实施格罗弗的基于AES的AEAD计划
Surajit Mandal1, Ravi Anand2,3, Mostafizar Rahman4
1Indian Institute of Technology Madras, Chennai, India.
Scientific reports
|September 10, 2024
概括
量子计算的进步对当前的密码构成威胁. 这项研究估计了格罗弗的成本.
科学领域:
- 密码学和量子计算安全 密码学和量子计算安全
- 对称密钥密码学分析对称密钥分析
- 后量子密码学 (PQC) 评估
背景情况:
- 量子计算的进步需要评估现有的加密算法的安全性.
- 格罗弗的搜索算法通过降低搜索成本,对对称密钥加密构成重大威胁.
- 将密码嵌入到量子电路中对于评估量子攻击可行性至关重要.
研究的目的:
- 提供格罗弗对基于AES的与关联数据 (AEAD) 系统的身份验证加密的关键搜索攻击的首次成本估计:Rocca-S,AEGIS-128和Tiaoxin-346.
- 为了分析这些攻击,考虑国家标准与技术研究所 (NIST) 设定的电路深度限制,进行后量子加密 (PQC) 标准化过程.
- 为了确定这些AEAD方案在特定约束下对格罗弗算法的安全性.
主要方法:
- 使用QISKIT实现了Rocca-S,AEGIS-128和Tiaoxin-346的量子电路.
- 使用门数和深度乘以宽度指标估计攻击成本.
- 在NIST的最大量子电路深度约束下进行的分析.
主要成果:
- 据估计,格罗弗攻击的门数为:罗卡-S (1.09 × 2^253),AEGIS-128 (1.14 × 2^124) 和Tiaoxin-346 (1.22 × 2^124) .
- 在NIST的深度约束下,分析的AEAD方案证明了对格罗弗的关键恢复攻击的安全性.
- 量子电路使用QISKIT SDK.成功实现和分析了量子电路.
结论:
- 评估的基于AES的AEAD方案 (Rocca-S,AEGIS-128,Tiaoxin-346) 目前对格罗弗的搜索算法进行密钥恢复是安全的,考虑到NIST的PQC深度限制.
- 这项研究为广泛使用的对称密码的实际量子安全提供了关键的见解.
- 对量子算法实施和成本分析的进一步研究对于未来的加密安全至关重要.
相关概念视频
Maxam-Gilbert Sequencing
11.1K
In the same year as the discovery of the Sanger sequencing method, another group of scientists, Allan Maxam and Walter Gilbert, demonstrated their chemical-cleavage method for DNA sequencing. The Maxam-Gilbert method relies on using different chemicals that can cleave the DNA sequence at specific sites, the separation of resulting DNA fragments of variable size using electrophoresis, and deciphering the DNA sequence from the resulting gel bands.
Challenges of the Maxam-Gilbert Method
The...
Challenges of the Maxam-Gilbert Method
The...
11.1K
Trial and Error and Algorithm
103
A problem-solving strategy is a plan of action used to find a solution. Different strategies have distinct action plans. Trial and error involves trying different solutions until one works. For instance, to fix a broken printer, you might check ink levels, ensure the paper tray isn't jammed, and verify the printer's connection to your laptop. This method can be time-consuming but is commonly used. Thomas Edison, for example, used trial and error to find a suitable filament for the light...
103
Extraction: Advanced Methods
432
Metal ions can be separated from one another by complexation with organic ligands–the chelating agent– to form uncharged chelates. Here, the chelating agent must contain hydrophobic groups and behave as a weak acid, losing a proton to bind with the metal. Since most organic ligands used in this process are insoluble or undergo oxidation in the aqueous phase, the chelating agent is initially added to the organic phase and extracted into the aqueous phase. The metal-ligand complex is...
432
Weak Base Solutions
22.5K
Some compounds produce hydroxide ions when dissolved by chemically reacting with water molecules. In all cases, these compounds react only partially and so are classified as weak bases. These types of compounds are also abundant in nature and important commodities in various technologies. For example, global production of the weak base ammonia is typically well over 100 metric tons annually, being widely used as an agricultural fertilizer, a raw material for chemical synthesis of other...
22.5K
Amines to Alkenes: Hofmann Elimination
2.5K
Alkenes can be obtained from amines via an E2 elimination. The amine is first converted into a good leaving group, such as a quaternary ammonium salt. This is accomplished by treating the amine with an excess of alkyl halide, which results in a halide salt. Next, the halide salt is transformed into a hydroxide salt that functions as a base to enable elimination.
Under thermal conditions, the hydroxide can abstract a proton from the β carbon; this generates an alkene with the simultaneous...
Under thermal conditions, the hydroxide can abstract a proton from the β carbon; this generates an alkene with the simultaneous...
2.5K
Heuristics
81
Heuristics are problem-solving strategies that use mental shortcuts to simplify decision-making. Unlike algorithms, which must be followed precisely to achieve a correct result, heuristics offer a general problem-solving framework. They save time and energy but can sometimes lead to less rational decisions.
People often rely on heuristics when faced with an overload of information, limited time, low importance of the decision, limited information, or when a heuristic readily comes to mind. For...
People often rely on heuristics when faced with an overload of information, limited time, low importance of the decision, limited information, or when a heuristic readily comes to mind. For...
81


