Classes: Tuesdays and Thursdays 9:20 - 11:10 hrs
References:
1) A Graduate Text in Applied Cryptography, Dan Boneh and Victor Shoup [BS]
2)Cryptography: Theory and Practice, Douglas R. Stinson [DRS]
3) Introduction to Modern Cryptography: Jonathan Katz and Yehuda Lindell [JKYL]
Grading: End Term: 50, Mid Term: 30, Assignments/ClassTest:20
Some previous years questions: Mid-term 2016, End-Term 2016, Mid-Term 2017, End-Term 2017
Few practice problems (have overlap with previous years questions)
Class 01 (Jul 21): Introduction: Confidentiality and Integrity. Adversarial goals and resources.
Class 02 (Jul 23): Classical Ciphers and their cryptanalysis: Shift Cipher, Affine Cipher, Substitution Cipher, Vigenere Cipher, Permutation Cipher [read DRS, Chapter 1]
Class 03 (Jul 28): Perfect Secrecy and Shanon's Theorem [ read Chapter 2 of BS]
Class 04 (Jul 30): Limitation of perfect security. Semantic security. Message recovery attack. Relation between security notions [read 2.2.2, 2.2.3 of BS]
Class 05 (Aug 04): SS* security. Several examples related to semantic security [ read 2.2.3 and 2.2.5 of BS]
Class 06 (Aug 06): Pseudorandom Generators, Stream Ciphers [read 3.1, 3.2, 3.3 of BS]
Class 07 (Aug 11): Sequential and Parallel composition of PRGs. PRGs and unpredictability. [Read 3.4.1, 3.4.2, 3.5 of BS]
Class 08 (Aug 13): RC4 stream cipher. Attacks on RC4 [Read 3.9 of BS]
Class 09 (Aug 18): Pseudorandom Functions, Pseudorandom permutations and strong pseudorandom permutations [Read Class Notes]
Class 10 (Aug 20): Semantically secure ciphers from PRFs. Notion of CPA secure encryption schemes [Read Class Notes]
Class 11 (Aug 25): Difference Lemma. The PRF/PRP switching lemma, IND-CPA and IND$ notion of security, the randomized CTR mode. [Read Class notes]
Class 12 (Aug 17): Overview of block ciphers: DES and AES. Block cipher modes of operations (ECB, CBC, CTR, OFB, CFB) [Read class notes and 3.7 of DRS]
Class 13 (Sep 01): Description of DES. Exhaustive key search on DES and variants. [Read 4.2.1, 4.2.2, 4.2.3 of BS]
Class 14 (Sep 03): Revision and some problem solving
Class 15 (Sep 15): A brief introduction to Finite Fields; Description of AES. [Read Class Notes and Section 4.2.4 of BS]
Class 16 (Sep 17): Revision of IND-CPA, IND$ notions of security. Security proof of randomized counter mode. [Read Class notes and this write-up]
Class 17 (Sep 22): The problem of authentication. Syntax and security of message authentication codes. PRFs are good MACs.[Read class notes]
Class 19 (Sep 24): Almost universal and Almost XoR universal hash functions (AU, AXU). Read class notes]
Class 20 (Oct 29): Polynomial MACs. Carter Wegman paradigm for constructing MACs. Nonces and nonce based schemes for encryption and authentication. .[Read class notes]
Class 21 (Oct 01): Composing AU hash functions and PRFs to get secure MACs. Prefix free encodings and CBC MACs. .[Read class notes]
Class 22 ( Oct 06): CMAC and PMAC, Brief discussion about side channel attacks. An example of timing attack [Read class notes and 6.10, 6.11 of BS]
Class 23 (Oct 08): Introduction to AE schemes. Generic Composition. [Read class notes]
Class 24 (Oct 13): AE and AEAD schemes, GCM. Intro to tweakable enciphering schemes. [Read class notes and 9.7 of BS ]
Class 25 (Oct 27): Collision resistant hashing. The Random Oracle model. Finding collisions in the Random Oracle Model. Merkle Damgard construction [Read 4.2 of DRS, 8.4 of BS]
Class 26 (Nov 29): Compression functions: The Davis Meyer construction. MACs based on collision resistant hash. The Diffie Helman Key exchange. Discrete Log, Computational Diffie Hellman and Decision Diffie Hellman problems. [ Read 8.5.2, 8.7.2, 10.1, 10.4, 10.5 of BS]
Class 27 (Nov 03): Trapdoor functions and permutations. Public key encryption. Public key encryption from trapdoor schemes. The RSA trapdoor permutation.[Read class notes and 10.2 10.3, 11.1. 11.2, 11.3, 11.4 of BS]
Class 28 (Nov 05): El Gamal Encryption Scheme. Signature schemes and their security. Constructing signature schemes from trapdoor permutations. Algorithms to for exponentiation. Primality testing: Miller Rabin Test. [Read class notes and 11.5, 13.1, 13.3 of BS and 5.4.3 of DRS]
Class 29 (Nov 07): Class test