3 ms·
Cryptography is almost entirely applied mathematics. If you're not working with (typically advanced) mathematics, you're not actually doing cryptography. That m
by dsacco 9y ago
Cryptography is almost entirely applied mathematics. If you're not working with (typically advanced) mathematics, you're not actually doing cryptography. That might come across as pretentious, but it's true - industry cryptographers doing implementation work need to understand the research even if they're not making novel academic contributions to the field. For that matter, I also think terms like "academic" and "real world" present a false dichotomy.
A better way to capture the differences you're looking for might be the following categorization:
1. Theoretical cryptography, which is primarily concerned with the mathematics and computational complexity of cryptosystems that are very new, not widely deployed or currently open research problems. This includes post-quantum cryptography, pairings-based cryptography, multiparty computation, indistinguishability obfuscation, homomorphic encryption, cryptanalytic attacks, etc.
2. Practical (real world) cryptography, which is primarily concerned with the mathematics and computational complexity of cryptosystems that can be practically used or which are widely deployed. Implementation, performance, peripheral security infrastructure and side channel attacks also fall under the purview of practical cryptography. The safety and development of cryptographic libraries and protocols falls into this realm. A lot of cryptanalysis also falls into this area.
There are many academic cryptographers in both domains, which is why I say that "academic" is not a useful signal as to which area someone is working in. As an example I have off the top of my head, Phil Rogaway (who won Real World Cryptography's Levchin Prize in 2016) is an academic cryptographer who specializes in practical cryptography. He invented PMAC[1] and OCB[2], which are both practical primitives for use in authenticated encryption cryptosystems; nevertheless, research like Rogaway's requires significant understanding of relevant mathematics and complexity theory. On the other side of the spectrum, Craig Gentry is an industry cryptographer working at IBM as a research scientist; he won a MacArthur Fellowship for his PhD thesis[3], which was the first feasible realization of homomorphic encryption. He was also part of the research team that made the first significant progress towards multilinear maps in pairings-based cryptography using a graded encoding scheme.[4]
_________________________________
1. http://web.cs.ucdavis.edu/~rogaway/ocb/pmac.htm http://web.cs.ucdavis.edu/~rogaway/ocb/pmac.htm
2. http://web.cs.ucdavis.edu/~rogaway/ocb/index.html http://web.cs.ucdavis.edu/~rogaway/ocb/index.html
3. https://crypto.stanford.edu/craig/craig-thesis.pdf https://crypto.stanford.edu/craig/craig-thesis.pdf
4. https://eprint.iacr.org/2012/610.pdf https://eprint.iacr.org/2012/610.pdf
- loup-vaillant 9y ago> industry cryptographers doing implementation work need to understand the research even if they're not making novel academic contributions to the field. Having implemented Monocypher, I can only concur: merely implementing the algorithm from spec required a solid understanding of some of the mathematical concepts involved. For instance: http://loup-vaillant.fr/tutorials/poly1305-design http://loup-vaillant.fr/tutorials/poly1305-design
- loup-vaillant 9y agoHuh? where the downvote could possibly come from?