Trust-by-Design – Strong Security Arguments for Symmetric Key Cryptography

Introduction

Symmetric cryptographic primitives protect a large percentage of today's data, whether in transit or storage. This trend is going to increase even more in the future. Consequently, new domain-specific ciphers are needed with significant performance benefits for areas such as memory encryption, multi-party computation, or cryptocurrencies.

Performance vs. Security

Great progress has been made regarding their performance. Less progress has been made for security arguments that seek to prove their resilience against malignant attacks. Indeed, most of the security analysis we apply for symmetric ciphers is based on false assumptions, and most attacks trying to break those ciphers are flawed.

Trust and Design Cycles

As a consequence, it takes several years to build the necessary trust in the security of any new symmetric cryptographic primitives to be deployed and used. In times of fast innovation cycles where emerging applications are in constant need for new tailored symmetric cryptographic solutions, those slow design cycles of symmetric cryptographic primitives are prohibitive and have to be shortened.

Project Goals

Within the project, I plan to enable stronger security arguments and tool-based bounds on key-recovery approaches which will accelerate the design process. This will open the path to a new design strategy of trustworthy by design ciphers and contribute to ready-to-use and highly secure symmetric cryptography suitable to satisfy the needs of future applications.

Planned Actions

To this end, I will:

• Analyze fundamental properties of symmetric cryptographic primitives, especially related to their representation.
• Derive modular security arguments.
• Develop a software-assisted approach to optimize and verify the key-recovery part of attacks.
• Design an efficient cache-encryption algorithm to exemplify the potential of the new design framework.

Expected Outcome

If successful, SymTrust will reshape the whole process of designing symmetric cryptographic ciphers to produce trustworthy by design primitives with the aim to shorten the time-to-deploy.