Program:
    Monday, 10:00am - noon:  Session 1
    Monday, 2:00pm - 4:00pm:  Session 2
    Tuesday, 10:00am - noon:  Session 3
    Tuesday, 2:00pm - 4:00pm:  Session 4
    Wednesday, 10:00am - noon:  Session 5
    Wednesday, 2:00pm - 4:00pm:  Public lecture and reception
    Thursday, 10:00am - noon:  Session 6

Other Activities:
    There will be a dinner for all attendees on Tuesday evening,
    and a sightseeing trip is being planned (details TBA).

------------------------------------------------------------

BACKGROUND REQUIRED

This course does not assume a background in cryptography.
Also, since the course covers symmetric-key cryptography,
not public-key cryptography, no number theory is needed.
The only real requirement is a basic understanding of
finite fields and linear codes.  This course is appropriate
for upper-year undergraduate or graduate students in CS, EE,
or Mathematics (provided the latter have a grasp of basic
CS concepts).  We also welcome faculty and postdocs wishing
to expand their understanding of cryptography.


DETAILED LIST OF TOPICS

 * brief introduction to symmetric cryptography, and the place
     of block ciphers within it
 * DES and AES
 * short overview of existing theories in block cipher design
 * modes of operation, security proofs for modes, tweaked
     block ciphers, ideal block ciphers, ...
 * differential cryptanalysis (detailed in theory and practice)
 * linear cryptanalysis (less detailed)
 * design theories for block ciphers: Knudsen-Nyberg-Matsui's
     "provable security", Decorrelation, Wide Trail strategy
 * Saturation attack (as time permits)

 * applications, requirements of hash functions
 * MD4, MD5, SHA, SHA-1, SHA-256
 * Chabaud-Joux attack on SHA
 * Wang's attack on SHA-1;  difference between differential
     attacks on hash functions and differential attacks on
     block ciphers
 * recent work of Rijmen's research group: automated tools to
     analyze SHA-like hash functions, meaningful collisions,
     second-preimage attacks, ...


EXPECTED LEARNING OUTCOMES

1) Basic understanding of different types of security proofs
     in symmetric-key cryptography
2) Good understanding of the theory used to design the AES
3) Hands-on experience with differential cryptanalysis
     (pen and paper)
4) Understanding of the MD4 design strategy
5) Detailed understanding of current attacks on hash functions

Travel and Accommodation:
Contact lkeliher@mta.ca for details.