9
6.857 Computer and Network Security Lecture 4 Admin: Problem Set #1 due in Lecture 6. Problem Set #2 out Lecture 6. (new groups for Problem Set #2) Project Idea: AEG: Automatic Exploit Generation CACM 2/14 p.74-84 Discuss: (The Tech) Tidbit students/letter/MIT legal aid 2/18/14 Today: Cryptographic hash functions definitions random oracle model desirable properties applications Keccak (SHA-3) overview 1

Network and Computer Security, Lecture 4 · 6.857 Computer and Network Security Lecture 4 Admin: Problem Set #1 due in Lecture 6. Problem Set #2 out Lecture 6. (new groups for Problem

Embed Size (px)

Citation preview

6.857 Computer and Network Security Lecture 4

Admin: Problem Set #1 due in Lecture 6. Problem Set #2 out Lecture 6. (new groups for Problem Set #2)

Project Idea: AEG: Automatic Exploit Generation CACM 2/14 p.74-84

Discuss: (The Tech) Tidbit students/letter/MIT legal aid 2/18/14

Today: Cryptographic hash functions definitions random oracle model desirable properties applications Keccak (SHA-3) overview

1

_______

___

__

_____

____

--

__

--

--

r

— a

w’ 3

— —

I.

—--

.—-—

-——

——

—.-

--

Il

-

-K

S

n—

,At.

_

£

‘a

Re

I I

_

—— —

I——

—-trJ _'_·1 ,f l ­ <­ilL

1z .

j.

—__,_

I_I

11

::J:z::clz::IA

::: I:

r

0 -t-...

fl4

. .

r’”t

I--—

. .

‘a I

2

2 •

•:._

s 0

.

-r

H?

f •

. -, t I

.1-- 1

.

I-—

..

r

I.

——

-——

--—

a—

.—-—

——

——

r

I

!:

C

.- -

I 1

t-1 : ­

1‘

a’

h.

1,1

1

i-a

J . -

3U

. fl *---

-w-1

-rL

41

.

‘a—,

‘S.

I.

*•S

4 4’ s-

ir-

-t

-—

—-

its

;

kI

rts

Y

—--

ft--r

k-f

-t

t

s_

_

-

t.‘I’

r ‘••

——

AL

ii-:

t ‘

1;1_",

-

,,

f r

4

3 t

r

:r:

_._. --[-r

LL

t

-

nI

r

—_

__

#

1----·-

+ •'-! - r·'-~1 ~ ~

-

-f--

k$JrO

flL

Jxt

_44

_t

L~ 1 i"1~ '1"1' ~It—

H-w

.Jj

I ~O _~ + . ~SG J r-­

.-*_

_

:4

51 ; ~ )"' i38~J S ').

T- -+-t- I .-+-+ -+- --- I

j

Rl? J_

L_

LR

_

t

;

1

a

-1

LL

,

2

I

l'OP1C - -'-'_~_~~~~~~. AA ,. ~.~. ­

'fi..,,"E_·UN_DE_O­

1JJ(JNI} liii,

) :DATt" - - -- - - . ) -...J ,-,____--!l

- - )

L*:ZZZZZ rzz

r

-

!44q [:I!’1? K

!ø’i 7

iwvd -I’t” jw) 4i

S31 d)Vd F

_._-~~_________~'_.....Jl ["AGF Ul.'0

" 1

1 I

, I

,1 -- ~ -,+-t--t-

~ -1 +1--I-I:--+-'~ J_ ' -_........

-t ..

-

-,

r

-l t

1 I~

1-1 '

~ + I - 1- i I- ' J

-I-.

+--,

, ---, "J,

"l

,

r---

L...J

3

------

— — —

I

-------—

i

a

Ld4Y2j-

-__

dJGNfl 311J

‘V C)1 a

I’ aml EI E 7_41 WI

“L 044 H -

4!

:4

-tt Siu:

f,71

a

-“1 V

I

F----- Il f- j +1- f ,

" -

.-

f-L --11+: f-.

tf-. ­

1 -tfI !

I

if

-

H--

—— I-— —

---I-+--+-+i -f-J ~ t~.~ 1­1>->--­

I I :zz:z::zzz::zizzzz -t~ ~~...- ..-_. -f--+-+-+ --L__ .. - ­Ile- -' , ~+- --~- :--j j

J . L-- _ L l--L....L...L ~-- ---- -1

4

--

%j

$1

.,c

L

f->

S

0’

1 ‘C

S0

A

-‘

.5-

‘C

‘4

-—

C

-

p

0

H-P

2

: Is’

zLj*

r ‘C

t

7

0•

U0

5

—ji

rn.

C 2

E

tfl-

-r

a

--

-

—-r

t

- -C

—a

Ii--

[?1 b.

—a-

s-t

J__L

__2

a-rn

h çJ

I a

e

F’

—p

S w

I I

• ‘

—,

-

,.

0

*E $-

3 1

4 _j-t::

4--

a

--J!i

z*

.-.

-M--

---

a’-

9-

i:;-[ a

r .2

fl

..

e

——

b

K!

0

4

tEE

T.-----.--

—.

io

-i--

Tir

.4

, S

(-.-

--

_JL

.. Z

L‘—

H

—i-

--_

CL

.

,----—

-———

i—

rivest
Callout
Actually, the correct definition is that is hard for an adversary, given y=h(x) (where x was picked uniformly at random from {0,1}^n) to find any x' such that h(x')=y.

1

c.

4a.6 4

[“I

S%jj -— —

— 4.

C

I

r-.

I

L __

.w————

4aRgtb,4 IJ ZEEEEi[!*w!v

- +--+-+-1 --- I

. ‘4+”° 4—O4

1j ZZJZasa

4!_jIkA )&%

tS-14Z

I t rr ‘Ic —.—

I

t” 11w .! I$

a,.

‘U’! -

a I’

HE s ZL E5’ii4di

.44.’,,. t“xa£

er —fri.nc

R1

-—

fit IMS rrr j’?’4

6

-

fl:

_____-_'_-'___-_1 TOPiC lDArT - - - --I

'PAGE -L <i. j• L.

l,-fllf_UN_DE_lf_~____

___

_____

__

_ _

_ _ _ _

c

i

I I

U

i..._i EEEE[

I.

S

--S

—I

1--‘C

K

F

C

1 0

CC

I 2

a I

-SC

aS

:E:jJz;1L

z

-S

5-‘I

ri

-

U

I ‘1

IL-D

r '

~ t-­

‘Lt!r

n.j 11

Lia-

2

,W '1'li·1 ,.\\Mi.. lrlrs..~+J I( "YI fto E~~

~ cJtpi ­~1~~- L'. --_.J.~ o~ nf

r:-; _ 0IM ~~ , >c 4t”\ -~ ~,,~ ~ ,-w-- 1+-i I

£ S

- ~ , . j. tI

is FIf!'- t"~ ~~ ~-~W'lI:h>f"""~_ t -

aw

-s

J ~~~r-- t;1 \ a‘I

i

I

. I

LIZ

-~;".t ~~"" .,.100 ~J "'" It "'Jo~'"

E5L

IIEI t

Ljat_

0I-

.. ­I. '­ ~..I! ~- 4

tc.

i~.. ,~'X -I. .

: 'I \C. —~ , i'of-:-I --. _c" )!i.

l

" .. . ~~'~ -.ivl!~

rr

S i. +1",«

l ~ i-i\l.d . ." ==_ - ~i -~Jf ~ -' .:-:­(:) '." r r

r, .. I _

t­- ~ -+ - ­

+ r -I- + '--' ' ~-- . j~\".~1] f­

'~=r14Jft iF"· t t"\ ‘e

~ .~ j~hc!~, I IJ ~ , ~

t -r ,jit

2

i IJ J-l 1<.

-‘7-------

~ f-f~

a — I4

;.4

4J

3

1.01 , . Ir +'1 -L ),\ I I -+ ~ I~ I ~ t

i

LT

Y[1

- r

.. - . I ~t l~ IlL •

e 0a

~~t ,.:>1'1 tfl-t

.5

i%

_t

i4:i

n

A.!."·\~J-!h:/"tc) D~ _. ...L

II

f-b?-

,

i'

I - "

I-~ ,-~ -~\, fI ... '~ _I -c~.. it—

I ~4l , o_

1_ ,I fI ht

‘*:4

,I-,

j _ . , -; _

-

7

I

4a C

74 --4-

I -o

1H

‘S

I

_fli_*___

"

.w It

t

-— E

J21

-

j '- ­

-t ~ t I it

I1--+-+-' J

_J'

I-:

i ­ -' t·-_t. +-+----t. ,...Lc _ . .L. -_L _

7

__

__

__

__

_

--

---

--

I

—--—

.—

—,

I

--

1___ • C

.

:jZ

zz*

1___L

__f___

-—

-%

ZJZE

frZf

ZIZZ

EE*t

ZFt”

i::r

itzi

:::J

_ti

zr n .b ,

• w*

L

‘b S

or

,S

5çej

C o

t_r

_c:

• t.

..*_!_

-r_4tJ_

,—

WlfL

tt:: i

z:1F

::a-

c-

I I

I,

1 ,I. ,

I

r

0 a

t1.

W%

t

fl-a.,

itt

ci.

——

1

b r

fl1T

-

r —

4•r-

-‘r--1

--

t’(C

fl

2--.

H....

K.

.0

0 -p p

I -I

r n 7

— :

—r

,

—t-.

11

1 Is-‘a I’

d

£ —

-< -

---4--

-

-tas

m

Cl

-

S 0 rr

‘I

—S

Ii

6 •1-

I

I

5-

r S

a (I

T

--zE

:zz:

I

C-

b a

S I’

4 1W

IF!

ii

---

C a r

I U

L-____~-I :_fllE_UN_DE_"_______________

>- .i_ - ------1 t f· - ­

-j - --i - -- -. , -r- +--i-l---+--+--+ +-1-+-1---+ --1- ..I -+--+--+--1-+ +--+-+--1­, --+-­ - -+--t-­

-;--~

I_T~_·~____________________M ____________~~-t. ,1DA_~-_-~_-__l '­

=~_--,Ii~PA_Gf...;!"=-Cf.J,..;.~5~,.__...!I-

-

!- ­ : -,I i

8

MIT OpenCourseWarehttp://ocw.mit.edu

����� 1HWZRUN�DQG�&RPSXWHU�6HFXULW\Spring 2014

For information about citing these materials or our Terms of Use, visit: http://ocw.mit.edu/terms.