Notes - MCS
Applied Cryptography
Notes - MCS
Applied Cryptography
  • Applied Cryptography
  • Classical (Symmetric) Cryptography
    • Terminology
    • The Players
    • Use Cases
    • Information-Theoretic Security
    • Computational Security
    • Cryptanalysis
    • Practical Approaches
    • Cryptographic Robustness
    • Ciphers
      • Mono-Alphabetic
      • Polylphabetic
    • Rotor Machines
    • Stream Ciphers
  • Modern Symmetric Cryptography
    • Types
    • Symmetric Ciphers
    • Symmetric Block Ciphers
    • Feistel Networks
    • DES (Data Encryption Standard)
    • AES (Advanced Encryption Standard)
    • Stream Ciphers
    • Uniform Random Access
    • Linear Feedback Shift Register (LFSR)
  • Cipher Modes
    • Deployment of (Symmetric) Block Ciphers
    • Stream Cipher Modes
    • Security Reinforcement
  • Cryptographic Hashing
    • Digest functions
    • Rainbow Tables
    • Message Authentication Codes (MAC)
    • Authenticated Encryption
    • Encryption + Authentication
  • RSA & Related Subjects
    • Modular Arithmetic
    • Fast Modular Multiplication
    • The Extended Euclid's Algorithm
    • Linear Maps
    • Fermat's Little Theorem
    • Chinese Remainder Theorem
    • Fermat's Little Theorem
    • Modular Exponentiation
    • Multiplicative Order
    • The Discrete Logarithm Problem
    • Primality tests
    • The Diffie-Hellman Key Exchange Protocol
    • ElGamal Public Key Cryptosystem
    • The Rivest-Shamir-Adleman Cryptosystem
    • Finite Fields
    • Elliptic Curves
    • Diffie-Hellman using elliptic curves
    • Can we do RSA-like things with elliptic curves?
    • The discrete logarithm problem for elliptic curves
    • Secret sharing
    • Quadratic Residues
    • Zero-Knowledge proofs
      • One of two oblivious transfer
      • Coin flipping
      • Zero-knowledge proofs of identity
    • Homomorphic encryption
  • Asymmetric Key Management
    • Design Principles
    • Exploitation of private keys
    • Distribution of public keys
    • Public key (digital) certificates
    • Key pair usage
    • Certification Authorities (CA)
    • Certification Hierarchies
    • Refreshing of asymmetric key pairs
    • Certificate revocation lists (CRL)
    • Validity of signatures
    • Distribution of public key certificates
    • Time Stamping Authority (TSA)
    • PKI (Public Key Infrastructure)
  • Digital Signatures
    • Fundamental Approach
    • Signature Schemes
    • Key Elements
    • The document to sign
    • The signature date
    • The identity of the signatory
    • Optional elements of a digital signature
    • Algorithms
    • RSA signatures
    • ASN.1 digest algorithm prefixes
    • Digital Signature Standard (DSS)
    • Blind Signatures
    • Chaum Blind Signatures
    • Qualified electronic signature
      • Signature devices
    • PKCS #11
    • Microsoft Cryptographic API (CAPI)
    • Long-Term Validation (LTV)
    • LTV Advanced Electronic Signatures (AdES)
Powered by GitBook
On this page
  • Approaches
  • Merkle-Damgård construction
  • Sponge functions
  • Common Algorithms
  1. Cryptographic Hashing

Digest functions

Last updated 1 year ago

Give a fixed-length value from a variable-length text.

  • Sort of text “fingerprint”

Produce very different values for similar texts.

  • Cryptographic one-way hash functions.

Relevant properties:

  • Preimage resistance.

    • Given a digest, it is infeasible to find an original text producing it.

  • 2nd-preimage resistance.

    • Given a text, it is infeasible to find another one with the same digest.

  • Collision resistance.

    • It is infeasible to find any two texts with the same digest.

  • Birthday paradox.

Approaches

Merkle-Damgård construction

  • Iterative compression.

  • Collision-resistent, one-way compression functions.

  • Length padding (1, followed by zeros, followed by length).

Sponge functions

  • Absorption: update a finite internal state (entropy pool) from a variable-length, padded input stream.

  • Squeezing: produce an arbitrary-length output from the internal state.

Common Algorithms

  • MD5 (128 bits)

    • No longer secure! It’s easy to find collisions!

    • Disclaimer: it can be used when collisions are not an issue.

  • SHA-1 (Secure Hash Algorithm, 160 bits)

    • Also no longer secure ... (collisions found in 2017).

  • RIPEMD (128 and 160)

  • SHA-2, aka SHA-256 / SHA-348 / SHA-512

  • SHA-3 (Keccak)