CAREER: Integrating Cryptography with Emerging Security Applications

虽然密码学研究在其历史上取得了很大的进步，为各种各样的问题提供了强有力的解决方案，但其实际应用却落后了。只有一小部分加密设计已被部署在实践中。此外，往往作出错误的选择，实施不安全的计划，导致代价高昂的后果。在许多应用计算机科学学科的研究中也可以看到类似的情况。日益增长的安全和隐私问题已经在传统学科中产生了许多新的面向安全的研究方向。 然而，所提出的ad-hoc解决方案很少采用现代密码学研究的结果，并有适当的安全性分析，往往是不安全的，在仔细考虑。 在PI看来，强大的密码学研究与其在工业和其他应用研究领域的应用之间存在差距的主要原因是：1）密码学家，其他计算机科学领域的从业者和研究人员是不相交的社区，很少合作，并且通常不知道其他人的最新发展; 2）密码学家是完美主义者，他们定义和目标是非常强的安全概念，而许多应用更喜欢速度而不是这种完美的安全性，因此选择ad-hoc协议; 3）从业者往往因为缺乏密码学基础教育而做出错误的选择。拟议的研究和教育计划旨在缩小理论密码学研究与更多计算机科学应用领域之间的差距，这些领域面临着保护其应用的需求，通过设计通用的密码原语和实际上将密码学与应用程序集成。该方法包括以下步骤：1）与来自数据库系统和计算机体系结构等应用领域的教师和学生密切合作，严格研究需要密码解决方案的新兴应用;（二）在现有定义过于强大的情况下，制定适当的安全定义，因为现有定义在给定应用程序的设置中无法实现，或者只能通过以下方式实现（a）为新出现的重要应用程序设计新的协议，这些协议应同时具有功能性、有效性和可证明的安全性，并提高现有公钥加密和签名方案的效率和可靠性，因为现有方案的相对低效率往往是一个障碍;（b）继续开展关于现代密码学所有方面的宣传活动和优质教育。

Alexandra BoldyrevaGeorgia Tech.0545659AbstractWhile cryptographic research has made great progress in its history, providing strong solutions to a wide variety of problems, its practical utilization lags behind. Only a small fraction of cryptographic designs have been deployed in practice. Moreover, wrong choices are often made and insecure schemes are implemented leading to costly consequences. A similar situation can be seen in research done in many applied computer science disciplines. Increased security and privacy concerns have given rise to many new security-oriented research directions within traditional disciplines. However, the proposed ad-hoc solutions rarely employ results of modern cryptographic research and have proper security analysis, and are often even insecure at closer consideration. In the PIs view the main reasons for a gap between strong cryptographic research and its poor utilization in industry and other applied research areas are: 1) cryptographers, practitioners and researchers in other computer science areas are disjoint communities that rarely collaborate and often are unaware of state-of-the-art developments of others; 2) cryptographers are perfectionists in that they define and target for very strong security notions while many applications prefer speed to such perfect security, and thus choose ad-hoc protocols; 3) practitioners often make the wrong choices because they lack basic education in cryptography.The proposed research and educational plan aim to narrow the gap between theoretical cryptographic research and more applied areas of computer science facing the need to secure their applications, by going further than designing general-purpose cryptographic primitives and actually integrating cryptography with the applications. The approach includes the following steps: 1) close collaboration with faculty and students from applied areas such as database systems and computer architecture to rigorously study the emerging applications requiring cryptographic solutions; 2) development of appropriate security definitions for the cases where the existing definitions are too strong in the sense they are unachievable in the setting of a given application or can be achieved only by insufficiently efficient schemes; 3) design of the new protocols for the applications of emerging importance that are simultaneously functional, efficient and provably secure, and improvement of efficiency and reliability of the existing public-key encryption and signature schemes whose relative inefficiency is often an obstacle; 4) continuing outreach activities and quality education on all aspects of modern cryptography.