密码应用安全专刊序言(中英文)  

Preface of Special Issue on Security Applications of Cryptography

作　　者：刘建伟 林璟锵[2] 黄欣沂 汪定 LIU Jian-Wei;LIN Jing-Qiang;HUANG Xin-Yi;WANG Ding(School of Cyber Science and Technology,Beihang University,Beijing 100083,China;Data Assurance&Communications Security Center,Chinese Academy of Sciences,Beijing 100093,China;College of Mathematics and Informatics,Fujian Normal University,Fuzhou 350117,China;College of Cyber Science,Nankai University,Tianjin 300350,China)

机构地区：[1]北京航空航天大学网络空间安全学院,北京100083 [2]中国科学院数据与通信保护研究教育中心,北京100093 [3]福建师范大学数学与信息学院,福州350117 [4]南开大学网络空间安全学院,天津300350

出　　处：《密码学报》2020年第3期285-289,共5页Journal of Cryptologic Research

摘　　要：密码学是网络空间安全的基础理论,能够为各种信息系统提供数据机密性、数据完整性、身份鉴别、非否认等安全服务.然而,在实际的密码学应用中,却面临密钥泄露、密钥易被猜测、随机数可预测、虚假数字证书、弱算法使用、密码协议实现漏洞等诸多问题,导致理论上安全(即在一定假设下可证明安全)的密码技术和方法并不能实现预期的安全效果.特别地,随着信息化进程的不断推进,越来越多的敏感服务开始上线,密码系统能否在现实环境中提供有效的安全服务是一个亟待关注的问题.Cryptography constitutes the basic theory of cyberspace security and provides security services such as data confidentiality,data integrity,identity authentication,and non-repudiation for various information systems.However,cryptography used in real-world applications are faced with many problems such as key leakage,key susceptibility to be guessed,random numbers predictability,fake digital certificates,weak algorithm use,and password protocol implementation vulnerabilities,resulting in theoretically secure(that is,under certain assumptions,it can be proved to be secure)cryptographic technologies and methods cannot achieve the expected security goals.In particular,with the continuous advancement of the informatization process,more and more sensitive services are made online.Whether the cryptosystem can provide effective security services in real environments is an urgent issue.

关 键 词：网络空间安全 数据完整性 数字证书 身份鉴别 信息系统 数据机密性 可证明安全 密码系统 

分 类 号：TP309.7[自动化与计算机技术—计算机系统结构]