arXivDaily arXiv每日学术速递 周一至周五更新
arXiv 1810.00567cs.CR
收藏

更强大的加密技术,适用于所有设备,无处不在

Stronger Cryptography For Every Device, Everywhere

JV Roig

摘要:

产生安全的随机数是密码学中的一个核心问题,它需要一个可靠的足够计算熵的来源。如果没有足够的熵可用-这意味着没有安全随机数的良好来源-设备容易受到加密协议故障的影响,例如弱的、可分解的或可预测的密钥,这导致各种安全和隐私漏洞。在本文中,作者提出了一项重大改进:为任何CPU供电的设备提供了一种可靠的方法-从嵌入式设备中的小型简单CPU到现代服务器中的大型复杂CPU-通过对琐碎CPU操作的侧通道测量来收集几乎无限的熵,从而使安全随机数的生成成为一种简单,安全和可靠的操作。

英文摘要:

Generating secure random numbers is a central problem in cryptography that needs a reliable source of enough computing entropy. Without enough entropy available - meaning no good source of secure random numbers - a device is susceptible to cryptographic protocol failures such as weak, factorable, or predictable keys, which lead to various security and privacy vulnerabilities. In this paper, the author presents a significant improvement: a reliable way for any CPU-powered device - from the small, simple CPUs in embedded devices, to larger, more complex CPUs in modern servers - to collect virtually unlimited entropy through side channel measurements of trivial CPU operations, making the generation of secure random numbers an easy, safe, and reliable operation.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑