TWC: Option: Medium: Collaborative: Authenticated Ciphers

OpenSSH显示加密登录会话的摘录。TLS （HTTPS）显示加密的PayPal帐户cookie。DTLS也好不到哪里去。EAXprime允许瞬时伪造。RFID安全性一次又一次被打破。所有这些机密性和完整性的失败都是身份验证密码的失败：承诺使用共享密钥对消息进行加密和身份验证的算法。很容易将这些安全问题归咎于缺乏教育：许多年来，文献中已经出现了更强的经过身份验证的密码。然而，在许多情况下，这些更强的身份验证密码不能满足应用程序的性能要求。性能正是WEP中RC4的动机；大力发展“智能电网”；RFID中的HB；“IPsec”继续支持未经身份验证的加密。该项目正在构建新一代经过身份验证的密码，在不牺牲安全性的情况下提高效率，在不牺牲效率的情况下提高安全性。这项工作涵盖七个主要主题：更有效的密码；更高效的mac；更有效的防伪；加强对侧通道的保护；加强对滥用和厄运的保护；提高数量安全性；改进了安全证明。最终目标是在加密用户指定的各种性能约束下获得尽可能好的安全性。本课题所产生的高安全性高性能认证密码将直接、直观地应用于密码学应用，避免了目前应用中的种种弊端，最终使安全的密钥密码学从理论走向实践。

OpenSSH reveals excerpts from encrypted login sessions. TLS (HTTPS) reveals encrypted PayPal account cookies. DTLS is no better. EAXprime allows instantaneous forgeries. RFID security has been broken again and again. All of these failures of confidentiality and integrity are failures of authenticated ciphers: algorithms that promise to encrypt and authenticate messages using a shared secret key.It is easy to blame many of these security problems on a lack of education: much stronger authenticated ciphers have been in the literature for many years. However, in many cases these stronger authenticated ciphers fail to meet the performance requirements of the applications. Performance is exactly the motivation for RC4 in WEP; EAXprime in the "Smart Grid"; HB in RFID; and "IPsec" continuing to support unauthenticated encryption.This project is building a new generation of authenticated ciphers that improve efficiency without compromising security and that improve security without compromising efficiency. This work spans seven main topics: more efficient ciphers; more efficient MACs; more efficient forgery rejection; improved protection against side channels; improved protection against misuse and bad luck; improved quantitative security; and improved security proofs. The ultimate objective is to obtain the best possible security subject to a variety of performance constraints specified by cryptographic users.The high-security high-performance authenticated ciphers produced in this project will be directly and straightforwardly usable in cryptographic applications, avoiding the disasters in current applications and finally bringing secure secret-key cryptography from theory to practice.