Security - News

Teoretický p?ísp?vek ukazující, že naše p?edstavy o bezpe?nosti a jejím modelování jsou velmi nedokonalé.

Abstract. A cryptographic primitive or a security mechanism can be specified in a variety of ways, such as a condition involving a game against an attacker, construction of an ideal functionality, or a list of properties that must hold in the face of attack. One reason that an ideal functionality is appealing is that if an implementation cannot be distinguished from an ideal functionality, by any feasible attack in any environment, then the mechanism is therefore secure in any larger system that uses it. We make accepted aspects of ideal functionality precise by relating ideal functionality to game specifications, and show that bit commitment, group signatures, and other cryptographic concepts do not have any realizable ideal functionality. This suggests that in order to develop composable security conditions, either alternative notions of ideal functionality must be developed, or another specification method must be used.

Autor: VK

Heuristické vyhledání souvisejících článků v archívu NEWS

• ?eská implementace MIX network (eternity routing mechanism)
• Vydána ISO/IEC 18028-2 - IT network security -- Part 2: Network security architecture
• SNARF attack and Bluetooth
• Chyba v Cisco routerech umož?uje DoS attack
• Útok muže uprost?ed (man in the middle attack) na DNS