Post-Quantum Cryptography: a Cryptanalysis Approach

目前使用的许多加密协议的安全性依赖于整数分解等数学问题的计算难度。这些问题可以用量子计算机来解决，因此，一旦量子计算机建成，我们的大多数安全基础设施将变得完全不安全。后量子密码学旨在开发即使在量子计算机建成后也能保持安全的安全协议。包括GCHQ和NSA（美国国家安全局）在内的世界上最大的安全机构已经建议向后量子协议迈进，新一代密码标准将以后量子安全为目标。由于需要升级我们的网络安全基础设施，最近开发了许多加密算法，声称提供后量子安全。这些建议是基于一些不同的数学问题，这些问题希望对量子计算机来说仍然是困难的，包括晶格问题，多元多项式系统求解，编码理论问题，等根问题，以及加密哈希函数的安全性。不幸的是，这些问题中的许多，更重要的是，构建在它们之上的加密算法，还没有经过彻底的安全性分析，因此，我们有可能忽视在安全应用程序中部署的算法中的主要弱点。在这项研究中，我们将开发突破性的密码分析技术来分析后量子密码候选算法的安全性，并确定哪些算法可能会或可能不会被进一步考虑用于数字安全应用。利用通过密码分析获得的洞察力，我们将开发新的后量子密码算法，在应用中提供更好的安全性，效率和功能属性。

The security of many cryptographic protocols in use today relies on the computational hardness of mathematical problems such as integer factorization. These problems can be solved using quantum computers, and therefore most of our security infrastructures will become completely insecure once quantum computers are built. Post-quantum cryptography aims at developing security protocols that will remain secure even after quantum computers are built. The biggest security agencies in the world including GCHQ and the NSA (the American National Security Agency) have recommended a move towards post-quantum protocols, and the new generation of cryptographic standards will aim at post-quantum security.Driven by the need to upgrade our cybersecurity infrastructures, many cryptographic algorithms have recently been developed which are claimed to offer post-quantum security. These proposals are based on a few distinct mathematical problems which are hoped to remain difficult for quantum computers, including lattice problems, multivariate polynomial system solving, coding theory problems, isogeny problems, and the security of cryptographic hash functions. Unfortunately, many of these problems, and more importantly the cryptographic algorithms that are built on top of them, have not been subject to a thorough security analysis yet, therefore leaving us with a risk to oversee major weaknesses in algorithms to be deployed in security applications. In this fellowship, we will develop breakthrough cryptanalysis techniques to analyse the security of post-quantum cryptography candidate algorithms, and determine which algorithms may or may not be further considered for digital security applications. Using the insight gained through cryptanalysis, we will then develop new post-quantum cryptographic algorithms offering better security, efficiency and functionality properties in applications.