cryptography
play

Cryptography [Symmetric Encryption] Spring 2020 Franziska (Franzi) - PowerPoint PPT Presentation

Mar 24, 2023 •355 likes •583 views

CSE 484 / CSE M 584: Computer Security and Privacy Cryptography [Symmetric Encryption] Spring 2020 Franziska (Franzi) Roesner franzi@cs.washington.edu Thanks to Dan Boneh, Dieter Gollmann, Dan Halperin, Yoshi Kohno, Ada Lerner, John

  1. CSE 484 / CSE M 584: Computer Security and Privacy Cryptography [Symmetric Encryption] Spring 2020 Franziska (Franzi) Roesner franzi@cs.washington.edu Thanks to Dan Boneh, Dieter Gollmann, Dan Halperin, Yoshi Kohno, Ada Lerner, John Manferdelli, John Mitchell, Vitaly Shmatikov, Bennet Yee, and many others for sample slides and materials ...

  2. Admin • Final Lab 1 deadline now Friday 5/1 (not Wed) • More help – We�ll be adding one more OH on Frida�s – More on sploit 5 in section this week • Homework 2 (crypto) will be out soon – Due on 5/8 (designed to give you hands-on experience with crypto concepts, not be tricky -- should not take you a full 2 weeks) 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 2

  3. Reducing Key Size • What to do when it is infeasible to pre-share huge random keys? – When one- time pad is unrealistic� • Use special cryptographic primitives: block ciphers, stream ciphers – Single key can be re-used (with some restrictions) – Not as theoretically secure as one-time pad 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 3

  4. Block Ciphers • Operates on a single chunk ��block�� of plaintext – For example, 64 bits for DES, 128 bits for AES – Each key defines a different permutation – Same key is reused for each block (can use short keys) Plaintext block Key cipher Ciphertext 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 4

  5. Keyed Permutation Plaintext • Not just shuffling of input bits! – Suppose plaintext � ������ block Key Then ����� is not the onl� cipher possible ciphertext! • Instead: Ciphertext – Permutation of possible outputs – Use secret key to pick a permutation 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 5

  6. Keyed Permutation possible possible input output output etc. 000 010 111 � Key = 00 001 111 110 � Key = 01 010 101 000 � 011 110 101 � � � � 111 000 110 � For N-bit input, 2 N ! possible permutations For K-bit key, 2 K possible keys 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 6

  7. Block Cipher Security • Result should look like a random permutation on the inputs – Recall: not just shuffling bits. N-bit block cipher permutes over 2 N inputs. • Only computational guarantee of secrecy – Not impossible to break, just very expensive • If there is no efficient algorithm (unproven assumption!), then can only break by brute-force, try-every-possible-key search – Time and cost of breaking the cipher exceed the value and/or useful lifetime of protected information 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 7

  8. Block Cipher Operation (Simplified) Block of plaintext Key Add some secret key bits S S S S to provide confusion S S S S Each S-box transforms its input bits in a “ random-looking ” way repeat for several rounds to provide diffusion (spread plaintext bits throughout ciphertext) S S S S Procedure must be reversible Block of ciphertext (for decryption) 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 8

  9. Standard Block Ciphers • DES: Data Encryption Standard – Feistel structure: builds invertible function using non- invertible ones – Invented by IBM, issued as federal standard in 1977 – 64-bit blocks, 56-bit key + 8 bits for parity 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 9

  10. DES and 56 bit keys • 56 bit keys are quite short • 1999: EFF DES Crack + distributed machines – < 24 hours to find DES key • DES ---> 3DES – 3DES: DES + inverse DES + DES (with 2 or 3 diff keys) 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 10

  11. Standard Block Ciphers • DES: Data Encryption Standard – Feistel structure: builds invertible function using non- invertible ones – Invented by IBM, issued as federal standard in 1977 – 64-bit blocks, 56-bit key + 8 bits for parity • AES: Advanced Encryption Standard – New federal standard as of 2001 • NIST: National Institute of Standards & Technology – Based on the Rijndael algorithm • Selected via an open process – 128-bit blocks, keys can be 128, 192 or 256 bits 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 11

  12. Encrypting a Large Message • So� we�ve got a good block cipher� but our plaintext is larger than 128-bit block size 128-bit plaintext (arranged as 4x4 array of 8-bit bytes) 128-bit ciphertext • What should we do? 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 12

  13. Electronic Code Book (ECB) Mode plaintext key key key key key block block block block block cipher cipher cipher cipher cipher ciphertext • Identical blocks of plaintext produce identical blocks of ciphertext • No integrity checks: can mix and match blocks 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 13

  14. Information Leakage in ECB Mode Encrypt in ECB mode [Wikipedia] 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 14

  15. Oops https://citizenlab.ca/2020/04/move-fast-roll-your-own-crypto-a-quick- look-at-the-confidentiality-of-zoom-meetings/ 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 15

  16. Cipher Block Chaining (CBC) Mode: Encryption plaintext � � � � Initialization vector key key key key (random) block block block block cipher cipher cipher cipher Sent with ciphertext (preferably encrypted) ciphertext • Identical blocks of plaintext encrypted differently • Last cipherblock depends on entire plaintext • Still does not guarantee integrity 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 16

  17. CBC Mode: Decryption plaintext � � � � Initialization vector key key key key decrypt decrypt decrypt decrypt ciphertext 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 17

  18. ECB vs. CBC AES in ECB mode AES in CBC mode Similar plaintext blocks produce similar ciphertext blocks (not good!) [Picture due to Bart Preneel] slide 18 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 18

  19. Initialization Vector Dangers plaintext � � � � Initialization vector key key key key (supposed to be random) DES DES DES DES ciphertext Found in the source code for Diebold voting machines: DesCBCEncrypt((des_c_block*)tmp, (des_c_block*)record.m_Data, totalSize, DESKEY, NULL, DES_ENCRYPT) 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 19

  20. Counter Mode (CTR): Encryption Initial ctr ctr ctr+1 ctr+2 ctr+3 (random) Key Key Key Key block block block block cipher cipher cipher cipher ฀ ฀ ฀ ฀ pt pt pt pt ciphertext • Identical blocks of plaintext encrypted differently • Still does not guarantee integrity; Fragile if ctr repeats 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 20

  21. Counter Mode (CTR): Decryption Initial ctr ctr ctr+1 ctr+2 ctr+3 Key Key Key Key block block block block cipher cipher cipher cipher ⊕ ⊕ ⊕ ⊕ ct ct ct ct pt pt pt pt 4/20/2020 CSE 484 / CSE M 584 - Spring 2020 21

Recommend

HOST Cryptography I ECE 525 Cryptography Handbook of Applied Cryptography &amp;

HOST Cryptography I ECE 525 Cryptography Handbook of Applied Cryptography &amp;

HOST Cryptography I ECE 525 Cryptography Handbook of Applied Cryptography &amp; http://cseweb.ucsd.edu/users/mihir/cse207/ Brief History: Proliferation of computers and communication systems in 1960s brought with it a demand to protect

273 views • 24 slides
Basic Cryptography Ge Zhang What is Cryptography Cryptography Cryptosystem: 5-tuple (M,

Basic Cryptography Ge Zhang What is Cryptography Cryptography Cryptosystem: 5-tuple (M,

Karlstad University Basic Cryptography Ge Zhang What is Cryptography Cryptography Cryptosystem: 5-tuple (M, C, E, D, K) M: the set of plaintexts C: the set of ciphertexts E: M x K -&gt; C enciphering functions D: C x K

446 views • 40 slides
Intro to Cryptography Definitions Cryptography Cryptanalysis Cryptology CRYPTOGRAPHY

Intro to Cryptography Definitions Cryptography Cryptanalysis Cryptology CRYPTOGRAPHY

Intro to Cryptography Definitions Cryptography Cryptanalysis Cryptology CRYPTOGRAPHY Plaintext Cyphertext More definitions block cipher stream cipher hash function shared key public key digital signature

383 views • 16 slides
Symmetric Key Cryptography Introduction to Symmetric Key Cryptography What can we do?

Symmetric Key Cryptography Introduction to Symmetric Key Cryptography What can we do?

PQCRYPTO Summer School on Post-Quantum Cryptography 2017 Stefan Klbl June 20th, 2017 DTU Compute, Technical University of Denmark Symmetric Key Cryptography Introduction to Symmetric Key Cryptography What can we do? Authentication

711 views • 47 slides
Cryptography Concepts and Terminology Cryptography Concepts Cryptography Notation and

Cryptography Concepts and Terminology Cryptography Concepts Cryptography Notation and

Cryptography Cryptography Concepts and Terminology Security Concepts Cryptography Concepts and Terminology Cryptography Concepts Cryptography Notation and Terminology Cryptography School of Engineering and Technology CQUniversity

453 views • 11 slides
Cryptography Concepts and Terminology Cryptography Concepts Cryptography Notation and

Cryptography Concepts and Terminology Cryptography Concepts Cryptography Notation and

Cryptography Cryptography Concepts and Terminology Security Concepts Cryptography Concepts and Terminology Cryptography Concepts Cryptography Notation and Terminology Cryptography School of Engineering and Technology CQUniversity

322 views • 11 slides
Uses of Cryptography What can we use cryptography for? Lots of things Secrecy

Uses of Cryptography What can we use cryptography for? Lots of things Secrecy

Uses of Cryptography What can we use cryptography for? Lots of things Secrecy Authentication Prevention of alteration Lecture 4 Page 1 CS 236 Online Cryptography and Secrecy Pretty obvious Only those knowing the

303 views • 15 slides
Cryptography Modern cryptography was born in 1970s when computationally easy-to-verify but

Cryptography Modern cryptography was born in 1970s when computationally easy-to-verify but

Cryptography Modern cryptography was born in 1970s when computationally easy-to-verify but hard-to-solve problems were discovered. Computational Complexity, by Fu Yuxi Cryptography 1 / 75 Cryptography is closely related to some

785 views • 76 slides
Quantum Cryptography Lecture 28 Quantum Cryptography Quantum Cryptography Quantum information:

Quantum Cryptography Lecture 28 Quantum Cryptography Quantum Cryptography Quantum information:

Quantum Cryptography Lecture 28 Quantum Cryptography Quantum Cryptography Quantum information: Using microscopic physical state of quantum systems (spin of atoms/sub-atomic particles, polarization of photons etc.) to encode information

1.95k views • 154 slides
Modern cryptography CSCI 470: Web Science Keith Vertanen Overview Modern cryptography

Modern cryptography CSCI 470: Web Science Keith Vertanen Overview Modern cryptography

Modern cryptography CSCI 470: Web Science Keith Vertanen Overview Modern cryptography Symmetric cryptography DES 3DES AES Asymmetric cryptography Diffie-Hellman key exchange 2 Modern cryptography Moving into

338 views • 16 slides
Cryptography Basics Network Security Instructor: Haojin Zhu 1 Cryptography What is

Cryptography Basics Network Security Instructor: Haojin Zhu 1 Cryptography What is

Cryptography Basics Network Security Instructor: Haojin Zhu 1 Cryptography What is cryptography? Related fields: Cryptography (&quot;secret writing&quot;): Making secret messages Turning plaintext (an ordinary readable message)

1.2k views • 57 slides
Public-Key Cryptography Public-Key Cryptography Lecture 9 Public-Key Cryptography Lecture 9

Public-Key Cryptography Public-Key Cryptography Lecture 9 Public-Key Cryptography Lecture 9

Public-Key Cryptography Public-Key Cryptography Lecture 9 Public-Key Cryptography Lecture 9 CCA Security SIM-CCA Security (PKE) Recv Send PK/Enc SK/Dec Replay Filter Secure (and correct) if: s.t. output of is distributed

1.26k views • 101 slides
Public Key Cryptography Cryptography School of Engineering and Technology CQUniversity Australia

Public Key Cryptography Cryptography School of Engineering and Technology CQUniversity Australia

Cryptography Public Key Cryptography Concepts of Public Key Cryptography Public Key Cryptography Cryptography School of Engineering and Technology CQUniversity Australia Prepared by Steven Gordon on 20 Feb 2020, public.tex, r1803 1

421 views • 7 slides
Its Applications Aaram Yun, UNIST FIF presentation, 2015 1 Cryptography 2 Cryptography

Its Applications Aaram Yun, UNIST FIF presentation, 2015 1 Cryptography 2 Cryptography

Homomorphic Cryptography &amp; Its Applications Aaram Yun, UNIST FIF presentation, 2015 1 Cryptography 2 Cryptography Bike lock of Internet Provides many important building blocks for security For example, encryption or

699 views • 31 slides
Symmetric Key Cryptography Introduction to Symmetric Key Cryptography Myth Where does security

Symmetric Key Cryptography Introduction to Symmetric Key Cryptography Myth Where does security

PQCRYPTO Summer School on Post-Quantum Cryptography 2017 Stefan Klbl June 19th, 2017 DTU Compute, Technical University of Denmark Symmetric Key Cryptography Introduction to Symmetric Key Cryptography Myth Where does security fail?

758 views • 72 slides
Handout 8 Summary of this handout: Asymmetric Cryptography Public Key Cryptography

Handout 8 Summary of this handout: Asymmetric Cryptography Public Key Cryptography

06-20008 Cryptography The University of Birmingham Autumn Semester 2012 School of Computer Science Eike Ritter 15 November, 2012 Handout 8 Summary of this handout: Asymmetric Cryptography Public Key Cryptography Diffie-Hellman Key

207 views • 8 slides
FIPS 201 Cryptography FIPS 201 Cryptography Tim Polk tim.polk@nist.gov Nov 18, 2004

FIPS 201 Cryptography FIPS 201 Cryptography Tim Polk tim.polk@nist.gov Nov 18, 2004

FIPS 201 Cryptography FIPS 201 Cryptography Tim Polk tim.polk@nist.gov Nov 18, 2004 Cryptography in FIPS 201 Cryptography in FIPS 201 Digital signatures on logical credentials o CHUID, X.509 certificates, biometrics Cryptographic

272 views • 12 slides
Outline Cryptography and Encryption Uses of cryptography Algorithms Symmetric

Outline Cryptography and Encryption Uses of cryptography Algorithms Symmetric

Outline Cryptography and Encryption Uses of cryptography Algorithms Symmetric cryptography CS 239 Asymmetric cryptography Computer Security February 5, 2003 Lecture 7 Lecture 7 Page 1 Page 2 CS 239, Winter 2003 CS 239,

263 views • 11 slides
Outline Cryptography and Encryption Uses of cryptography Algorithms Symmetric

Outline Cryptography and Encryption Uses of cryptography Algorithms Symmetric

Outline Cryptography and Encryption Uses of cryptography Algorithms Symmetric cryptography CS 239 Asymmetric cryptography Computer Security January 26, 2005 Lecture 5 Lecture 5 Page 1 Page 2 CS 239, Winter 2005 CS 239,

321 views • 13 slides
Cryptography Intro and RSA Well, a gentle intro to cryptography, followed by a description of

Cryptography Intro and RSA Well, a gentle intro to cryptography, followed by a description of

Cryptography Intro and RSA Well, a gentle intro to cryptography, followed by a description of public key crypto and RSA. Fall 2018 CS 222: Discrete Structures 1 Definition Cryptology is the study of secret writing Concerned with

681 views • 54 slides
Cryptography Basics Part 1: Concepts Cryptology: Contents Cryptography goals Encryption

Cryptography Basics Part 1: Concepts Cryptology: Contents Cryptography goals Encryption

Cryptography Basics Part 1: Concepts Cryptology: Contents Cryptography goals Encryption principles Encryption quality Cryptography Public key cryptography The art of making Next week: Example algorithms DES, AES, AES

893 views • 78 slides
Modern cryptography 2 CSCI 470: Web Science Keith Vertanen Overview Modern cryptography

Modern cryptography 2 CSCI 470: Web Science Keith Vertanen Overview Modern cryptography

Modern cryptography 2 CSCI 470: Web Science Keith Vertanen Overview Modern cryptography Asymmetric cryptography Diffie-Hellman key exchange (last time) Pubic key: RSA Pretty Good Privacy (PGP) Digital signing Public

682 views • 26 slides
Public Key Cryptography in Practice Eli Biham - May 3, 2005 c 372 Public Key Cryptography in

Public Key Cryptography in Practice Eli Biham - May 3, 2005 c 372 Public Key Cryptography in

Public Key Cryptography in Practice Eli Biham - May 3, 2005 c 372 Public Key Cryptography in Practice (13) How Cryptography is Used in Applications The main drawback of public key cryptography is the inherent slow speed of the public key

442 views • 14 slides
Lecture 8 Public Key Cryptography (Diffie-Hellman and RSA) 1 Public Key Cryptography

Lecture 8 Public Key Cryptography (Diffie-Hellman and RSA) 1 Public Key Cryptography

Lecture 8 Public Key Cryptography (Diffie-Hellman and RSA) 1 Public Key Cryptography Asymmetric cryptography Invented in 1974-1978 (Diffie-Hellman and Rivest-Shamir- Adleman) Two keys: private (SK), public (PK) Encryption: with

445 views • 17 slides

More recommend