真隨機(jī)數(shù)發(fā)生器中的安全后處理算法的設(shè)計.pdf

1、洳；：o唼碩士學(xué)位論文⑧論文題目直瞳扭麴筮生矍蟲的塞壘亙絲堡簋洼盟造型作者姓名—————凰亙塑———一指導(dǎo)教師—————選熊塑———一學(xué)科(專業(yè))————電堅生亟塹——一所在學(xué)院————上當(dāng)』盔豈監(jiān)L一提交日期—————墊業(yè)立1jL—一浙江大學(xué)碩士學(xué)位論文AbstractIncryptographyespeciallysuchasgeneratingsymmetricandpublickeys，andcertainalgorithmsa

2、ndprotocols，theoutputofrandomnumbergeneratorissupposedtopossessnotonlygoodstatisticaldistributionbutalsounpredictabilityEveniftheattackersknowthedesignstructureoftherandomnumbergeneratorandpartsofitsoutput，theycallnotfin

3、ditsnnknownoutputItmeansthatthedesignershavetoanalyzetheabilityoftheattackersandprovetheunpredictabilitytheoreticallywhicharemuchmoreimportantthantestingitsoutputintheidealconditionThus，securityanalysisisessentialinthede

4、signoftruerandomnumbergeneratorPreviouslythedesignoftruerandomnumbergeneratorlacksofprecisesecurityanalysisMostofthemevaluatetherandomnumberbystatisticaltest，butdonotprovidestrictmathematicalanalysisandprooftoverifytheir

5、performanceintheenvironmentwheretheattackersimposeinterferenceAccordingtotherequirementofcryptographicapplications，thispaperanalyzesthesecuritytargetfortruerandomnumbergeneratormakestheattackermodelhypothesis，andconstitu

6、testhesecuritystrategyaccordinglyFurthermore，thedesignprinciplesofentropysourceandpost—processingalgorithmarcproposed，andthesecuremechanismgivenisprovedtofulfillthesecuritytargetBasedonthedesignprinciplesgivenbysecuritya

7、nalysis，aSecurepostprocessingalgorithmisdesigned，whichCanextractrandombitsfromtheentropysourceevenincertainchangingenvironmentandresilienttocertainattacks，anditssecurityisguaranteedthroughmathematicalproo￡Whenthealgorith

8、mistransferredfromtheorytopractice，thedesignerhavetomakeatradeoffbetweenhardwarecostandtheoreticalperformanceInthispaperWeUSeToeplitzMatrixtoconstructaclassofrandonmessextractorwhichfulfillthesecuritydemandabove，andexten

9、dittobeasecurepostprocessingalgorithmwhoseinputCanbearbitrarilylongbyCBCMACmodeCircuitimplementationandverificationanalysisshowthat，itCallattaingoodperformancewithinreasonablecost，anditissuitableforcryptosystemKeywords：T