COMS30048: Applied Cryptology (see also GitHub repo.)

Staff

Name	Role
Dr. Daniel Page	Lecturer and Unit Director
Dr. David Bernhard	Lecturer

Material

Week	Type	Date	Content	Assignment
13 to 24			[ organisation \| notation \| revision questions and solutions ]
13	Lecture slot (synchronous)	22/01/24 QB-1.68	Unit intro. [ slides \| notes ] [ slides \| notes ]	`AttackHW` [ description ]
	Lab. slot (synchronous)	23/01/24 MVB-1.15	[ worksheet ]
	Lab. slot (synchronous)	26/01/24 MVB-1.15	[ worksheet ]

14	Lecture slot (synchronous)	29/01/24 QB-1.68	Implementation (AES) [ slides \| notes \| extended notes ]
	Lab. slot (synchronous)	30/01/24 MVB-1.15	[ worksheet ]
	Lab. slot (synchronous)	02/02/24 MVB-1.15	[ worksheet ]
	Additional resources		A.J. Menezes, P.C. van Oorschot, and S.A. Vanstone. Handbook of applied cryptography. 5th edition, CRC Press, 2001. § 2: mathematical background [ content ]. § 7: block ciphers [ content ]. C. Paar and J. Pelzl. Understanding cryptography. 1st edition, Springer, 2010. § 4: finite fields [ content \| video ]. § 4: Advanced Encryption Standard (AES) [ content \| video ]. J. Daemen and V. Rijmen. The design of Rijndael. 1st edition, Springer, 2002 [ content ]. National Institute of Standards and Technology (NIST). Federal Information Processing Standards (FIPS) 197: Advanced Encryption Standard (AES). 2023.

15	Lecture slot (synchronous)	05/02/24 QB-1.68	Implementation (RSA) [ slides \| notes ]
	Lab. slot (synchronous)	06/02/24 MVB-1.15	[ worksheet ]
	Lab. slot (synchronous)	09/02/24 MVB-1.15	[ worksheet ]
	Additional resources		A.J. Menezes, P.C. van Oorschot, and S.A. Vanstone. Handbook of applied cryptography. 5th edition, CRC Press, 2001. § 2: mathematical background [ content ]. § 8: public-key encryption [ content ]. § 14: efficient implementation [ content ]. C. Paar and J. Pelzl. Understanding cryptography. 1st edition, Springer, 2010. § 7: the RSA cryptosystem and efficient exponentiation [ content \| video ]. R.L. Rivest, A. Shamir, and L. Adleman. A method for obtaining digital signatures and public-key cryptosystems. In Communications of the ACM (CACM), 21(2), 120--126, 1978. P.L. Montgomery. Modular multiplication without trial division. In Mathematics of Computation, 44(170), 519--521, 1985. D.M. Gordon. A survey of fast exponentiation methods. In Journal of Algorithms, 27(1), 129--146, 1998.

16	Lecture slot (synchronous)	12/02/24 QB-1.68	Implementation attacks (concepts) [ slides \| notes \| extended notes ]
	Lab. slot (synchronous)	13/02/24 MVB-1.15	[ worksheet ]
	Lab. slot (synchronous)	16/02/24 MVB-1.15	[ worksheet ]
	Additional resources		S. Mangard, E. Oswald, and T. Popp. Power analysis attacks: revealing the secrets of smart cards. 1st edition, Springer, 2010. M. Joye and M. Tunstall. Fault analysis in cryptography. 1st edition, Springer, 2014.

17	Lecture slot (synchronous)	19/02/24 QB-1.68	Implementation attacks (examples) [ slides \| notes \| extended notes ]
	Lab. slot (synchronous)	20/02/24 MVB-1.15	[ worksheet ]
	Lab. slot (synchronous)	23/02/24 MVB-1.15	[ worksheet ]
	Additional resources		P.C. Kocher. Timing attacks on implementations of Diffie-Hellman, RSA, DSS, and other systems. In Advances in Cryptology (CRYPTO), Springer-Verlag, LNCS 1109, 104--113, 1996. P.C. Kocher, J. Jaffe, and B. Jun. Differential power analysis. In Advances in Cryptology (CRYPTO), Springer-Verlag, LNCS 1666, 388--397, 1999.

18	Reading week

19	Lecture slot (synchronous)	04/03/24 QB-1.68	Implementation (ECC) [ slides \| notes ]
	Lab. slot (synchronous)	05/03/24 MVB-1.15
	Lab. slot (synchronous)	08/03/24 MVB-1.15
	Additional resources		A.J. Menezes, P.C. van Oorschot, and S.A. Vanstone. Handbook of applied cryptography. 5th edition, CRC Press, 2001. § 2: mathematical background [ content ]. C. Paar and J. Pelzl. Understanding cryptography. 1st edition, Springer, 2010. § 9: elliptic curves [ content \| video ]. § 9: Elliptic Curve Cryptography (ECC) [ content \| video ]. V.S. Miller. Use of elliptic curves in cryptography. In Advances in Cryptology (CRYPTO), Springer-Verlag, LNCS 218, 417--426, 1985. N. Koblitz. Elliptic curve cryptosystems. In Mathematics of Computation, 48(117), 203--209 1987.

20	Lecture slot (synchronous)	11/03/24 QB-1.68	Implementation (RNG) [ slides \| notes ]
	Lab. slot (synchronous)	12/03/24 MVB-1.15
	Lab. slot (synchronous)	15/03/24 MVB-1.15
	Additional resources		A.J. Menezes, P.C. van Oorschot, and S.A. Vanstone. Handbook of applied cryptography. 5th edition, CRC Press, 2001. § 2: mathematical background [ content ]. § 5: pseudo-random bits and sequences [ content ].

21	Lecture slot (asynchronous)	18/03/24 QB-1.68	TLS [slides]
	Lab. slot (synchronous)	19/03/24 MVB-1.15
	Lab. slot (synchronous)	22/03/24 MVB-1.15
	Additional resources		RFC 8446: The Transport Layer Security (TLS) Protocol Version 1.3

22	Lecture slot (asynchronous)	15/04/24 QB-1.68	From Schnorr to Curve25519: implementation aspects of singature protocols and related ECC primitives (slides: work in progress)
	Lab. slot (synchronous)	16/04/24 MVB-1.15
	Lab. slot (synchronous)	19/04/24 MVB-1.15
	Additional resources		Dan Bernstein: How to design an elliptic-curve signature system Dan Bernstein: A state-of-the-art Diffie-Hellman function (on Curve25519) Bernhard, Pereira, Warinschi: How not to Prove Yourself: Pitfalls of the Fiat-Shamir Heuristic and Applications to Helios

23	Lecture slot (asynchronous)	22/04/24 QB-1.68	Authentication on the web: JWT, U2F/webauthn and friends (slides: work in progress)
	Lab. slot (synchronous)	23/04/24 MVB-1.15
	Lab. slot (synchronous)	26/04/24 MVB-1.15
	Additional resources		RFC 7515: JSON Web Signature RFC 8725: JSON Web Token Best Current Practices

24	Lecture slot (asynchronous)	29/04/24 QB-1.68	Unit outro. [ slides \| notes ]
	Lab. slot (synchronous)	30/04/24 MVB-1.15
	Lab. slot (synchronous)	03/05/24 MVB-1.15