cryptographic Protocols for Secure Communication

计算机和通信技术的创新使人们做事更容易、更快捷，但也带来了新的安全风险。这个建议是关于密码学的，它是在电子世界中提供安全的重要组成部分。密码学家为诸如数据认证、数据加密、识别和密钥分发等任务设计方案或协议，这些方案或协议被实现并整合到计算机系统中，负责赋予数据和交易隐私和完整性等属性。提供高质量、低成本的加密技术是一项挑战，因为加密协议很容易指定，但很难分析，并且因包含需要很长时间才能发现的漏洞而臭名昭著。该项目的目标是识别和解决基于理论技术的加密协议设计和分析中的实际问题，以理论上合理的安全分析为基础，提供现实世界可用的协议，从而影响计算机和通信行业加密的实现、使用和标准化。这里提出的具体研究是在三个广泛的主题：匿名，身份验证加密和非对称身份识别协议。“匿名”一词广泛用于指在电子交易中保持各方身份隐私的问题。研究人员将研究混合网络的匿名性、匿名加密和盲签名。在每一种情况下，他们都将研究基本问题，如定义，然后是实际的，经过验证的安全重建的可能性。在身份验证加密领域，他们将研究流行的冗余加密范式的安全性。最后，他们将考虑具有强大的重置客户端机器内部状态能力的攻击者安全的身份协议设计，并寻求改进的身份协议到数字签名方案的转换。

Innovations in computer and communications technologies are making it easierand faster to do things but also bring with them new security risks. Thisproposal is concerned with cryptography, which is an important component in theprovision of security in the electronic world. A cryptographer designsschemes, or protocols, for tasks such as data authentication, data encryption,identification, and key distribution which are implemented and incorporatedinto the computer systems and are responsible for imbuing data and transactionswith attributes like privacy and integrity. Providing high-quality,cost-effective cryptography is a challenge because cryptographic protocols areeasy to specify but hard to analyze, and notorious for containing bugs thattake a long time to be discovered. The goal of this project is to identify andtackle practical problems in cryptographic protocol design and analysis basedon theoretical techniques, delivering real-world usable protocols backed bytheoretically sound security analyses, and thereby impact implementation, usageand standardization of cryptography in the computer and communicationsindustry.The specific research proposed here is on three broad topics: anonymity,authenticated encryption and asymmetric identification protocols. The term``anonymity'' is broadly used to refer to issues regarding keeping private theidentities of parties engaging in electronic transactions. The researcherswill investigate anonymity for mix-nets, anonymous encryption, and blindsignatures. In each case they will look at both foundational issues such asdefinitions, and then the possibility of practical, proven secureconstructions. In the authenticated encryption domain they will investigate thesecurity of the popular encrypt-with-redundancy paradigm. Finally they willconsider the design of identification protocols secure against attackers havingthe powerful capability of resetting the internal state of the client machineand also seek improved transformations of identification protocols to digitalsignature schemes.