现代密码学入门：适用于学生与工业实践者的全面教程

cybersecurity

需积分: 9 163 浏览量更新于2024-07-17 收藏 7.01MB PDF 举报

身份认证购VIP最低享 7 折!

领优惠券(最高得80元）

《理解密码学》是一本专为学生和行业从业者编写的教材，由Christof Paar和Jan Pelzl教授合著。随着信息技术的快速发展，密码学已不再局限于传统的政府通信和银行系统，而是渗透到了日常生活的各个方面，如Web浏览器、电子邮件、手机、银行卡、汽车甚至医疗植入设备。随着物联网（IoT）和新兴应用如RFID防伪标签以及车对车通信的发展，对密码学的需求与日俱增，安全问题显得尤为重要。本书旨在提供现代应用密码学的全面介绍，帮助读者理解其工作原理和实际应用场景。作者以其在嵌入式安全领域的专业知识，针对加密算法的普及，强调了公众对于理解这些技术及其潜在风险的必要性。书中涵盖了广泛的密码学概念，包括但不限于： 1. **基础概念**：介绍了密码学的基本原理，如加密算法（如对称加密、非对称加密）、哈希函数、数字签名和消息认证码等，这些都是构建安全通信体系的基础。 2. **现代技术**：探讨了当前的加密技术趋势，如公钥基础设施（PKI）、SSL/TLS协议、高级加密标准（AES）、以及零知识证明等高级加密技术的应用。 3. **实践应用**：通过实例分析，展示了如何将密码学应用于RFID防伪和车联网等实际场景中的安全措施，包括数据保护、身份验证和防止篡改等关键问题。 4. **安全性评估**：讨论了密码学系统的脆弱性和可能的攻击手段，如密码破解、中间人攻击和侧信道分析，以及如何通过安全设计和最佳实践来防御这些问题。 5. **教育与培训**：适合于不同层次的学习者，既适合大学信息安全专业学生，也适用于已经在行业中工作的技术人员，以便他们能更新知识并提升技能。 6. **版权信息**：本书享有版权，未经许可不得复制或在其他媒介上使用，体现了对知识产权的尊重和保护。通过阅读《理解密码学》，读者将获得深入理解现代密码学理论与实践的宝贵资源，有助于应对未来数字化社会中的信息安全挑战。随着技术进步，掌握密码学知识不仅对个人职业发展至关重要，也是确保信息安全和个人隐私的重要保障。

资源详情

资源推荐

xviii Table of Contents

13 Key Establishment .............................................331

13.1 Introduction . . .............................................332

13.1.1 Some Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 332

13.1.2 Key Freshness and Key Derivation . . . . . . ................332

13.1.3 The n

Key Distribution Problem . . . . . . . . . . . . . . . . . . . . . . . 334

13.2 Key Establishment Using Symmetric-Key Techniques . . . . . . . .....336

13.2.1 Key Establishment with a Key Distribution Center . . . . . . . . 336

13.2.2 Kerberos . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 339

13.2.3 Remaining Problems with Symmetric-Key Distribution . . . . 341

13.3 Key Establishment Using Asymmetric Techniques . . . ............342

13.3.1 Man-in-the-Middle Attack. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 342

13.3.2 Certiﬁcates .........................................344

13.3.3 Public-Key Infrastructures (PKI) and CAs . . . . . . . . . . . . . . . 347

13.4 Discussion and Further Reading . . . ...........................351

13.5 Lessons Learned . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 352

Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 353

References .........................................................359

Index .............................................................367

1.1 Overview of Cryptology (and This Book) 3



 











Fig. 1.3 Overview of the ﬁeld of cryptology

that we notice is that the most general term is cryptology and not cryptography.

Cryptology splits into two main branches:

Cryptography is the science of secret writing with the goal of hiding the mean-

ing of a message.

Cryptanalysis is the science and sometimes art of breaking cryptosystems. You

might think that code breaking is for the intelligence community or perhaps or-

ganized crime, and should not be included in a serious classiﬁcation of a scien-

tiﬁc discipline. However, most cryptanalysis is done by respectable researchers

in academia nowadays. Cryptanalysis is of central importance for modern cryp-

tosystems: without people who try to break our crypto methods, we will never

know whether they are really secure or not. See Sect. 1.3 for more discussion

about this issue.

Because cryptanalysis is the only way to assure that a cryptosystem is secure,

it is an integral part of cryptology. Nevertheless, the focus of this book is on

cryptography:Weintroducemostimportantpracticalcryptoalgorithmsindetail.

These are all crypto algorithms that have withstood cryptanalysis for a long time, in

most cases for several decades. In the case of cryptanalysis we will mainly restrict

ourselves to providing state-of-the-art results with respect to breaking the crypto al-

gorithms that are introduced, e.g., the factoring record for breaking the RSA scheme.

Let’s now go back to Fig. 1.3. Cryptography itself splits into three main branches:

Symmetric Algorithms are what many people assume cryptography is about:

two parties have an encryption and decryption method for which they share a

secret key. All cryptography from ancient times until 1976 was exclusively based

on symmetric methods. Symmetric ciphers are still in widespread use, especially

for data encryption and integrity check of messages.

Asymmetric (or Public-Key) Algorithms In 1976 an entirely different type of

cipher was introduced by Whitﬁeld Difﬁe, Martin Hellman and Ralph Merkle. In

public-key cryptography, a user possesses a secret key as in symmetric cryptog-

raphy but also a public key. Asymmetric algorithms can be used for applications

such as digital signatures and key establishment, and also for classical data en-

cryption.

Cryptographic Protocols Roughly speaking, crypto protocols deal with the ap-

plication of cryptographic algorithms. Symmetric and asymmetric algorithms

41IntroductiontoCryptographyandDataSecurity

can be viewed as building blocks with which applications such as secure Inter-

net communication can be realized. The Transport Layer Security (TLS) scheme,

which is used in every Web browser, is an example of a cryptographic protocol.

Strictly speaking, hash functions, which will be introduced in Chap. 11, form

a third class of algorithms but at the same time they share some properties with

symmetric ciphers.

In the majority of cryptographic applications in practical systems, symmetric and

asymmetric algorithms (and often also hash functions) are all used together. This is

sometimes referred to as hybrid schemes.Thereasonforusingbothfamiliesof

algorithms is that each has speciﬁc strengths and weaknesses.

The main focus of this book is on symmetric and asymmetric algorithms, as

well as hash functions. However, we will also introduce basic security protocols. In

particular, we will introduce several key establishment protocols and what can be

achieved with crypto protocols: conﬁdentiality of data, integrity of data, authentica-

tion of data, user identiﬁcation, etc.

1.2 Symmetric Cryptography

This section deals with the concepts of symmetric ciphers and it introduces the

historic substitution cipher. Using the substitution cipher as an example, we will

learn the difference between brute-force and analytical attacks.

1.2.1 Basics

Symmetric cryptographic schemes are also referred to as symmetric-key, secret-key,

and single-key schemes or algorithms. Symmetric cryptography is best introduced

with an easy to understand problem: There are two users, Alice and Bob, who want

to communicate over an insecure channel (Fig. 1.4). The term channel might sound

abitabstractbutitisjustageneraltermforthecommunicationlink:Thiscanbethe

Internet, a stretch of air in the case of mobile phones or wireless LAN communica-

tion, or any other communication media you can think of. The actual problem starts

with the bad guy, Oscar

,whohasaccesstothechannel,forinstance,byhacking

into an Internet router or by listening to the radio signals of a Wi-Fi communica-

tion. This type of unauthorized listening is called eavesdropping. Obviously, there

are many situations in which Alice and Bob would prefer to communicate without

Oscar listening. For instance, if Alice and Bob represent two ofﬁces of a car man-

ufacturer, and they are transmitting documents containing the business strategy for

the introduction of new car models in the next few years, these documents should

The name Oscar was chosen to remind us of the word opponent.

剩余381页未读，继续阅读

letmeddown

粉丝: 0
资源: 5

现代密码学入门：适用于学生与工业实践者的全面教程

understanding cryptography

《深入浅出密码学》PDF(英文原版）

Understanding Cryptography A Textbook for Students and Practitioners

python-cryptography <= 1.7.2-2.el7 is obsoleted by python2-cryptography-1.7.

nss-3.67.0-4.el7_9.x86_64.rpm

jce_policy-8.zip

mac下自己实现re-sign.jar对apk进行重签名

jce_policy-6.zip 下载

jce_policy-8.zip下载

bcprov-ext-jdk15on-151.jar

encryptsm2-1.0.jar

https://repo.maven.apache.org/maven2/org/bouncycastle/bcprov-jdk15on/1.67/bcprov-jdk15on-1.67.jar

AttributeError: module 'cryptography.hazmat.primitives.ciphers.algorithms' has no attribute 'RSAEncryption'

centos7搭建openstack需要那些扩展包，请列出并给我压缩包

System.Security.Cryptography.HashAlgorithm hash = System.Security.Cryptography.HashAlgorithm.Create("md5");

libcrypto-host.so

"Post-Quantum Cryptography: A Ten-Year Survey" by Daniele Micciancio et al. 的引用格式

ModuleNotFoundError: No module named 'cryptography.exceptions'

最新资源