现代加密算法实践指南： Serious Cryptography

需积分: 10 35 浏览量更新于2024-07-18 收藏 4.53MB PDF 举报

"serious Cryptography - 一本实践导向的现代加密技术入门指南，由Jean-Philippe Aumasson撰写，Matthew D. Green作序。本书深入浅出地介绍了现代加密算法，涵盖了密码学的基础知识和最新发展。" 《严肃的密码学：现代加密的实用介绍》是一本专为想要理解加密算法和技术的读者编写的指南。作者Jean-Philippe Aumasson是一位在密码学领域有着深厚造诣的专家，他通过这本书向读者提供了一个全面且易于理解的视角，带领读者进入这个充满挑战和创新的领域。书中的内容可能包括但不限于以下几个方面： 1. **密码学基础**：首先，书中会介绍密码学的基本概念，如对称加密与非对称加密的区别，以及它们在保护信息安全中的应用。对称加密如DES、AES，非对称加密如RSA、ECC等，都是密码学中的核心内容。 2. **哈希函数**：哈希函数在密码学中扮演着重要的角色，用于数据完整性校验和密码存储。SHA系列和MD5等常见哈希函数的工作原理和安全性分析也是重点讨论的部分。 3. **公钥基础设施(PKI)**：PKI是现代网络通信中保障安全的关键，包括数字证书、证书权威机构(CA)以及X.509标准等。 4. **密码协议**：TLS/SSL协议用于保障网络通信的安全，书中可能会解析其工作流程，包括握手协议和加密套件的选择。 5. **加密算法的安全性**：随着计算能力的提升，许多传统加密算法的安全性受到了挑战。书中可能探讨已知的攻击方法，如差分攻击、线性攻击，并介绍如何设计更安全的算法。 6. **随机数生成**：在密码学中，随机数的生成至关重要，因为它们是许多加密操作的基础。书中可能会讨论如何生成真正随机的数，以及伪随机数生成器(PRNG)的工作原理。 7. **密码分析和安全性评估**：了解如何评估一个加密算法的安全性是至关重要的。书中可能会涵盖密码分析的方法，以及如何通过密码学安全标准如NIST来评估算法。 8. **现代密码学的前沿**：量子计算的发展对密码学产生了重大影响，可能涉及量子密码学的概念，如量子密钥分发(QKD)。 9. **应用实例**：书中还可能包含实际应用案例，如区块链技术中的加密机制，或者在物联网(IoT)和大数据环境下的安全问题。 10. **技术审查**：由Erik Tews和Samuel Neves进行的技术审查确保了书中的信息准确且符合最新的研究进展。这本由No Starch Press出版的书籍不仅适合初学者，也对有一定基础的密码学爱好者和专业人士具有参考价值。通过阅读此书，读者可以深入理解加密算法的本质，提升网络安全防护的能力。

xvi Foreword

When I began working in the ﬁeld of applied cryptography nearly two

decades ago, the information available to software developers was often

piecemeal and outdated. Cryptographers developed algorithms and pro-

tocols, and cryptographic engineers implemented them to create opaque,

poorly documented cryptographic libraries designed mainly for other

experts. There was—and there has been—a huge divide between those

who know and understand cryptographic algorithms and those who use

them (or ignore them at their peril). There are a few decent textbooks on

the market, but even fewer have provided useful tools for the practitioner.

The results have not been pretty. I’m talking about compromises with

labels like “CVE” and “Severity: High,” and in a few alarming cases, attacks

on slide decks marked “TOP SECRET.” You may be familiar with some of

the more famous examples if only because they’ve affected systems that you

rely on. Many of these problems occur because cryptography is subtle and

mathematically elegant, and because cryptographic experts have failed to

share their knowledge with the engineers who actually write the software.

Thankfully, this has begun to change and this book is a symptom of

that change.

Serious Cryptography was written by one of the foremost experts in

applied cryptography, but it’s not targeted at other experts. Nor, for that

matter, is it intended as a superﬁcial overview of the ﬁeld. On the contrary,

it contains a thorough and up-to-date discussion of cryptographic engineer-

ing, designed to help practitioners who plan to work in this ﬁeld do better.

In these pages, you’ll learn not only how cryptographic algorithms work,

but how to use them in real systems.

The book begins with an exploration of many of the key cryptographic

primitives, including basic algorithms like block ciphers, public encryption

schemes, hash functions, and random number generators. Each chapter pro-

vides working examples of how the algorithms work and what you should or

should not do. Final chapters cover advanced subjects such as TLS, as well as

the future of cryptography—what to do after quantum computers arrive to

complicate our lives.

While no single book can solve all our problems, a bit of knowledge can

go a long way. This book contains plenty of knowledge. Perhaps enough to

make real, deployed cryptography live up to the high expectations that so

many have of it.

Happy reading.

Matthew D. Green

Professor

Information Security Institute

Johns Hopkins University

xviii Preface

Another reason why I felt the need for this book is that crypto is no lon-

ger just about crypto—it has expanded into a multidisciplinary ﬁeld. To do

anything useful and relevant in crypto, you’ll need some understanding of

the concepts around crypto: how networks and computers work, what users

and systems need, and how attackers can abuse algorithms and their imple-

mentations. In other words, you need a connection to reality.

This Book’s Approach

The initial title of this book was Crypto for Real to stress the practice-oriented,

real-world, no-nonsense approach I aimed to follow. I didn’t want to make

cryptography approachable by dumbing it down, but instead tie it to real

applications. I provide source code examples and describe real bugs and hor-

ror stories.

Along with a clear connection to reality, other cornerstones of this book

are its simplicity and modernity. I focus on simplicity in form more than in

substance: I present many non-trivial concepts, but without the dull math-

ematical formalism. Instead, I attempt to impart an understanding of cryp-

tography’s core ideas, which are more important than remembering a bunch

of equations. To ensure the book’s modernity, I cover the latest developments

and applications of cryptography, such as TLS 1.3 and post-quantum cryp-

tography. I don’t discuss the details of obsolete or insecure algorithms such

as DES or MD5. An exception to this is RC4, but it’s only included to explain

how weak it is and to show how a stream cipher of its kind works.

Serious Cryptography isn’t a guide for crypto software, nor is it a com-

pendium of technical speciﬁcations—stuff that you’ll easily ﬁnd online.

Instead, the foremost goal of this book is to get you excited about crypto

and to teach you its fundamental concepts along the way.

Who This Book Is For

While writing, I often imagined the reader as a developer who’d been

exposed to crypto but still felt clueless and frustrated after attempting to

read abstruse textbooks and research papers. Developers often need—and

want—a better grasp of crypto to avoid unfortunate design choices, and I

hope this book will help.

But if you aren’t a developer, don’t worry! The book doesn’t require

any coding skills, and is accessible to anyone who understands the basics of

computer science and college-level math (notions of probabilities, modular

arithmetic, and so on).

This book can nonetheless be intimidating, and despite its relative

accessibility, it requires some effort to get the most out of it. I like the

mountaineering analogy: the author paves the way, providing you with

ropes and ice axes to facilitate your work, but you make the ascent your-

self. Learning the concepts in this book will take an effort, but there will

be a reward at the end.

剩余313页未读，继续阅读

qq_35521922

粉丝: 0
资源: 7

现代加密算法实践指南： Serious Cryptography

Visual Cryptography在Matlab中的实现代码分析

PyPI官方发布cryptography库0.5.1版本

Python库cryptography-0.5版本下载指南

Serious Cryptography A Practical Introduction to Modern Encryption azw3

Serious Cryptography A Practical Introduction to Modern Encryption [pdf]

Serious Cryptography A Practical Introduction to Modern Encryption 无水印原版pdf

Introduction to Modern Cryptography

Security analysis of electronic payment protocols based on quantum cryptography

cryptography-1.2.1 加密技术新版本发布

【创新未发表】鸽群算法PIO-Kmean-Transformer-LSTM负荷预测Matlab源码 9523期.zip

最新资源