Dates are subject to radical & arbitrary change. Reading assignments are due prior to beginning of the subsequent class.

• Jonathan Katz, Yehuda Lindell: Modern Cryptography

• Ross Anderson: Security Engineering (PDFs available online)

• Optional Reference: Alfred J. Menezes, Paul C. van Oorschot and Scott A. Vanstone: Handbook of Applied Cryptography (PDFs available online)

• Class Piazza: https://piazza.com/class/jjztfe90qacw3

• Turn in assignments via Blackboard

• Written homework assignments (10% of grade, see grading notes below)
• Programming assignments (40% of grade)
• Two exams (40% of grade, combined)
• Class participation (10% of grade)

Written assignments will be graded probabilistically. This means that not all homework questions will be graded, but specific (student, problem number) pairs will be selected using a cryptographically-secure pseudorandom number generator. Your overall homework grade will be based on the grades for these questions, and only these questions.

There is no scheduled final exam for this course. Examinations will include two in class midterm exams. However: at the instructor's sole discretion one of the in-class midterm exams may be substituted for a final exam (during the scheduled exam period). This will be announced during the second half of the semester. Thus, students are expected to maintain availability to take the final exam during the scheduled finals period, unless the instructor excuses them.

Except where explicitly noted, all assignments are to be completed individually by students. You are bound by the CS academic integrity code.

• Weekly written assignment 1 handed out, due Monday 2/3 11:59pm
• Reading: Anderson (Security Engineering), Chapter entitled Cryptography: Sections on Symmetric Crypto Primitives (5.4 in online version)

• Reading (supplementary, optional): Handbook of Applied Cryptography, chapter entitled "Block Ciphers".
• Programming assignment 1 is out

• Reading: Anderson (Security Engineering), Chapter entitled Cryptography: Asymmetric Crypto Primitives (5.7 in online version).
• Reading (supplementary, optional): Handbook of Applied Cryptography, chapter entitled "Public Key Encryption".
• Weekly Assignment #2 is out, due in one week

• Programming Assignment 1 is due on Weds 2/12, 11:59pm!
• Reading: Lucky13

• Reading: Twenty Years of Attacks on RSA

• Reading: Imperfect Forward Secrecy

• Reading: Mining your Ps and Qs
• Weekly Assignment #3 is out

• Reading: Borisov, Goldberg, Brewer Off-the-Record Communication

• Wagner, Schneier: Analysis of SSL 3.0
• Assignment 2 is out

• Reading: Anderson, Physical Tamper Resistance

• Reading: Kocher, Timing attack on RSA & DL systems
• Reading: Bernstein, Cache timing attacks on AES
• Optional (http:https://courses.csail.mit.edu/6.857/2006/handouts/TimingAttacks.pdf)
• Assignment 2 due today, 11:59pm

• Bernstein: Cache timing attacks on AES

• Reading: Spectre Paper
• Optional: Foreshadow
• Assignment 2 due

• Rogaway: Provable Security
• On the Provable Security of TLS, Part 1

• Koblitz, Menezes: Another Look at Provable Security
• Optional Reading: Checkoway et al. A systematic analysis of the Juniper Dual EC incident

• Satoshi's Bitcoin Paper
• Ethereum Yellow Paper

• Assignment 3 due today, 11:59pm

• Biondi, Desclaux: Silver Needle in the Skype (2006, REing of Skype binary)

• Lawson: Designing and Attacking DRM

• Reading: Bellare, Practice-Oriented Provable Security

• Reading: Kohno: Breaking and Repairing SSH