SaTC: TTP: Small: Easy Email Encryption

SaTC：TTP：小型：轻松电子邮件加密

基本信息

批准号：
1717801
负责人：
Steven Bellovin
金额：
$ 50万
依托单位：
Columbia University
依托单位国家：
美国
项目类别：
Standard Grant
财政年份：
2017
资助国家：
美国
起止时间：
2017-09-01 至 2021-08-31
项目状态：
已结题

来源：
https://www.nsf.gov/awardsearch/showAward?AWD_ID=1717801&HistoricalAwards=false
关键词：
SaTC TTP Small Easy Email

项目摘要

Encryption is not used as widely as it should be, especially for email. One reason is that it's very hard to use; study after study has shown that email users, especially senders, cannot use email encryption correctly. All too often, email is sent unencrypted or encrypted to the wrong recipient, without the sender even realizing it. The essential problem is the certificate: recipients may not have one, or senders may not know how to find it. This project addresses these problems in two ways. First, it makes certificate generation and selection automatic and transparent; when a sender tries to transmit an email message, the recipient's site automatically generates the certificate and returns it to the sender's email client; that program in turn uses the certificate to encrypt the email. Second, when email arrives unencrypted, the recipient's mail client encrypts it with a locally generated key, thus obviating any need for the sender to know or do anything.The schemes rest on one fundamental principle: a significant reason for the complexity of cryptography is that it tries to defend against extremely powerful adversaries. This provides strong protection, but at the expense of usability. The approach of this project is to assume a somewhat less capable adversary; in turn, it achieves a significant reduction in complexity. For automatic key distribution, the sender's email client consults the recipient's site's Lightweight Directory Access Protocol (LDAP) database. If a certificate already exists; it is returned and used for encryption; if it does not, a key pair and certificate are generated. The certificate is stored in the database and returned to the querier; the private key is passed to the recipient. The system also implements receiver-controlled email encryption: when email is received, a modified Internet Message Access Protocol (IMAP) client downloads the message, encrypts it with a locally generated key, and replaces the original email with an encrypted version. This functionality can be incorporated into a standard email client or it can be done via a standalone daemon. Either way, there is no key distribution problem nor any need for sender action. The emails are not protected in transmission, except by Transport Layer Security (TLS); however, they are protected for their likely long lifetime in an IMAP store. If the email had been encrypted by the sender, it is decrypted and then re-encrypted; the same can be done with messages protected by a locally generated key. This allows for key and algorithm refresh, again protecting email in storage.

加密并不像应有的广泛使用，尤其是用于电子邮件。原因之一是很难使用。研究后的研究表明，电子邮件用户，尤其是发件人，无法正确使用电子邮件加密。通常，电子邮件未加密或加密给错误的收件人，甚至没有发件人意识到它。基本问题是证书：收件人可能没有一个，或者发件人可能不知道如何找到它。该项目通过两种方式解决了这些问题。首先，它使证书生成和选择自动和透明；当发件人试图发送电子邮件时，收件人的网站会自动生成证书并将其退还给发件人的电子邮件客户端；该程序依次使用证书来加密电子邮件。其次，当电子邮件未经加密时，收件人的邮件客户端将使用本地生成的密钥对其进行加密，从而避免了发件人知道或做任何事情的任何需求。该方案基于一个基本原则：密码的复杂性的一个重要理由是，它试图捍卫强大的对手。这提供了强大的保护，但以可用性为代价。该项目的方法是假设能力较低的对手。反过来，它的复杂性显着降低。对于自动密钥发行，发件人的电子邮件客户端会咨询收件人网站的轻量级目录访问协议（LDAP）数据库。如果已经存在证书；它被返回并用于加密；如果没有，则会生成密钥对和证书。证书存储在数据库中，并返回查询器；私钥传递给收件人。该系统还实现了接收器控制的电子邮件加密：收到电子邮件后，修改后的Internet消息访问协议（IMAP）客户端下载该消息，使用本地生成的密钥对其进行加密，然后用加密版本代替原始电子邮件。可以将此功能纳入标准的电子邮件客户端，也可以通过独立的守护程序完成。无论哪种方式，都没有密钥分配问题，也没有任何发件人操作的需要。除了传输层安全性（TLS）外，这些电子邮件不受传输的保护；但是，他们在IMAP商店中受到了可能的长寿命的保护。如果电子邮件已由发件人进行加密，则将其解密然后重新加密；通过本地生成的密钥保护的消息也可以完成。这允许键和算法刷新，再次保护存储中的电子邮件。

项目成果

期刊论文数量（3）

专著数量（0）

科研奖励数量（0）

会议论文数量（0）

专利数量（0）

Protecting Cloud Virtual Machines from Hypervisor and Host Operating System Exploits

DOI：
发表时间：
2019
期刊：
影响因子：
0
作者：
Shih-wei Li;John S. Koh;Jason Nieh
通讯作者：
Shih-wei Li;John S. Koh;Jason Nieh

Encrypted cloud photo storage using Google photos

DOI：
10.1145/3458864.3468220
发表时间：
2021-06
期刊：
Proceedings of the 19th Annual International Conference on Mobile Systems, Applications, and Services
影响因子：
0
作者：
John S. Koh;Jason Nieh;S. Bellovin
通讯作者：
John S. Koh;Jason Nieh;S. Bellovin

Optimizing Nested Virtualization Performance Using Direct Virtual Hardware