Index

access control list (ACL)

accumulator

events

pools

randomness

ACL. See access control list

addition

bitwise

modular

modulo

without carry

AddRandomEvent

add-with-carry, CPU

Adelman, Leonard

administrators

Advanced Encryption Standard (AES)

initialization

128-bit

randomness generator

rounds

RSA

S-box

testing

adversarial setting

failure rate

AES. See Advanced Encryption Standard

algorithms

binary

distinguishers

efficiency

extended Euclidian algorithm

Kerckhoff's principle

primes

public keys

secure channel

wooping

Anderson, Ross

Applied Cryptography (Schneier)

The Art of Computer Programming (Knuth)

ASN.1

assertions

asymmetric key, encryption

ATM, PIN code

atomicity, file system updates

attack tree

attacks. See also specific attack types

block ciphers

entropy

hash functions

MAC

plaintext

quantum physics

RSA

steps

authentication. See also message authentication code

clock

conventions

encryption

GMAC

key negotiation

MAC

message order

messages

protocols

public key

secret keys

secure channel

session keys

symmetric keys

authorization, PKI

backups, VMs

banks

credit card organization

Biham, Eli

binary algorithm

biometrics

birthday attacks

hash functions

HMAC

meet-in-the-middle attacks

bitslice implementation

bitwise addition

blind signatures

block cipher mode

ciphertext c

padding

block ciphers

attacks

chosen-plaintext attack

ciphertext c

ciphertext-only attack

generic attacks

GMAC

hash functions

ideal

interface

Kerckhoff's principle

128-bit

permutations

plaintext

rounds

secret keys

testing

256-bit

Boojum

Bos, Jurjen

bridges

buffer overflow

C++

CA. See certificate authority

cache

CPU

secrets

Carmichael numbers

CBC. See cipher block chaining

CCM

CEN. See European Committee for Standardization

certificate(s)

credential systems

multilevel

PKI

self-certifying

SSL

certificate authority (CA)

banks

fast expiration

liability

PKI

root key

trust

certificate chain

certificate revocation list (CRL)

key servers

Chaum, David

checks. See testing

Chinese Remainder Theorem (CRT)

complexity

exponentiations

multiplication

signatures

chosen-ciphertext attack

chosen-key attack

chosen-plaintext attack

block ciphers

distinguishers

cipher block chaining (CBC)

information leakage

MAC

ciphertext c

block cipher mode

block ciphers

plaintext

ciphertext-only attack

block ciphers

distinguishers

clock

authentication

counters

expiration time

monotonicity

PKI

real-time clock chip

real-time transactions

security

setting back

setting forward

stopping

time

time synchronization

unique value

CMAC

code quality

The Codebreakers (Kahn)

collision(s)

chances of

hash functions

collision attacks

stream cipher

collision resistance

complexity

CRT

protocols

security

test-and-fix

composites

constant-time operations

conventions, authentication

correct programs

test-and-fix

counter IV

counter mode (CTR)

encryption

GMAC

information leakage

counters

clock

same-state problem

CPU

add-with-carry

cache

hash functions

multiplication

registers

secrets

credential systems

delegation

PKI

credit card(s)

digital signature

PIN code

SET

viruses

credit card organization, banks

CRL. See certificate revocation list

CRT. See Chinese Remainder Theorem

Crypto-Gram

CTR. See counter mode

current events

CWC

Data Encryption Standard (DES)

exhaustive search attack

56-bits

rounds

64-bit

data integrity

data-dependent rotation

DataEncryption Standard (DES)

Davies-Meyer hash function

debuggers

decryption

RSA

decryptRandomKeyWithRSA

defense in depth

delegation, credential systems

denial-of-service attack (DOS)

DES. See Data Encryption Standard

detection, security

DH. See Diffie-Hellman key exchange protocol

dictionary attack

offline

passwords

Diffie, Whitfield

Diffie-Hellman key exchange protocol (DH)

collision attacks

groups

information leakage

man-in-the-middle attack

pitfalls

public keys

safe primes

Station-to-Station protocol

subgroups

testing

digest

digital rights management (DRM)

digital signature

credit cards

public key

public keys

RSA

SET

Dijkstra, Edsger

direct authorization

discrete logarithm (DL)

distinguishers

algorithms

chosen-plaintext attack

ciphertext-only attack

known-plaintext attack

distinguishing attack

divisibility, primes

DL. See discrete logarithm

Document Template Definition (DTD)

DOS. See denial-of-service attack

DRAM. See Dynamic RAM

DRM. See digital rights management

DTD. See Document Template Definition

Dynamic RAM (DRAM)

EC. See error-correcting code memory

ECB. See electronic cookbook

EEPROM

efficiency

algorithms

public keys

safe primes

Einstein-Podolsky-Rosen paradox

Electrical and Electronics Engineers (IEEE)

electronic banking

electronic cookbook (ECB)

information leakage

electronic payment systems

encryption

asymmetric key

authentication

CTR

MAC

public keys

RSA

secret keys

secure channel

storage

symmetric keys

encryptRandomKeyWithRSA

entropy

attacks

keystrokes

mouse movements

passwords

pools

sources of

EPROM

Eratosthenes

error-correcting code memory (ECC)

errors

large integer arithmetic

PIN code

protocols

timing attacks

wooping

ethics, trust

Euclid

extended Euclidian algorithm

European Committee for Standardization (CEN)

even permutations

ideal block ciphers

events

accumulator

pools

randomness

evolving systems, security

exception handling

exclusive-or operation (XOR)

MAC

memory

modulo 2

storage

stream cipher

execution states, protocols

exhaustive search attack

DES

hash functions

expiration time

certificates

clock

keys

public keys

exponentiations

CRT

extended Euclidean algorithm

extendedGCD

RSA

failure rate, adversarial setting

fast expiration, CA

FEAL

Feistel construction

Twofish

Ferguson, Niels

Fermat test

56-bits, DES

file system updates, atomicity

finally

fingerprint

fingerprint scanners

finite fields

firewall, LAN

512-bit

fixed IV

floating point registers

Fortuna

forward secrets

Foundations of Cryptography (Goldreich)

functional specification

fundamental theorem of arithmetic

garbage collection

Garner's formula

GCD. See greatest common divisor

GCM

GMAC

GenerateBlocks

GenerateLargePrime

generateRSAKey

generateRSAPrime

generator. See also pseudorandom number generators; random number generators

pools

randomness

reseeds

speed

generic attacks

block ciphers

hash functions

GMAC

authentication

GCM

interface

Goldbach conjecture

Goldreich, Oded

greatest common divisor (GCD)

groups

Gutmann, Peter

Handbook of Applied Cryptography (Menezes, van Oorschot, and Vanstone)

hard drive, secrets

hash functions

attacks

birthday attacks

block ciphers

collisions

CPU

exhaustive search attack

generic attacks

ideal

iterative

length extension bug

NIST

partial-message collision

pools

random mapping

security

testing

universal

weaknesses

Hellman, Martin

HMAC

birthday attacks

iterative hash functions

key recovery attacks

SHA-1

Horton Principle

message identifiers

Housley, Russ

human memory

passwords

secrets

iButton

IDEA

side-channel attacks

ideals

block ciphers

hash functions

MAC

identifiers

messages

protocols

IEEE. See Electrical and Electronics Engineers

IETF. See Internet Engineering Task Force

IKE. See Internet Key Exchange

implementation

design

incentive, protocols

indirect authorization

information leakage

initialization

AES

secure channel

SSL

initialization vector

InitializeGenerator

InitializePRNG

InitializeSecureChannel

insiders

instance identifiers, protocols

interface

block ciphers

GMAC

International Organization for Standardization (ISO)

Internet Engineering Task Force (IETF)

Internet Key Exchange (IKE)

Introduction to Modern Cryptography (Katz and Lindell)

IPsec

message order

iris scanners

ISO. See International Organization for Standardization

ISO 9001

isPrime

iterative hash functions

HMAC

Java

Kahn, David

Katz, Jonathan

Kelsey, John

Kerberos

Kerckhoff's principle

algorithms

block ciphers

key(s). See also specific key types

compromise of

expiration time

key servers

phases of

secure channel

64-bit

key negotiation

authentication

passwords

secret keys

key recovery attacks, HMAC

key servers

CRL

keys

PKI

rekeying

secure channel

keystrokes

entropy

randomness

known-plaintext attack

distinguishers

Knuth, Donald E.

Kohno, Tadayoshi

LAN, firewall

large integer arithmetic

errors

side-channel attacks

wooping

law, trust

LCM. See least common multiple

least common multiple (LCM)

Legendre symbol

length extension bug, hash functions

liability

VeriSign

Lindell, Yehuda

local time

long-term card key

MAC. See message authentication code

MAD. See Mutually Assured Destruction

man-in-the-middle attack, DH

MARS

side-channel attacks

mathematics

RSA

MD4

MD5

meet-in-the-middle attacks

birthday attacks

memory

human

secrets

XOR

memset

Menezes, A.J.

message authentication code (MAC)

attacks

authentication

CBC

data integrity

encryption

ideal

meet-in-the-middle attacks

passwords

random mapping

security