TL;DR
The first formal security analysis of the cryptographic core of Olvid, an end-to-end encrypted messaging app notably used by French government officials, including ministers, shows that Olvid is not secure in modern security models such as eCK and reveals a potential timing leakage.
This work presents the hybrid key establishment protocol TutaCrypt in a form that enables rigorous cryptographic analysis and defines two Bellare–Rogaway-style security models that precisely characterize the provided security guarantees.
A detailed description of the steps in the modified EAP-TLS protocol is presented, which addresses issues by directly binding the digital certificate to the subscriber’s SUCI identity to prevent user impersonation, binding the session key to both the certificate and the identity to ensure resistance against Man-in-The-...
A hybrid key exchange protocol combining DHKE with Learning With Errors (LWE), a lattice-based post-quantum primitive that provides authentication via a Public Key Infrastructure together with CRYSTALS-Dilithium digital signature, resilience against MITM attacks, and robustness against classical and quantum threats.
A2ABreak is presented, the first rigorous systematic security analysis of the A2A protocol, and introduces a novel framework that utilizes an LLM-assisted extraction of a verified finite-state machine directly from the natural-language specification.
Re-keying every 10 encryptions provides a practical and secure solution that limits the effectiveness of side-channel attacks, and the proposed lightweight architecture, named LISHARK, maintains the same area footprint as a standalone AES core, making it significantly more efficient compared to TI and DOM.
PEACE is presented, an authentication mechanism for blockchains that combines the practicality of traditional Web systems with decentralization and privacy-preservation, building on a recent groundbreaking zkLogin protocol.
We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.
