參考資料

課程教材

• N. K. Nguyen, E. W. Postlethwaite, 6CCS3CIS Cryptography, second lecture, King’s College London, 9 October 2025.

• E. W. Postlethwaite, Problem Set 2, 6CCS3CIS Cryptography, 6 October 2025.

課本與延伸閱讀

• J. Katz, Y. Lindell, Introduction to Modern Cryptography, 3rd ed., CRC Press, 2021. 本週對應：§1.3（Kerckhoffs 原則與三個理由）、§3.1（計算安全、PPT、negligible，定義 3.4）、§3.2.1（IND-EAV 與語意安全，定理 3.13）、§3.4.2（IND-CPA）、§4.2（EUF-CMA、強不可偽造）、§5.1.2（IND-CCA）。

• M. Rosulek, The Joy of Cryptography, 2021（免費線上）。第 1–2 章：加密語法、Kerckhoffs 原則、不可區分性的「函式庫」觀點。https://joyofcryptography.com

• D. Stinson, M. Paterson, Cryptography: Theory and Practice, 4th ed., CRC Press, 2018. §3.5（Shannon 理論、唯一解距離、偽金鑰）。

• C. E. Shannon, “Communication Theory of Secrecy Systems”, Bell System Technical Journal 28(4), 1949, pp. 656–715.（完美保密、唯一解距離、「the enemy knows the system」）

Kerckhoffs 原則

• A. Kerckhoffs, “La cryptographie militaire”, Journal des sciences militaires, vol. IX, pp. 5–38 (Jan. 1883), pp. 161–191 (Feb. 1883). 掃描與英譯：F. Petitcolas, https://petitcolas.net/kerckhoffs/

• J.-C. Caraco, R. Géraud-Stewart, D. Naccache, “Kerckhoffs’ Legacy”, IACR ePrint 2020/556.

• J. H. Saltzer, M. D. Schroeder, “The Protection of Information in Computer Systems”, Proc. IEEE 63(9), 1975.（「開放設計」原則）

Problem 3 (iv) 的案例原始文獻

• F. D. Garcia, G. de Koning Gans, R. Muijrers, P. van Rossum, R. Verdult, R. Wichers Schreur, B. Jacobs, “Dismantling MIFARE Classic”, ESORICS 2008, LNCS 5283.
  https://sos.cs.ru.nl/applications/rfid/2008-esorics.pdf

• K. Nohl, D. Evans, Starbug, H. Plötz, “Reverse-Engineering a Cryptographic RFID Tag”, USENIX Security 2008.

• Rechtbank Arnhem, kort geding vonnis LJN BD7578, 18 juli 2008（NXP v. Radboud Universiteit）。

• M. Briceno, I. Goldberg, D. Wagner, “GSM Cloning”, ISAAC, UC Berkeley, April 1998. http://www.isaac.cs.berkeley.edu/isaac/gsm.html

• E. Barkan, E. Biham, N. Keller, “Instant Ciphertext-Only Cryptanalysis of GSM Encrypted Communication”, CRYPTO 2003; J. Cryptology 21, 2008.

• A. Biryukov, A. Shamir, D. Wagner, “Real Time Cryptanalysis of A5/1 on a PC”, FSE 2000.

• S. Indesteege, N. Keller, O. Dunkelman, E. Biham, B. Preneel, “A Practical Attack on KeeLoq”, EUROCRYPT 2008.

• C. Meijer, W. Bokslag, J. Wetzels, “All cops are broadcasting: TETRA under scrutiny”, USENIX Security 2023.
  https://www.usenix.org/system/files/usenixsecurity23-meijer.pdf
  TETRA:BURST 專案網站：https://tetraburst.com

• J. von zur Gathen, “Zimmermann Telegram: The Original Draft”, Cryptologia 31(1), 2007.

• W. F. Friedman, C. J. Mendelsohn, The Zimmermann Telegram of January 16, 1917 and its Cryptographic Background, War Department, 1938（NSA 解密文件）。

Problem 2 使用的資料

• macOS 內建字典 （Webster’s Second International, 1934；約 23.5 萬字）。

• 常用字表：J. Kaufman, google-10000-english（取自 Google Trillion Word Corpus），GitHub。