TWC: Medium: Collaborative: Distribution-Sensitive Cryptography

当代的加密方案几乎完全与分布无关。它们的安全性质与明文的统计特性无关，并且这些方案的输出是均匀分布的比特串的密文，与使用情况无关。虽然概念上很简单，但这种加密方案无法满足基本的、现实世界的要求，并在关键安全应用程序中留下了长期的功能空白。该项目研究新的形式和方法，以指导对此类安全挑战的科学探索，并产生以实验验证和稳健、实用的设计为后盾的新颖、原则性的解决方案。该项目开发了一种新的框架，称为分布敏感加密(DSC)，用于密码工具设计，该框架将连接并改进几个现有的基元，并产生全新的基元。DSC可用于为安全挑战创建新的解决方案，这些挑战历来难以找到好的方法来解决，包括对基于密码的加密的暴力攻击、对加密协议的审查以及保护人类生成的身份验证机密。调查人员正在积极与行业合作伙伴接触，收集现实世界的需求，并将新工具转化为实践。

Contemporary encryption schemes are almost exclusively distribution-agnostic. Their security properties are independent of the statistical characteristics of plaintexts, and the output of these schemes are ciphertexts that are uniformly distributed bit strings, irrespective of use case. While conceptually simple, such encryption schemes fail to meet basic, real-world requirements and have left longstanding functional gaps in key security applications. This project investigates new formalisms and methodologies to guide scientific exploration of such security challenges and yield novel, principled solutions backed by experimental validation and robust, practical design. The project develops a new framework, called Distribution-Sensitive Cryptography (DSC), for cryptographic tool design that will connect and improve upon several existing primitives and produce entirely new ones. DSC can be applied to create new solutions to security challenges for which good approaches have historically been elusive, including brute-force attacks against password-based encryption, censorship of encrypted protocols, and securing human-generated authentication secrets. The investigators are actively engaged with industry partners, to glean real-world requirements and to transition the new tools into practice.