实用抗泄露认证加密模型.pdf

实用抗泄露认证加密：安全模型与解决方案 Practice-oriented Leakage-resilient Authenticated Encryption: Models and Solutions 郭淳 山东大学网络空间安全学院 中国密码学会2021年密码算法学术会议 报告内容 1. [模型] Chun Guo, Olivier Pereira, Thomas Peters, and François-Xavier Standaert. Authenticated Encryption with Nonce Misuse and Physical Leakages: Definitions, Separation Results, and Leveled Constructions. LATINCRYPT 2019 2. [方案] Chun Guo, François-Xavier Standaert, Weijia Wang, and Yu Yu. Efficient Side- Channel Secure Message Authentication with Better Bounds. FSE 2020 3. Francesco Berti, Chun Guo, Olivier Pereira, Thomas Peters, and François-Xavier Standaert: TEDT, a Leakage Resilient AEAD mode for High (Physical) Security Applications. CHES 2020 4. Chun Guo, Olivier Pereira, Thomas Peters, and Francois-Xavier Standaert. Towards Low- Energy Leakage-Resistant Authenticated Encryption from the Duplex Sponge Construction. FSE 2020 5. [梳理] Davide Bellizia, Olivier Bronchain, Gaëtan Cassiers, Vincent Grosso, Chun Guo, Charles Momin, Olivier Pereira, Thomas Peters, and François-Xavier Standaert. Mode-Level vs. Implementation-Level Physical Security in Symmetric Cryptography: A Practical Guide Through the Leakage-Resistance Jungle. CRYPTO 2020 Authenticated Encryption with Associated Data (AEAD) ◼ Bellare and Namprempre: Authenticated Encryption: Relations among Notions and Analysis of the Generic Composition Paradigm. AC00, JoC08 ◼ Phillip Rogaway: Authenticated-Encryption with Associated-Data. CCS02. ◼ 完整性：INT-PTXT, INT-CTXT ◼ 机密性：IND-CPA, IND-CCA ◼ AD ：只完整不机密 ◼ INT-CTXT + IND-CPA ⇒ IND-CCA ◼ Jost et al.: INT-CTXT + IND-CPA ⇔ INT-PTXT + IND-CCA (/2018/135) ◼ AE security := INT-CTXT + IND-CPA 例：GCM mode/construction CTR加密 Wegman-Carter MAC