TWC: Small: Subversion-Resistant Cryptography

这项工作旨在有效地解决安全问题，同时维护个人和企业的隐私。该项目分析颠覆性攻击，开发防御和威慑，创建隐私工具和软件，并通过教学、指导和学生参与研究来提高意识和专业知识。这项研究重新思考了加密安全的基础，提供了新的模型、框架、工具和解决方案。该项目考虑了随机数生成器的颠覆，并提供了在其存在下健壮的加密形式。该项目探讨：(1)对证书颁发机构的颠覆，并提供证书签名机制来阻止它；(2)安装在系统上的恶意软件对加密密钥的泄露，以及开发大密钥加密技术作为威慑；(3)通过渗透其端点和开发新协议来颠覆密钥分发协议。

This work aims to effectively address security concerns while maintaining the privacy of individuals and corporations. The project analyzes subversive attacks, develops defenses and deterrents, creates privacy tools and software, and increases awareness and expertise through teaching, mentoring and involvement of students in research. This research rethinks the basics of cryptographic security to provide new models, frameworks, tools and solutions. This project considers the subversion of random number generators and offers forms of encryption that are robust in its presence. The project explores: (1) the subversion of certificate authorities and offer certificate-signing mechanisms that deter it, (2) the exfiltration of cryptographic keys by malware installed on systems and development of big-key cryptography as a deterrent, and (3) the subversion of key distribution protocols through infiltration of their endpoints and development of new protocols to resist it.