CAREER: Cryptographic Security at Internet Scale

密码学是现代计算机安全的基石，在我们日常依赖的计算机系统中无处不在。然而，在形式化安全模型提供的理论保证与当今部署系统中的现实之间存在着显著的差距。该项目的中心研究目标是在全球范围内对加密部署进行实证研究，并为实验性加密安全研究开发一个框架。该项目开发和传播用于测量加密安全性的工具，并将通过检测和消除漏洞来提高加密软件和硬件在实际使用中的安全性。研究结果既面向学术界发布，也面向非学术界和工业界的受众进行推广，并被纳入课程材料。该项目产生了基本的新见解，并加深了对现实世界中加密部署的理解。主要活动包括改进现有方法和开发收集和处理大规模密码数据集的新工具。该研究还探讨了用于实时加密异常检测的高效算法工具的开发，跟踪漏洞实现的改进方法，用于密码分析的高性能计算状态的进步，以及更精确的安全模型和加密系统需求的开发。

Cryptography is a cornerstone of modern computer security and is ubiquitous on the computer systems we depend on daily. However, there is a significant gap between the theoretical guarantees provided by formalized security models, and the reality present in deployed systems today. The central research goals of this project are to perform an empirical study of cryptographic deployments on a global scale and to develop a framework for experimental cryptographic security research. This project develops and disseminates tools for measuring cryptographic security, and will result in increased security for cryptographic software and hardware in real use by detecting and eliminating flaws. Results are published for the academic community as well as popularized for nonacademic and industry audiences and incorporated into course materials.The project yields fundamental new insights and deepens the understanding of cryptographic deployments in the real world. The main activities include the refinement of existing methods and development of new tools for collecting and processing large-scale cryptographic datasets. The research also investigates the development of efficient algorithmic tools for real-time cryptographic anomaly detection, improved methodology for tracing vulnerabilities to implementations, advancements in the state of high-performance computing for cryptanalysis, and the development of more precise security models and requirements for cryptographic systems.