Cryptography Engineering : Design Principles and Practical Applications

The ultimate guide to cryptography, updated from an author team of the world's top cryptography experts. Cryptography is vital to keeping information safe, in an era when the formula to do so becomes more and more challenging. Written by a team of world-renowned cryptography experts, this essential guide is the definitive introduction to all major areas of cryptography: message security, key negotiation, and key management. You'll learn how to think like a cryptographer. You'll discover techniques for building cryptography into products from the start and you'll examine the many technical changes in the field. After a basic overview of cryptography and what it means today, this indispensable resource covers such topics as block ciphers, block modes, hash functions, encryption modes, message authentication codes, implementation issues, negotiation protocols, and more. Helpful examples and hands-on exercises enhance your understanding of the multi-faceted field of cryptography. An author team of internationally recognized cryptography experts updates you on vital topics in the field of cryptography Shows you how to build cryptography into products from the start Examines updates and changes to cryptography Includes coverage on key servers, message security, authentication codes, new standards, block ciphers, message authentication codes, and more Cryptography Engineering gets you up to speed in the ever-evolving field of cryptography. Cryptography Engineering: Design Principles and Practical Applications Credits About the Authors Acknowledgments for Cryptography Engineering Acknowledgments for Practical Cryptography (the 1st Edition) Contents at a Glance Contents Preface to Cryptography Engineering History Example Syllabi Additional Information Preface to Practical Cryptography (the 1st Edition) How to Read this Book Part I: Introduction In This Part Chapter 1: The Context of Cryptography 1.1: The Role of Cryptography 1.2: The Weakest Link Property 1.3: The Adversarial Setting 1.4: Professional Paranoia. 1.4.1: Broader Benefits1.4.2: Discussing Attacks 1.5: Threat Model 1.6: Cryptography Is Not the Solution 1.7: Cryptography Is Very Difficult 1.8: Cryptography Is the Easy Part 1.9: Generic Attacks 1.10: Security and Other Design Criteria 1.10.1: Security Versus Performance 1.10.2: Security Versus Features 1.10.3: Security Versus Evolving Systems 1.11: Further Reading 1.12: Exercises for Professional Paranoia 1.12.1: Current Event Exercises 1.12.2: Security Review Exercises 1.13: General Exercises Chapter 2: Introduction to Cryptography 2.1: Encryption. 2.1.1: Kerckhoffs' Principle2.2: Authentication 2.3: Public-Key Encryption 2.4: Digital Signatures 2.5: PKI 2.6: Attacks 2.6.1: The Ciphertext-Only Model 2.6.2: The Known-Plaintext Model 2.6.3: The Chosen-Plaintext Model 2.6.4: The Chosen-Ciphertext Model 2.6.5: The Distinguishing Attack Goal 2.6.6: Other Types of Attack 2.7: Under the Hood 2.7.1: Birthday Attacks 2.7.2: Meet-in-the-Middle Attacks 2.8: Security Level 2.9: Performance 2.10: Complexity 2.11: Exercises Part II: Message Security Chapter 3: Block Ciphers 3.1: What Is a Block Cipher? 3.2: Types of Attack. 3.3: The Ideal Block Cipher3.4: Definition of Block Cipher Security 3.4.1: Parity of a Permutation 3.5: Real Block Ciphers 3.5.1: DES 3.5.2: AES 3.5.3: Serpent 3.5.4: Twofish 3.5.5: Other AES Finalists 3.5.6: Which Block Cipher Should I Choose? 3.5.7: What Key Size Should I Use? 3.6: Exercises Chapter 4: Block Cipher Modes 4.1: Padding 4.2: ECB 4.3: CBC 4.3.1: Fixed IV 4.3.2: Counter IV 4.3.3: Random IV 4.3.4: Nonce-Generated IV 4.4: OFB 4.5: CTR 4.6: Combined Encryption and Authentication 4.7: Which Mode Should I Use? 4.8: Information Leakage. 4.8.1: Chances of a Collision4.8.2: How to Deal With Leakage 4.8.3: About Our Math 4.9: Exercises Chapter 5: Hash Functions 5.1: Security of Hash Functions 5.2: Real Hash Functions 5.2.1: A Simple But Insecure Hash Function 5.2.2: MD5 5.2.3: SHA-1 5.2.4: SHA-224, SHA-256, SHA-384, and SHA-512 5.3: Weaknesses of Hash Functions 5.3.1: Length Extensions 5.3.2: Partial-Message Collision 5.4: Fixing the Weaknesses 5.4.1: Toward a Short-term Fix 5.4.2: A More Efficient Short-term Fix 5.4.3: Another Fix 5.5: Which Hash Function Should I Choose? 5.6: Exercises. Coverage includes: The Context of Cryptography, Introduction to Cryptography, Message Security, Block Ciphers, Block Cipher Modes, Hash Functions, Message Authentication Codes, The Secure Channel, Implementation Issues, Key Negotiation, Generating Randomness, Primes, Diffie-Hellman, RSA, Introduction to Cryptographic Protocols, Negotiation Protocol, Key Management, The Clock, Key Servers, The Dream of PKI, PKI Reality, PKI Practicalities, Storing Secrets, New Standards, New Patents. Educational ancillaries will be built within the book and will include exercises for each chapter and several recommended course syllabi (a 10-week quarter on cryptography, a 16-week semester on cryptography, 5 weeks of cryptography out of a 10-week quarter on computer security, and so on). New material will reflect technical changes in the field. For example, we will want to describe NISTs new CCM and GCM encryption modes. We will also provide material targeted at helping students develop the security mindset. Kohno will use his courses at the University of Washington, as well as his interactions with other students, to develop and review the contents for this book. The materials will therefore have been field tested with real students. Kohno will also work with Ferguson and Schneier on preparing this new book. A web site will be created in a wiki fashion whereby professors will be invited to submit their most favorite cryptography exams. There will be discussion and analysis of frequency of downloads to determine the best tests which will then be available to all professors. Cryptography Engineering: Design Principles and Practical Applications; Credits; About the Authors; Acknowledgments for Cryptography Engineering; Acknowledgments for Practical Cryptography (the 1st Edition); Contents at a Glance; Contents; Preface to Cryptography Engineering; History; Example Syllabi; Additional Information; Preface to Practical Cryptography (the 1st Edition); How to Read this Book; Part I: Introduction; In This Part; Chapter 1: The Context of Cryptography; 1.1: The Role of Cryptography; 1.2: The Weakest Link Property; 1.3: The Adversarial Setting; 1.4: Professional Paranoia.;The ultimate guide to cryptography, updated from an author team of the world's top cryptography experts. Cryptography is vital to keeping information safe, in an era when the formula to do so becomes more and more challenging. Written by a team of world-renowned cryptography experts, this essential guide is the definitive introduction to all major areas of cryptography: message security, key negotiation, and key management. You'll learn how to think like a cryptographer. You'll discover techniques for building cryptography into products from the start and you'll examine the many technical chan. Discusses how to choose and use cryptographic primitives, how to implement cryptographic algorithms and systems, how to protect each part of the system and why, and how to reduce system complexity and increase security.