• Arpita Patra (Email: arpita AT csa )

• Class timing: Monday and Wednesday, 8:00 am - 9:30 am
• Venue: CSA 252

The second half of the course aims to cover the following topics in Cryptography: Private Key Encryptions (Semantic Security, Indistinguishability based Security, CPA, CCA Security, PRG and PRF based Constructions, Block Cipher Mode of Operations), Message Authentication Codes (Domain Extension, CBC-MAC, Authenticated Encryptions), Hash Functions (Collision Resistance, Second pre-image Resistance and Pre-image Resistance; Domain Extension: the Merkle-Damgard Transform, Hash-and-MAC), Key Agreement (Diffie-Hellman Key Exchange), Public Key Encryptions (CPA, CCA Security, El-Gamal, Cramer-Shoup Cryptosystem, KEM/DEM Paradigm and Hybrid Encryption), Digital Signatures, Digital Certificates, TLS.

The course is shared between two instructors and I will be teaching the second half that has 50% weightage which is distributed as follows:

• Scribe ( 5% ): Every student must scribe at least one lecture. The scribe submission deadline is one week after the class; e.g. a scribe for a lecture on 10th must be submitted by the midnight of 17th.The template tex file for a scribe can be downloaded from here. As you have guessed, the submission must be in Latex. To get first-hand ideas about how to scribe, please have a look at some examples from here.
• Two Assignment Evaluations (10% each): A small set of problems will be posted below after every class or after the completion of a topic. We will have two assignment evaluations based on these questions: one after three weeks based on the question posted until then and the other at the end of the course based on the questions posted post first assignment evaluation. In an assignment evaluation, you (possibly with a partner) will be asked to explain on the board a randomly chosen question. You are also required to submit the corresponding answer in LateX. The template tex file for assignment can be downloaded from here.
• "Chalk & Talk" Session (10%): The goal of this session is to cover breadth of the course. The class will be divided into groups of two students. Each group has to make a single presentation overall. We will have two sessions every week (Friday 8:00 am - 9:30 am), each lasting for 45-60 minutes depending on the presetation material. A written report must also be submitted a day before the presentation.The template tex file for chalk/talk can be downloaded from here. You are expected to select your CT partner by 04.03.15 (Wednesday). If no group wants to volunteer a session sponteniously, a rondom group will be selected in the class.
• Final Exam ( 15% ): Term Papers for final exam.
1. P1: (Strong) PRP from PRG + Non-trivial Private Key Implies One-way Functions; Ref [KL Chapter 7; find the complete proof for PRG-> strong PRP from other source]-- Monday 8:30 - 10 am
2. P2: Message Authentication Revisited; Ref. [pdf]-- Monday 10-11:30am
3. P3: MAC and Authentication Protocols from LPN assumption; Ref. [pdf]-- Tuesday 8:30-10am
4. P4: Bit CCA secure PKE implies existence of many-bit CCA secure PKE; Ref. [pdf]-- Tuesday 10 - 11:30am
5. P5: Selective Opening Attack Secure Encryption Schemes; Ref. [pdf] -- Tuesday 2:00 - 3:30pm
6. P6: Security analysis of Diffie-Hellman Integrated Encryption Scheme in Standard Model; Ref. [pdf]-- Wednesday 8:30 - 10 am
7. P7: Paillier Encryption Scheme ; Ref. [KL Chapter 13]-- Wednesady 10 - 11:30 am

Reference Books:

• Jonathan Katz and Yehuda Lindell, Introduction to Modern Cryptography, second edition 2014, CRC Press. You should definitely have a copy of this book. We will mostly follow this book.
• Cryptography: Theory and Practice by Douglas Stinson, Third edition, CRC Press.
• Handbook of Applied Cryptography by Alfred Menezes, Paul Oorschot and Scott Vanstone. Available Online .
• Foundations of Cryptography by Oded Goldreich. Available Online .
• Cryptography, An Introduction by Nigel Smart. Available Online .

Some useful Course Notes/Lectures:

• Crypto Courses by Yehuda Lindell
• Crypto Courses by Jonathan Katz
• Crypto Courses by Yevgeniy Dodis
• Crypto Course by Ivan Damgaard & Claudio Orlandi
• Crypto Courses by Mihir Bellare.
• Crypto Courses by Rafael Pass.

• Taught by Dr. Bhavana Kanukurthi. Link to the first half of the course is here

• Office Hours: Monday Wednsday 9:30 am - 10:00 am or by appointment
• First Assignment Evaluation: Part I: 8:40 - 11:40 am; 20th March (Friday)
• First Assignment Evaluation: Part II 3:30 - 4:30 pm; 25th March (Wednesday @ 117)
• First Assignment Evaluation: All the written reports must be submitted on or before 5th April
• Second Assignment Evaluation 8:00 - 10:30 am; 10th April
• All the written reports (assignments/ChalkTalk Reports/Scribes) must be submitted on or before 15th April
• Final Evaluation: Each group of three people has to make a one and half hour presentation on the assigned paper. Monday (13th; 8:30-10 (P1) / 10-11:30 (P2)) - Three presentations, Tuesday (14th; 8:30-10 (P3) / 10-11:30 (P4) / 2 - 3:30 (P5))- three presentations, Wednesday (15th; 8:30-10 (P6) / 10-11:30 (P7)) - two presentations.