8/12/2019 babale

1/6

Bachir Babale

CSEP590tu

03/05/2006

CryptoGraphics: Cryptography using Graphics Processing Units

Moores law is commonly known as the law that characterize the e!"onential

#rowth in "er$ormance o$ central "rocessin# units %CP&s' use in com"uters o(er the last

three ecaes) *t is o$ten inter"rete as "reictin# that "rocessor s"ee woul ou+lee(ery ei#hteen months) ,(er the last ecae- #ra"hics "rocessin# units %.P&s'- a more

s"ecialize +ree o$ chi"s- ha(e +ecome common "lace in com"uters) ri(en +y

com"etition an a stron# eman $rom the #amin# inustry- .P& s"ee is currently

ou+lin# e(ery si! months- which is three times $aster than Moores law) he $ast s"eean hi#hly "arallel nature o$ #ra"hics "rocessors are ri(in# their increase ao"tion $or

#eneral "ur"ose com"utin#) Cry"to#ra"hic "rimiti(es al#orithmic com"le!ities o$ten

turn them into real or "ercei(e +ottlenecks1 .P&s "resent there an o""ortunity to o$$loa

cry"to#ra"hic "rocessin# $rom the CP&) urthermore- "ortin# cry"to#ra"hic al#orithmsto #ra"hics chi"s woul ena+le the e(elo"ment o$ new class o$ a""lications that allow

the is"lay o$ sensiti(e secure content on untruste terminals or o"eratin# systems) irstwe will e!"lore the moti(ations +ehin usin# .P&s $or cry"to#ra"hy- an escri+e how

.P& a""lication "ro#rammin# inter$aces %P*s' can +e use $or those "ur"oses) 4e will

then in(esti#ate the a""lica+ility o$ .P&s to im"lement known stream an +lock ci"hers)hir- we will re(iew "rototy"es o$ "otential a""lications an the associate "rotocols)

inally- we will escri+e reuire enhancements to current .P& P*s as well as

initiati(es in the inustry that coul hel" Cry"to.ra"hics- cry"to#ra"hy usin# .P&s-

+ecome a reality)

Security has +ecome essential to so$tware in an increasin#ly connecte worl) he+uilin# +locks o$ cry"to#ra"hy are wiely use $or a +roa ran#e o$ a""lication $romonline +ankin# to i#ital ri#hts mana#ement $or music an (ieos) he si#ni$icant

o(erhea cause +y cry"to#ra"hic al#orithms on systems that use them has le o(er the

years to the emer#ence o$ harware accelerators $or those al#orithms) *t is also common$or e(elo"ers to take a(anta#e o$ s"ecial $unctions a(aila+le in some CP&s- such as the

MM instruction set) 7owe(er- CP& clock s"ee im"ro(ements ha(e +een consiera+ly

slowin# own since the year 2003) Per$ormance increases since then has mostly +een

rawn $rom increase "arallelism with the a""earance o$ multi8core chi"s) .P&s turn outto alreay +e hi#hly "arallel with more that twenty $our $ra#ment shain# "i"elines on

current .P&s com"are to only two cores "er common CP&s) urthermore- .P&s

su""ort hunres o$ harware threas com"are to only one to two harware threassu""orte on CP&s) lso- hi#h en #ra"hics chi"s like (iias .:0 can "rocess u" to

;50 +illion $loatin# "oint o"erations "er secons %.

8/12/2019 babale

2/6

*n aition to e!"loitin# system resources- im"lementin# ci"hers within the .P&

woul allow ima#es to +e encry"te an ecry"te without ha(in# to tem"orarily write

the ima#e as "lainte!t in system memory) Cry"to#ra"hy insie the .P& woul ena+le thee(elo"ment o$ systems where the .P& is the only truste com"onent) Cook- >arratto-

?eromytis- an lue %@.>' an @e8.reen8>lue8l"ha

%@.>'- which re"resent the res"ecti(e +yte8wie com"onents that constitute the "i!el)he "i!el "rocessin# "i"eline also contains +ack an $ront +u$$ers that are res"ecti(ely

use $or "re8"rocessin# o$ ata an to is"lay ima#es to the screen) he ,"en.) *t is intene to ensure thatin$ormation "assin# throu#h the system +us cannot +e snoo"e or otherwise co"ie at the

harware le(el +y encry"tin# all "remium content meia ata with a sim"li$ie $orm o$;2B8+it ES encry"tion) he o"eratin# system must (eri$y whether a (ali #ra"hics

su+system is "resent- to a(oi senin# content to a hackers emulation e(ice) or PFP8

&> su""ort- usin# uniue keys in #ra"hics chi"s is allowe +ut not reuire- $or it

woul +e an e!"ensi(e "rocess $or harware manu$acturers) e(ertheless- authenticationo$ the .P& can make use o$ the com"le!ity o$ moern #ra"hics chi"s- which ha(e a

com"le! arran#ement o$ a lar#e num+er o$ #ates an a com"le! state moel) or "ur"oses

o$ authentication- the e(ice ri(er asks com"le! uestions to the harware an thenchecks the answers) or PFP8&> com"liance it is reuire that #ra"hics chi"s

im"lement MPE.2 an 4inows Meia 9 ecoin# as well as 20=B8+it i$$ie 7ellman)

PFP8&> is "lanne to +e e"loye a year a$ter the initial release o$ the o"eratin#system- an will as escri+e in its s"eci$ication "ro(ie the missin# +uilin# +locks $or

Cry"to.ra"hics ienti$ie earlier +y Cook an al)

he work o$ Cook an al) inicates that a suita+ly moi$ie .P& can ser(e as the

+ase $or a truste com"utin# "lat$orm $or certain ty"es o$ (iewin# a""lications like (ieo

con$erencin# an remote eskto" is"lay access) Moreo(er- .P&s can +e use to o$$loa

the CP&s to a""ly stream ci"hers on lar#e se#ments o$ ata simultaneously while kee"in#key material an "lainte!t outsie o$ system memory) he a(ent o$ PFP8&> "ro(ies

to .P&8+ase cry"to#ra"hy the means to "er$orm authentication as well as "ractical

com"ression routines) ,(erall "er$ormance o$ currently known ci"her in the .P& woulstill howe(er remain a limitin# $actor- which inicates the nee to e(elo" ci"hers that

can +etter e!"loit the ca"a+ilities o$ moern .P&s)

5

8/12/2019 babale

6/6

Reference:

;' Cry"to.ra"hics Secret ?ey Cry"to#ra"hy &sin# .ra"hics Cars!ebra "# Coo$# % &ohn 'oannidis# % An(elos !# Keromytis# % &a$e "uc$

htt"//www;)cs)colum+ia)eu/Gcook/"u+s/C@S8correcte)"$

2' @emotely ?eye Cry"to#ra"hics) Secure @emote is"lay ccess &sin#)

%Mostly' &ntruste 7arware

!ebra "# Coo$#% Ricardo Baratto#% An(elos !# Keromytishtt"//www)ncl)cs)colum+ia)eu/"u+lications/icics2005)"$

3' Protecte *nteracti(e 3 .ra"hics Fia @emote @enerin#

!a)id Koller% Michael *urit+in% Marc "e)oy,% Marco *arini% -iuseppe Crocciahtt"//#ra"hics)stan$or)eu/"a"ers/"rotecte/"rotecte)"$

=' .P.P& *EEE Fisualization 2005 &,@*

htt"//www)#"#"u)or#/(is2005/%03/05/2006'

5' ,ut"ut Content Protection an 4inows