SaTC: CORE: Medium: Collaborative: Theory and Practice of Cryptosystems Secure Against Subversion

SaTC：核心：媒介：协作：密码系统安全防范颠覆的理论与实践

• 批准号: 1801479
• 负责人: Matthew Green
• 金额: $ 29.79万
• 依托单位: Johns Hopkins University
• 依托单位国家: 美国
• 项目类别: Continuing Grant
• 财政年份: 2018
• 资助国家: 美国
• 起止时间: 2018-10-01 至 2021-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1801479&HistoricalAwards=false
• 关键词: SaTC; CORE; Medium; Collaborative; Theory

The discipline of cryptography provides the basic digital tools used across the globe to ensure data privacy and authenticity. With the broad deployment of these tools--often invisibly embedded in commercial software or hardware--an unconventional but devastating type of cyberattacks have emerged. These attacks involve deploying a cleverly subverted version of a cryptographic tool that appears to function normally, but in fact deliberately reduces security in a covert way that is known only to the subverting party. Such an attack can be carried out by the author of a software package, the manufacturer of a hardware device, or a third party who has contrived to interfere with the deployed product. Recent high-profile incidents of this kind have highlighted the threat associated with these attacks. This project is a comprehensive study of security in this setting, including development of formal models that permit rigorous reasoning about security, design and analysis of new cryptographic tools that resist subversion, and explicit recommendations for hardening the existing cryptographic tools in widespread use.The project is organized into three main threads. The first focuses on establishing cryptographic security models that expand on classical cryptographic models to adequately reflect malicious subversion attacks: in general, these models call for the design of cryptographic tools to be explicitly coupled with specification of black-box testing procedures so that the combination can guarantee security despite subversion attacks. The second effort pursues development of fundamental cryptographic primitives that achieve security in these new models and application of these primitives as building blocks to construct larger systems and protocols that retain security despite subversion. Finally, to transition these theoretical tools to practice, the project undertakes a practical effort to re-architect existing infrastructural tools, such as the IPSec, SSH and TLS protocols, to harden them against subversion.This award reflects NSF's statutory mission and has been deemed worthy of support through evaluation using the Foundation's intellectual merit and broader impacts review criteria.

密码学的学科提供了全球使用的基本数字工具，以确保数据隐私和真实性。随着这些工具的广泛部署（通常是在商业软件或硬件中嵌入的），已经出现了一种非常规但破坏性的网络攻击类型。这些攻击涉及部署一个巧妙的颠覆版本的加密工具，该工具似乎正常起作用，但实际上，以秘密的方式有意降低安全性，而这种秘密方式仅是颠覆方的知名度。可以由软件包的作者，硬件设备的制造商或曾为干扰部署产品的第三方进行此类攻击。此类备受瞩目的事件最近强调了与这些攻击相关的威胁。该项目是对这种环境中安全性的全面研究，包括开发正式的模型，这些模型允许对抗拒颠覆的新加密工具进行严格的推理，并分析抵抗颠覆的新密码工具，并明确建议在广泛使用中硬化现有的加密工具。该项目被组织为三个主要线程。第一个重点是建立加密安全模型，以扩展经典的加密模型，以充分反映恶意的颠覆攻击：通常，这些模型要求设计加密工具，以明确地与黑盒测试程序的规范相结合，以便尽管安全攻击也可以保证组合可以保证结合安全性。第二次努力追求基本的加密原始图，这些基础图在这些新模型中实现了安全性，并将这些原语作为构建块的应用，以构建较大的系统和协议，这些系统和协议仍然颠覆了安全性。最后，为了过渡这些理论工具进行实践，该项目采取了实践努力，以重新建立现有的基础设施工具，例如IPSEC，IPSEC，SSH和TLS协议，以使其与Subversion更加困难。该奖项反映了NSF的法规使命，并被认为是通过基金会的知识优点和广泛的crietia criter criteria criter criteria criteria criter criteria criteria criteria criteria criteria criteria criteria criteria criteria criteria criteria criteria criteria criteria criteria均值得一提。

项目成果

SoK: Cryptographic Confidentiality of Data on Mobile Devices

• DOI: 10.2478/popets-2022-0029
• 发表时间: 2021-09
• 期刊: Proceedings on Privacy Enhancing Technologies
• 作者: Maximilian Zinkus;Tushar M. Jois;M. Green

Time-Deniable Signatures

时效性签名

• 发表时间: 2022
• 期刊: Proceedings on Privacy Enhancing Technologies
• 作者: Beck, Gabrielle;Choudhuri, Arka Ray;Green, Matthew;Jain, Abhishek;Tiwari, Pratyush Ranjan
• 通讯作者: Tiwari, Pratyush Ranjan