RAC: Robust Authenticated Ciphers

经过身份验证的加密的生动发展确实导致了许多理论上有趣和实际相关的结果。“健壮性”作为未指定使用条件和使用错误下密码系统的最佳安全性的概念已经建立，但到目前为止，它被认为是非常狭隘的，关注于“非once误用”（NM），有时也关注于“发布未经验证的明文”（RUP）的情况。该项目考虑了认证加密方案健壮性的更广泛概念。它包括各种形式的泄漏弹性（尽管有侧信道攻击，密码系统的最佳安全性）、密钥拉伸（当密钥较弱或部分泄露时，为密码系统实现最佳安全性）以及超越aes生日绑定（128*2**64位）的安全性。该项目的主要目标如下：1。开发具有NM-鲁棒性和rup -鲁棒性的认证加密新系统。改进了对泄漏弹性概念的理解，特别是关于泄漏弹性的身份验证加密。3. 第一个和最基本的结果是关于长明文的身份验证加密和隐式密钥扩展之间可能存在的联系。4. 寻找关于开发重量级软件高效块密码的新权衡。这样的分组密码必须是高效的，并且必须达到超过aes生日限制的安全性。

The lively evolution of the authenticated encryption did lead to many theoretically interesting and practically relevant results. The notion of "robustness" as the optimal security of a cryptosystem under unspecified usage conditions and usage errors has been established, but so far is considered very narrowly with a focus on "nonce misuse" (NM) and sometimes also on cases of the "release of unverified plaintexts" (RUP). The project considers a broader notion of robustness for authenticated encryption schemes. It includes forms of leakage-resilience (the optimal security of a cryptosystem in spite of side channel attacks), of key stretching (to achieve optimal security for a cryptosystem, when its keys are weak or partially compromised), and security beyond the AES-birthday-bound (128*2**64 bit). The main goals of the project are the following:1. The developement of new systems for authenticated encryption, which are both NM- and RUP-robust.2. An improved understanding of the notion of leakage-resilience, specifically with respect to leakage-resilient authenticated encryption. 3. First and fundamental results about a possible connection between the authenticated encryption of long plaintexts and implicit key stretching. 4. The search for new trade-offs regarding the developement of heavyweight software-efficient blockciphers. Such a block cipher must be highly efficient and shall, nevertheless, achieve security beyond the AES-birthday-bound.