Cryptographic Attack Metrics

Abstract

When evaluating systems containing cryptographic components, the question arises how to measure the security provided by the cryptography included in the system. In this chapter we highlight the difficulties involved and show that, while measuring cryptographic security is desirable, the opposite point of view, i.e. measuring cryptographic insecurity using attack metrics, yields useful results and behaves reasonably under composition of cryptographic components.