# 現代密碼學的理論基礎 110-2

## Course Info
* Course number: CSIE5037
* Location: 資111
* Time: 星期三，3,4,5 (10:20~13:10)
* Website: [NTU COOL](https://cool.ntu.edu.tw/courses/12346)
* Mail : csie dot tamc at gmail dot com

## Announcement
- [PQCRYPTO Mini-School](https://troll.iis.sinica.edu.tw/school22/) July 12 - 15, 2022, Taipei

* Deadline of Everything : 6/15 24:00
* Week 18 上課連結 : [Lecture link](https://instituteofinformationscienceacademiasinica.my.webex.com/instituteofinformationscienceacademiasinica.my-tc/j.php?MTID=ma46e81c190e49f5aa1a1b2a71e30fe26)
* Group Project 報告時間 : [Link](https://docs.google.com/spreadsheets/d/1T69ZKwjNLnoj8ySqij--aH9NliYMr2DgoFKnwy3SG4Y/edit?usp=sharing)
* [課程回饋表單](https://forms.gle/oFCX15AKfJiUGMDU8)
* [Scribe 負責同學列表](https://docs.google.com/spreadsheets/d/1eox5gP_g-hmi_unDvSmH8qTJW0A2-FEncR1uAJXL2K4/edit?usp=sharing)
* 兩人負責的周次,可自由選擇兩人合作(共同評分)或是各自繳交(各自評分)。
* 若遇放假/課程內容調整,實際負責周次可能會略作調換。

## Syllabus

| Week | Info | Video Link ([Playlist](https://www.youtube.com/watch?v=6M6OJOXKXO4&list=PL81EZSBlq3FIwg5W0D_sjIZuVQVw2c2eM)) |
| ----- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------- |
| Week 1 | Introduction ([slide](https://drive.google.com/file/d/1kqcPEypfwjzTe3oSUYLHPVFj3vMwCtk1/view?usp=sharing), [HW0](https://drive.google.com/file/d/1FRvh9ZNChFptF1rDTT0aQbBoFSMNJOFx/view?usp=sharing),)|[Part1](https://youtu.be/6M6OJOXKXO4)<br>[Part2](https://youtu.be/TztNLpC2eeU)|
| Week2 | One-Way Functions ([slide](https://drive.google.com/file/d/1teKW1Mmk9vk8qHm69e0WZXtAptST9X2v/view?usp=sharing),[Scribe](https://drive.google.com/file/d/1ztswaKDaWADINHczWZUyZtVwUR64WYMY/view?usp=share_link))|[all](https://youtu.be/W0I9X9JpdDQ)
| Week3 | Pseudo-randomness ([slide](https://drive.google.com/file/d/1fvCUG6oyNROVXCgAz3pvd5Zt7g7XWRxe/view?usp=sharing), [HW1](https://drive.google.com/file/d/1TnOP6A-PojQeuacBpqOAmmwCM2AWvFEs/view?usp=sharing),[Scribe](https://drive.google.com/file/d/1g3Yn7mDn8H7DnJdEIyfJeJEPJ_3Mb8Od/view?usp=share_link))|[Part1](https://youtu.be/6el4Q9DZZaQ)<br>[Part2](https://youtu.be/35knuvd3Ea8)|
|Week4|PRG and PRF([slide](https://drive.google.com/file/d/15TOfRFZeff1vXWAFH3I6JNmllkK6m86u/view?usp=sharing),[Scribe](https://drive.google.com/file/d/192SQQ-J7cpDRXxRSfaMV0qRMHO05fKlf/view?usp=share_link))|[Part1](https://youtu.be/bU_J-7tTDmI)<br>[Part2](https://youtu.be/l_W01XwPPXw)|
|Week5|PRF and PRP([slide](https://drive.google.com/file/d/1wKwZe3ZRzXOQc6q8vr-5ZI1NQwJxfjl5/view?usp=sharing), [HW2](https://drive.google.com/file/d/1zmPlHVjv5Ej-JliaNOH63gNOVLRvPFIp/view?usp=sharing),[Scribe](https://drive.google.com/file/d/10l0huJev9KeiXbaQkwuAIxh3LewiF3IN/view?usp=share_link))|[all](https://youtu.be/bxG-C-1pFBE)|
|Week6|Public Key Encryption ([slide](https://drive.google.com/file/d/17tpxbhHuPwVZ6yC97Wef8mf48CecRWox/view?usp=sharing),[Scribe](https://drive.google.com/file/d/1Z4Ky-xIAU2kupIKGCp-rqQjS7wTsrKg1/view?usp=share_link))|[all](https://youtu.be/FkYITONrH5Y)|
|Week7|Lattice and PKE ([slide](https://drive.google.com/file/d/1hgZwbL0eJDI4Tb8SppC5zwiBRKGpwfze/view?usp=sharing), [HW3](https://drive.google.com/file/d/1hTu1fwYyp2BXI9jY9AGYtIYjPTUuU0ce/view?usp=sharing),[Scribe](https://drive.google.com/file/d/1XJStZ328mhrEdxG9gLG9eAUAcC8miR7n/view?usp=share_link))|[all](https://youtu.be/zVzq1WbtQiU)|
|Week8|Fujisaki-Okamoto Transformation ([slide](https://drive.google.com/file/d/1sGp5izH7JY3F_err32vxeiPPDppgPI1z/view?usp=sharing),[Scribe](https://drive.google.com/file/d/1bd5Fzodm2bBZm_mwZhLBFTvaLW-FlChC/view?usp=share_link))|[all](https://youtu.be/8pYu7XVxaOA)|
|Week9|Mid-term||
|Week10|Signatures ([slide](https://drive.google.com/file/d/1dDqY6dFbIK3uWZWghP2gkiLqWq6DlBVy/view?usp=sharing),[Scribe](https://drive.google.com/file/d/1GuajP623oph-oUqrrbR0wlX9RBKDcjro/view?usp=share_link))|[Part1](https://youtu.be/pYeFN1fpogA)<br>[Part2](https://youtu.be/Wa1TSaujCCk)|
|Week11|Signatures - cont'd ([slide](https://drive.google.com/file/d/1pzsC9dZsQnnM3jIVRj_8BA-86JNZbQoJ/view?usp=sharing), [HW4](https://drive.google.com/file/d/12kOLI8EaCx1HdxD2XoWrgDyOicby1D2W/view?usp=sharing),[Scribe](https://drive.google.com/file/d/1YSAeM9x-o8jV1VuLHL5G09ZOQXrlDsIh/view?usp=share_link))|[Part1](https://youtu.be/Vx6nCGvHy18)<br>[Part2](https://youtu.be/pHylnLOBdiQ)<br>[all](https://youtu.be/cu55ts3lyno)|
|Week12| Lattice signature and Zero Knowledge ([slide](https://drive.google.com/file/d/1McK__sGJ4O94JlghaVizKJUYD9rwhOCd/view?usp=sharing))|[all](https://youtu.be/xNynAzblq20)|
|Week13|Fully Homomorphic Encryption ([Lecuture link](https://instituteofinformationscienceacademiasinica.my.webex.com/instituteofinformationscienceacademiasinica.my-tc/j.php?MTID=m0a3f437f7f9a66066b1677d280b0bed4), [Jamboard](https://jamboard.google.com/d/1li1Yrq_x_eXMDEUhX3AIsEwIifFf_eGLx67oNuiDmG8/edit?usp=sharing), [HW5](https://drive.google.com/file/d/1560k2bYBU9lLZ4LSCgOLYqYvePNmW45U/view?usp=sharing),[Scribe](https://drive.google.com/file/d/1GYF2sc0Hcx-YrXZzhTXdOKGvtRo6LXAm/view?usp=share_link))|[all](https://youtu.be/YU0pyWRn5lE)|
|Week 14|Zero Knowledge([slide](https://drive.google.com/file/d/1ekkO1rHJMR5ByNpg_lxN_vbuepOHvNyZ/view?usp=sharing), [Lecture link](https://instituteofinformationscienceacademiasinica.my.webex.com/instituteofinformationscienceacademiasinica.my-tc/j.php?MTID=mb43712d67561c9b8b43a79ef5fb067be), [Jamboard](https://jamboard.google.com/d/1UlaN6dst-uaHRzC-Em5mgNWLI0Qu0e7OqPrMhTXSpso/edit?usp=sharing),[Scribe](https://drive.google.com/file/d/1GxOcE8wWKu-_G6RizO3zibg9p4Ghh2_V/view?usp=share_link))|[all](https://youtu.be/2rNzij96XfM)|
|Week15|Group Project Presentation ([Group 1 Slide](https://drive.google.com/file/d/1IiD20XviOPXd797Mma-YMTMI8Cl88Pcc/view?usp=sharing), [note](https://drive.google.com/file/d/1vSCQug3D8Nqofd9xAcredrgnn_oErsfw/view?usp=sharing), [Lecture link](https://instituteofinformationscienceacademiasinica.my.webex.com/instituteofinformationscienceacademiasinica.my-tc/j.php?MTID=m92da18c4c5cfd7825d1fb98b1367271f) [Jamboard](https://jamboard.google.com/d/1nrwXiCRK_4ZtMH3Tg5_dqlkOSFf49jg6vz8MjEUJEYg/edit?usp=sharing), |[all](https://youtu.be/vs3OTSoNilg)<br>[Subject: NIST (NTRU)](https://youtu.be/vs3OTSoNilg?t=443)|
|Week16|Group Project Presentation ([Lecture link](https://instituteofinformationscienceacademiasinica.my.webex.com/instituteofinformationscienceacademiasinica.my-tc/j.php?MTID=me4c9d3d82fd00b8272e169d0f21f7e35), [Group 2 Slide](https://drive.google.com/file/d/1HH2AbCslm7wp2jqL05i5OAXkVbLDSiUL/view?usp=sharing), , [Group 3 Slide](https://drive.google.com/file/d/1nfc-FZR-9NpINAXkJpNMrQlLUFylMQwz/view?usp=sharing), |[all](https://youtu.be/SSgme-X-SjM)<br>[Subject: black box separation : OWF vs pKA](https://www.youtube.com/watch?v=SSgme-X-SjM&t=61s)<br>[Subject: Deniable encryption](https://www.youtube.com/watch?v=SSgme-X-SjM&t=5990s)|
|
|Week17|Group Project Presentation ([Lecture link](https://instituteofinformationscienceacademiasinica.my.webex.com/instituteofinformationscienceacademiasinica.my-tc/j.php?MTID=me1d3db1647a3d6f90fe2b345fa5b57ea), [Group 4 Slide](https://drive.google.com/file/d/19Vwdy_OMq53kdQff5tcWNHm_yNSE1xk9/view?usp=sharing), [Group 5 Slide](https://drive.google.com/file/d/1UGA0zHg_-kgq6dWFkJnFXdQCPZg3-Zrd/view?usp=sharing))|[all](https://youtu.be/bdsBRq8-qek)<br>[Subject: HVZK→ZK](https://www.youtube.com/watch?v=bdsBRq8-qek&t=120s)<br>[Subject: NIST (Dilithium) + side channel?](https://www.youtube.com/watch?v=bdsBRq8-qek&t=4737s)|
|Week18|Group Project Presentation ([Lecture link](https://instituteofinformationscienceacademiasinica.my.webex.com/instituteofinformationscienceacademiasinica.my-tc/j.php?MTID=ma46e81c190e49f5aa1a1b2a71e30fe26), [Group 6 Slide](https://drive.google.com/file/d/1oj5cYwh_CkisWWqOO5ZghCRT1XM-A-_G/view?usp=sharing), [Group 7 Slide](https://drive.google.com/file/d/1Kl2SOkU_MYeOwx3TuC5qUtp6wTAk0aD_/view?usp=sharing))|[all](https://youtu.be/w3UXqNgihCU)<br>[Subject: impossibility for 4-round bbZK for NP](https://www.youtube.com/watch?v=w3UXqNgihCU&t=60s)<br>[Subject: OWF from Kolmogorov complexity (BPP\neq EXP)](https://www.youtube.com/watch?v=w3UXqNgihCU&t=6865s)|

## Office hour
| DATE | Info |Topic|
| -------- | -------- |-----|
| 2/23 | 德田106 |-|
| 3/1 PM 2:00 | 德田106 | 作業0檢討 |
| 3/2 | 德田106 |-|
| 3/14 PM 2:00~5:00| 德田106 | 作業1 Office Hour|
| 3/28 PM 2:00~5:00| 德田106 | 作業1檢討 + 作業2 Office Hour|
| 4/11 PM 2:00~5:00| 德田106 | Midterm Office Hour|
| 4/18 PM 2:00~5:00| 德田106 | 作業3 Office Hour|
| 5/9 PM 2:00~5:00| **Online** ([Link](https://instituteofinformationscienceacademiasinica.my.webex.com/instituteofinformationscienceacademiasinica.my-tc/j.php?MTID=md5917cd2a055d1b0f831e21ecdab1cdf)) | 作業4 Office Hour + Midterm/作業3 檢討|
| 5/23 PM 2:00~5:00| **Online** ([Link](https://instituteofinformationscienceacademiasinica.my.webex.com/instituteofinformationscienceacademiasinica.my-tc/j.php?MTID=m150295bc666cc8b3b1bf483aa59bd48b)) | 作業5 Office Hour|

## 成績評量 與 課程規定

#### 作業(55%)
* Homework 0 (5%)
* Homework 1-5 (50%)
* Submit both pdf and tex file (In Latex format)
* 可畫圖 (手繪 or latex template)
* [下載 latex template](https://drive.google.com/file/d/1wVK6JEIQCWg5InppYI5QJ51ghniYo1mH/view?usp=sharing)
* [Overleaf template](https://www.overleaf.com/read/twhqmtkrxvrp)
#### Scribe (10%)
* 可畫圖, 中/英文可, 鼓勵英文
* 可個人也可小組合作
* 每人需參與一次scribe
* 可(且鼓勵)超過，如超過將採較高分計算，並視情況斟酌加分
* 暫定課程後一周繳交初稿，可逐步調整

#### 期中考 (20%)

#### Group Project (20%)
[參考主題列表(不定時更新中)](https://docs.google.com/document/d/1kj7Da7G3b4yBY_XUOlBiWpMyQIPKNoPldHqSiIUOeWI/edit?usp=sharing)
[Last year](https://hackmd.io/@csie-tamc/B1-JoyZf_)

#### References
- **Jonathan Katz and Yehuda Lindell**
[Introduction to Modern Cryptography](http://www.cs.umd.edu/~jkatz/imc.html)
Chapman & Hall/CRC Press, 2007
- **Rafael Pass and Abhi Shelat**
[A course in Cryptography](https://www.cs.cornell.edu/courses/cs4830/2010fa/lecnotes.pdf), 2010