參考資料

課程教材

• N. K. Nguyen and E. W. Postlethwaite, 6CCS3CIS Cryptography, first lecture, King’s College London, 11 September 2025（73 頁投影片）。

• E. W. Postlethwaite, Problem Set 1, 6CCS3CIS Cryptography, 29 September 2025.

教科書

• J. Katz and Y. Lindell, Introduction to Modern Cryptography, 3rd ed., CRC Press, 2021. 本週相關節次：§1.2（加密的基本設定）、§1.4（現代密碼學三原則）、第 2 章（完美保密）、§3.2（計算安全的定義）、§3.4（CPA 安全）、§4.1–4.2（訊息完整性、MAC 定義、典範驗證、強不可偽造、驗證查詢、時間攻擊）、§5.2–5.4（鑑別加密、通用組合、安全通訊 session）。

• M. Rosulek, The Joy of Cryptography, 線上草稿，https://joyofcryptography.com/。 相關章節：序言（「控制資訊存取」）、Chapter 1（Kerckhoffs 原則）、MAC 章節（以函式庫不可區分性定義不可偽造性；Encrypt-then-MAC 的 CCA 安全證明）。

原始文獻

• M. Bellare and C. Namprempre, “Authenticated Encryption: Relations among Notions and Analysis of the Generic Composition Paradigm,” ASIACRYPT 2000, LNCS 1976; 完整版 Cryptology ePrint Archive 2000/025, https://eprint.iacr.org/2000/025.

• H. Krawczyk, “The Order of Encryption and Authentication for Protecting Communications (or: How Secure Is SSL?),” CRYPTO 2001; ePrint 2001/045.

• C. Namprempre, P. Rogaway and T. Shrimpton, “Reconsidering Generic Composition,” EUROCRYPT 2014; ePrint 2014/206.

• M. Bellare, O. Goldreich and A. Mityagin, “The Power of Verification Queries in Message Authentication and Authenticated Encryption,” ePrint 2004/309.

• S. Goldwasser and S. Micali, “Probabilistic Encryption,” J. Computer and System Sciences 28(2), 1984（語意安全的原始論文）。

• C. E. Shannon, “Communication Theory of Secrecy Systems,” Bell System Technical Journal 28(4), 1949.

• A. Kerckhoffs, “La cryptographie militaire,” Journal des sciences militaires, 1883.

• M. Naveed, S. Kamara and C. V. Wright, “Inference Attacks on Property-Preserving Encrypted Databases,” ACM CCS 2015（確定性加密欄位的頻率攻擊）。

• E. Rescorla, The Transport Layer Security (TLS) Protocol Version 1.3, RFC 8446, 2018；E. Rescorla, H. Tschofenig and N. Modadugu, DTLS 1.3, RFC 9147, 2022（序號、每方向金鑰、滑動視窗反重放）。

Problem 3 指定閱讀與相關史料

• R. J. Stay, “Cryptic Controversy: U.S. Government Restrictions on Cryptography Exports and the Plight of Philip Zimmermann,” Georgia State University Law Review 13(2), Art. 14, 1997, pp. 581–604. https://readingroom.law.gsu.edu/gsulr/vol13/iss2/14

• J. C. Fromer, “Constitutional Law. Free Speech Clause. Sixth Circuit Classifies Computer Source Code as Protected Speech. Junger v. Daley, 209 F.3d 481 (6th Cir. 2000),” Harvard Law Review 114(6), 2001, pp. 1813–1818. https://doi.org/10.2307/1342657

• Junger v. Daley, 209 F.3d 481 (6th Cir. 2000); Junger v. Daley, 8 F. Supp. 2d 708 (N.D. Ohio 1998).

• S. Garfinkel, “The Continuing Investigation of Phil Zimmermann,” Wired, March 1995（1994 年 11 月杜勒斯機場攔查）。

• P. Zimmermann, PGP Source Code and Internals, MIT Press, 1995.

• 美國司法部 1996 年 1 月 11 日不起訴聲明；見 https://philzimmermann.com/EN/news/PRZ_case_dropped.html。

• B. Beurdouche et al., “A Messy State of the Union: Taming the Composite State Machines of TLS,” IEEE S&P 2015（FREAK）；D. Adrian et al., “Imperfect Forward Secrecy: How Diffie-Hellman Fails in Practice,” ACM CCS 2015（Logjam）。

歷史案例

• National Security Agency, The Battle of Midway: How Cryptology Enabled the United States to Turn the Tide in the Pacific War（「AF is short of water」）。

• S. Vaudenay, “Security Flaws Induced by CBC Padding,” EUROCRYPT 2002；D. Bleichenbacher, “Chosen Ciphertext Attacks Against Protocols Based on the RSA Encryption Standard PKCS #1,” CRYPTO 1998（解密預言機的現實性）。