Lecture Notes in Computer Science Edited by G. Goos, J. Hartmanis and J. van Leeuwen

Transcription

1 Lecture Notes in Computer Science 1528 Edited by G. Goos, J. Hartmanis and J. van Leeuwen

2 3 Berlin Heidelberg New York Barcelona Hong Kong London Milan Paris Singapore Tokyo

3 Bart Preneel Vincent Rijmen (Eds.) State of the Art in Applied Cryptography Course on Computer Security and Industrial Cryptography Leuven, Belgium, June 3-6, 1997 Revised Lectures 13

4 Series Editors Gerhard Goos, Karlsruhe University, Germany Juris Hartmanis, Cornell University, NY, USA Jan van Leeuwen, Utrecht University, The Netherlands Volume Editors Bart Preneel Vincent Rijmen Katholieke Universiteit Leuven Dept. of Elektrotechniek/ESAT K. Mercierlaan 94, B-3001 Heverlee, Belgium Cataloging-in-Publication data applied for Die Deutsche Bibliothek - CIP-Einheitsaufnahme State of the art in applied cryptography : revised lectures / Course on Computer Security and Industrial Cryptography, Leuven, Belgium, June 3-6, Bart Preneel (ed.). - Berlin ; Heidelberg ; New York ; Barcelona ; Hong Kong ; London ; Milan ; Paris ; Singapore ; Tokyo : Springer, 1998 (Lecture notes in computer science ; Vol. 1528) ISBN CR Subject Classification (1998): E.3, D.4.6, K.6.5, F.2.1-2, C.2, J.1 ISSN ISBN Springer-Verlag Berlin Heidelberg New York This work is subject to copyright. All rights are reserved, whether the whole or part of the material is concerned, specifically the rights of translation, reprinting, re-use of illustrations, recitation, broadcasting, reproduction on microfilms or in any other way, and storage in data banks. Duplication of this publication or parts thereof is permitted only under the provisions of the German Copyright Law of September 9, 1965, in its current version, and permission for use must always be obtained from Springer-Verlag. Violations are liable for prosecution under the German Copyright Law. c Springer-Verlag Berlin Heidelberg 1998 Printed in Germany Typesetting: Camera-ready by author SPIN / Printed on acid-freepaper

5 Preface The Department of Electrical Engineering-ESAT at the Katholieke Universiteit Leuven regularly runs a course on the state of the art and evolution of computer security and industrial cryptography. The first course took place in 1983, the second in 1989, and since then the course has been a biennial event. The course is intended for both researchers and practitioners from industry and government. It covers the basic principles as well as the most recent developments. Our own interests mean that the course emphasizes cryptography, but we also ensure that the most important topics in computer security are covered. We try to strike a good balance between basic theory and real-life applications, between mathematical background and judicial aspects, and between recent technical developments and standardization issues. Perhaps the greatest strength of the course is the creation of an environment that enables dialogue between people from diverse professions and backgrounds. In 1993, we published the formal proceedings of the course in the Lecture Notes in Computer Science series (Volume 741). Since the field of cryptography has advanced considerably during the interim period, there is a clear need to publish a new edition. Since 1993, several excellent textbooks and handbooks on cryptology have been published and the need for introductory-level papers has decreased. The growth of the main conferences in cryptology (Eurocrypt, Crypto, and Asiacrypt) shows that interest in the field is increasing. In addition, new conferences have emerged (such as Fast Software Encryption and Information Hiding) which illustrate the expansion of the research. These conferences offer ample opportunity to present new research results. However, there is still a need for papers presenting an overview of the state of the art in areas that are particularly important for applications, or papers introducing novel areas or applications. We believe that the authors of this volume have done an excellent job in explaining recent developments in a wide range of topics within this exciting area. We thank them for their considerable efforts. We also acknowledge the assistance of all members of our research group COSIC (Computer Security and Industrial Cryptography) in the preparation and running of another successful course. Finally, we would like to dedicate this book to the memory of Rita De Wolf, who did an outstanding job in organizing our courses, but who was also a valuable friend and colleague. Leuven, Belgium 1998 B. Preneel and V. Rijmen

6 Table of Contents Trends in the Fight Against Computer-Related Delinquency... 1 Bart De Schutter Block Ciphers A Survey Lars R. Knudsen Cryptographic Primitives for Information Authentication State of the Art Bart Preneel Recent Developments in the Design of Conventional Cryptographic Algorithms Bart Preneel, Vincent Rijmen, Antoon Bosselaers Elliptic Curve Public-Key Cryptosystems An Introduction Erik De Win, Bart Preneel Key Management Techniques Walter Fumy Security of Computer Networks Jan Verschuren Internet Security Protocols Walter Fumy Securing Internet Electronic Mail Mark Vandenwauver, Frank Jorissen GSM: Security, Services and the SIM Klaus Vedder TTPs Overview Concepts and Review of the State of the Art from a Technical Point of View Peter Landrock Management of Secret Keys: Dynamic Key Handling Joan Daemen On Solutions to the Key Escrow Problem Mark P Hoyle, Chris J. Mitchell Smart Cards Requirements, Properties and Applications Klaus Vedder, Franz Weikmann

7 VIII Table of Contents Smart Card Security Ernst Bovenlander Security Aspects of the Ecash TM Payment System Berry Schoenmakers International Standardisation of IT Security Klaus Vedder Security Management The Process David W. Roberts Introduction to Computer Security Bart De Decker Author Index...395