Implementation of Alternative Public-Key Cryptosystems on Embedded Systems

加密方案是任何安全应用程序的关键组件。在医疗数据处理、卫星通信或工业机械中，这些加密方案通常有额外的负担，以提供10-50年的长期安全性。然而，这实际上与最近使用的基于离散对数和因式分解的非对称密码系统（如RSA和ECC）很难兼容。特别是，已知上述两个问题都可以在量子计算机上使用肖尔算法在多项式时间内解决。因此，研究非对称密码系统的替代方案，以找到这种非对称密码的长期安全替代品，似乎是显而易见的——即使目前还不清楚在不久或遥远的将来是否能制造出足够复杂的量子计算机。具有长期安全需求的高度安全关键系统通常无法容忍这种威胁。2011年新成立的研究项目“替代非对称密码系统的实现方面”重点研究了替代非对称密码系统的三个不同分支，即基于哈希的、基于代码的和多变量二次密码系统。这些分支在实践中被特别研究，特别是在嵌入式系统上的实现以及它们对侧信道和故障注入攻击的抵抗力方面。在项目过程中，密码学的另一个分支作为一个非常有前途的候选分支出现了，这是以前在工作程序中没有考虑到的。理想格上的密码学似乎使加密和数字签名系统的实现变得极其高效和安全。因此，它们的研究和在嵌入式系统上的物理安全实现是这个更新应用程序的主要目标。

Cryptographic schemes are the key components of any securityapplication. In medical data processing, satellite communications orindustrial machinery, these cryptographic schemes have often theadditional burden to provide long-term security over a period of 10-50years. However, this is actually hardly compatible with recently usedasymmetric cryptosystems based on the discrete logarithm andfactoring, such as RSA and ECC. In particular, it is known that bothaforementioned problems can be solved on quantum computers inpolynomial time using Shor's algorithm. Hence it seems evident toinvestigate alternative options for asymmetric cryptosystems to findlong-term-secure substitutes for this asymmetric cryptography - evenif it is not clear at all whether sufficiently complex quantum computerscan be built in the near of far future. Highly security-critical systemswith long-term security requirements usually cannot tolerate such athreat. In 2011 the newly established research project"Implementation aspects of alternative asymmetric cryptosystems"has focused on three different branches of alternative asymmetriccryptography, namely the hash-based, the code-based andmultivariate-quadratic cryptography. These branches have beenparticularly investigated for their use in practice and in particular withrespect to implementations on embedded systems and theirresistance to side-channel and fault injection attacks. During thecourse of the project a further branch of cryptography has emerged asa very promising candidate that was previously not considered in theworking program. Cryptography over ideal lattices seems to enableextremely efficient and secure implementations of both encryption anddigital signature systems. Therefore, their investigation and physicallysecure implementation on embedded systems is the primary goal ofthis renewal application.