关于TLS 1.3安全性和效率与CPA-Secure KEMs混合密钥交换的握手
Jinrong Chen1, Wei Peng1, Yi Wang1
1College of Computer Science and Technology, National University of Defense Technology, Changsha 410073, China.
Entropy (Basel, Switzerland)
|December 24, 2025
概括
这项研究证明,CPA安全密钥封装机制 (KEM) 足以在TLS 1.3中进行混合密钥交换,即使对抗量子对手. 这一发现提高了后量子互联网通信的安全性和性能.
科学领域:
- 密码学 密码学 密码学 密码学
- 网络安全 网络安全
- 后量子密码学 后量子密码学
背景情况:
- TLS 1.3对于互联网安全至关重要.
- 混合密钥交换结合了古典和后量子方法,以实现未来的安全.
- 目前的混合TLS 1.3实现通常使用CCA安全的KEM,从而产生性能上方和侧通道风险.
研究的目的:
- 为了证明CPA安全的KEM足以用于TLS 1.3混合密钥交换.
- 提供针对量子对手的正式安全证据.
- 评估使用CPA安全KEMs的实际性能影响.
主要方法:
- 经典和量子随机预言模型中的正式安全证明.
- 使用OpenSSL实现进行了广泛的性能评估.
- 对安全影响的分析,包括侧通道攻击缓解.
主要成果:
- 已被证明,CPA安全的KEM足以用于TLS 1.3混合密钥交换.
- 关键交换层的性能提升高达44.8%,整个握手层的性能提升高达9%.
- 通过消除重新加密步骤来减少攻击表面.
结论:
- CPA安全的KEM为后量子TLS提供了一个安全,高效和实用的替代方案 1.3.
- 这种方法简化了部署,并增强了对侧通道攻击的安全性.
- 这些发现为标准化和部署更强大的后量子安全互联网通信铺平了道路.
相关概念视频
Hybridization of Atomic Orbitals II
47.5K
sp3d and sp3d 2 Hybridization
47.5K
Tail-anchoring of Proteins in the ER Membrane
3.6K
Tail-anchored, or TA, proteins are estimated to make up to 3-5% of membrane proteins found in the eukaryotic cell. Such proteins have a single transmembrane domain located approximately 30 amino acid residues upstream from the C-terminal end. As a result, the signal recognition particle (SRP) cannot guide a TA protein to the ER membrane for cotranslational insertion. Hence, they are integrated into the ER membrane post-translationally using their C-terminal end as the anchor. TA proteins...
3.6K
¹³C NMR: Distortionless Enhancement by Polarization Transfer (DEPT)
1.6K
When proton-coupled carbon-13 spectra are simplified by a broadband proton decoupling technique, structural information about the coupled protons is lost. Distortionless enhancement by polarization transfer (DEPT) is a technique that provides information on the number of hydrogens attached to each carbon in a molecule. While the DEPT experiment utilizes complex pulse sequences, the pulse delay and flip angle are specifically manipulated. The resulting signals have different phases depending on...
1.6K
SNAREs and Membrane Fusion
12.2K
Once a transport vesicle has recognized its target organelle, the vesicular membrane needs to fuse with the target membrane to unload the cargo. Transmembrane proteins called SNAREs present on organelle membranes and their vesicles, mediate vesicle fusion.
SNAREs exist in pairs that symmetrically interact and catalyze the fusion of the lipid bilayers in vesicle and target organelle. v-SNARE in the vesicle membrane are single polypeptide chains that bind to a complementary t-SNARE, composed of 2...
SNAREs exist in pairs that symmetrically interact and catalyze the fusion of the lipid bilayers in vesicle and target organelle. v-SNARE in the vesicle membrane are single polypeptide chains that bind to a complementary t-SNARE, composed of 2...
12.2K
Hybridization of Atomic Orbitals I
65.1K
The mathematical expression known as the wave function, ψ, contains information about each orbital and the wavelike properties of electrons in an isolated atom. When atoms are bound together in a molecule, the wave functions combine to produce new mathematical descriptions that have different shapes. This process of combining the wave functions for atomic orbitals is called hybridization and is mathematically accomplished by the linear combination of atomic orbitals. The new orbitals that...
65.1K
Valence Bond Theory and Hybridized Orbitals
27.3K
According to valence bond theory, a covalent bond results when: (1) an orbital on one atom overlaps an orbital on a second atom, and (2) the single electrons in each orbital combine to form an electron pair. The strength of a covalent bond depends on the extent of overlap of the orbitals involved. Maximum overlap is possible when the orbitals overlap on a direct line between the two nuclei.
A σ bond (single bond in a Lewis structure) is a covalent bond in which the electron density is...
A σ bond (single bond in a Lewis structure) is a covalent bond in which the electron density is...
27.3K


