Cryptography and Network Security I
网络安全代写 This is a group (2-3 students) project and you are free to choose your team mates.You (as a group) will be implementing your
Project Description 网络安全代写
This is a group (2-3 students) project and you are free to choose your team mates.You (as a group) will be implementing your own version of SSH/SSL protocol whichsupports your own implementation of the ciphers including the symmetric key ones (e.g., DES), PKC under ciphertext only adversary, semantically secure PKC, and homomorphic cipher as we discussed in the class and you implemented in homeworks. For digital signature schemes use one based on PKC, for MAC use HMAC, for hash functions use SHA1.
The project will be implemented as a client-server protocol to mimic transactions/ebanking between an ATM (client) and the bank (server). Your project will enable banking operations to deposit, withdraw money, and check balance via ATM by accessing the bank.
You are allowed to use sockets programming libraries. Each team will play white hat and black hat roles as described below:
TIME LINE & Grading: 网络安全代写
White-hat part [60 points] due April 22, 2021: The goal is to
(i) [20pnts] negotiate and establish a secure channel using the SSL/SSH handshake protocol.
(ii) [20pnts] pass back and forth messages to implement the banking operations above.
(iii) [20pnts] You will write a document explaining your implementation as a part of your communication intensive requirement and pass the code to the TA.We will assign your code a Black-hat team to analyze and attack. If your code does not run than black-hat will get the full points (since they can claim whatever they want) ☺.
Black-hat part [40 points] due April 29, 2021: you will receive the source code of the target team by April 23, 2021. Your goal is to find weaknesses in the implementation of (i) cryptographic primitives and protocols [20pnts]; [ii] write a report on your attacks as a part of your communication intensive requirement.
In class presentation [100 points] May 3, 2021: we will schedule a time slot for each group for presentations and demos. Given that we have time zone differences and large class size, it may be possible to submit project presentations as video recordings. This is a tentative plan and details will follow.