A classical introduction to cryptography: Applications for communications security.

From MaRDI portal





The book under review is a transcript of a course given by the author at the Communication Systems division of EPFL. It consists of 12 chapters and covers theoretical as well as practical aspects of cryptography. The first chapter is devoted to the backgrounds of cryptography. It introduces the basic terminology and the most important historical cryptosystems from Caesar cipher to Enigma. Finally, basics of the Shannon's Theory of secrecy are presented. Conventional cryptography is addressed in Chapters 2 to 5. Chapter 2 deals with conventional encryption algorithms. It covers a large number of block ciphers (DES, its modes of operations, and multiple encryption using DES; Feistel scheme, IDEA, SAFER K-64, AES; and three not very well known algorithms (the author participated in their design) as well as the most important stream ciphers (RC4, A5/1 used in the GSM mobile phone networks, and the Bluetooth encryption algorithm E0). Finally, brute force attacks on symmetric encryption algorithms, including exhaustive search, dictionary attack, codebook attack, and meet-in-the-middle attack, are described. Chapter 3 is dedicated to other conventional cryptographic primitives, namely hash functions, message authentication codes, and pseudorandom generators. For each of the primitive, the usage and threat models are described and some examples of well-known and generally used algorithms are given (MD5, SHA, SHA-1; CBC-MAC, HMAC; congruential pseudorandom generator, generators based on block ciphers). Chapter 4 deals with conventional security analysis. It covers differential and linear cryptanalysis and the distinguishability model. The last chapter of this part addresses security protocols using conventional cryptography. Password access control and challenge response protocols are presented on examples of authentication within HTTP and the Point-To-Point Protocol (PPP); one-time passwords are presented on the example of the Lampert scheme and its successors S/Key system and OTP. The next topic is the key distribution protocols. Needham-Schroeder Protocol, Kerberos and Merkle Key-Establishment Protocol are described. Realization of digital signatures using conventional cryptography is demonstrated on Merkle Trees. A problem of time-stamping and notary services is shortly discussed. The chapter concludes with description of authentication protocols used in GSM and Bluetooth networks. Chapters 6 to 8 present theoretical backgrounds necessary to understand principles of public-key cryptography, namely algebra (groups, rings, finite fields, elliptic curves over finite fields), number theory (primality testing, factorization, computing orders of groups and discrete logarithms) and complexity theory (formal languages, finite automata, Turing machines, computability, decidability, complexity reductions). The asymmetric cryptographic algorithms are the topic of Chapters 9 to 11. Chapter 9 is devoted to the public-key encryption. First, it discusses the backgrounds and history of the public-key cryptography, mentioning the first algorithms published in this area of cryptography, namely Diffie-Hellman Key Agreement Protocol and cryptosystems based on the knapsack problem. Further RSA is analyzed in detail, and the ElGamal cryptosystem and its security is shortly discussed. Digital signatures are the topic of Chapter 10. First, the threat models are introduced. RSA and the ElGamal digital signature family, including Elliptic Curve DSA, are considered and several attacks are studied. Finally, provable security for digital signatures is discussed. Chapter 11 deals with various cryptographic protocols. Zero-knowledge, secret sharing schemes and undeniable signatures are considered in detail and some special purpose signatures (group signatures, ring signatures, blind signatures, invisible signatures, fail-stop signatures) and other special protocols (digital cash, electronic votes, mental poker, multiparty computation, and broadcast encryption) are shortly described. The last chapter is devoted to three well-known systems used for securing communication, namely SSH and SSL for on-line communication, and PGP for off-line communication. Each chapter of the book is concluded with a set of exercises. Additional information to the book (e.g. errata) is available on the Internet on the author's web site\newline http://www.vaudenay.ch/crypto.




Cited in
(30)








This page was built for publication: A classical introduction to cryptography: Applications for communications security.

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q5702544)