Fork-resilient continuous group key agreement

J Alwen, M Mularczyk, Y Tselekounis - Annual International Cryptology …, 2023 - Springer
Abstract Continuous Group Key Agreement (CGKA) lets an evolving group of clients agree
on a sequence of group keys. An important application of CGKA is scalable end-to-end …

On the insider security of MLS

J Alwen, D Jost, M Mularczyk - Annual International Cryptology …, 2022 - Springer
Abstract The Messaging Layer Security (MLS) protocol is an open standard for end-to-end
(E2E) secure group messaging being developed by the IETF, poised for deployment to …

Cryptographic administration for secure group messaging

D Balbás, D Collins, S Vaudenay - 32nd USENIX Security Symposium …, 2023 - usenix.org
Many real-world group messaging systems delegate group administration to the application
level, failing to provide formal guarantees related to group membership. Taking a …

Device-oriented group messaging: a formal cryptographic analysis of matrix'core

MR Albrecht, B Dowling, D Jones - 2024 IEEE Symposium on …, 2024 - ieeexplore.ieee.org
Focusing on its cryptographic core, we provide the first formal description of the Matrix
secure group messaging protocol. Observing that no existing secure messaging model in …

WhatsUpp with sender keys? Analysis, improvements and security proofs

D Balbás, D Collins, P Gajland - … Conference on the Theory and Application …, 2023 - Springer
Developing end-to-end encrypted instant messaging solutions for group conversations is an
ongoing challenge that has garnered significant attention from practitioners and the …

On secure ratcheting with immediate decryption

J Pijnenburg, B Poettering - International Conference on the Theory and …, 2022 - Springer
Ratcheting protocols let parties securely exchange messages in environments in which state
exposure attacks are anticipated. While, unavoidably, some promises on confidentiality and …

On the worst-case inefficiency of CGKA

A Bienstock, Y Dodis, S Garg, G Grogan… - Theory of Cryptography …, 2022 - Springer
Abstract Continuous Group Key Agreement (CGKA) is the basis of modern Secure Group
Messaging (SGM) protocols. At a high level, a CGKA protocol enables a group of users to …

Strongly anonymous ratcheted key exchange

B Dowling, E Hauck, D Riepel, P Rösler - … on the Theory and Application of …, 2022 - Springer
Anonymity is an (abstract) security goal that is especially important to threatened user
groups. Therefore, widely deployed communication protocols implement various measures …

How to hide MetaData in MLS-like secure group messaging: simple, modular, and post-quantum

K Hashimoto, S Katsumata, T Prest - Proceedings of the 2022 ACM …, 2022 - dl.acm.org
Secure group messaging (SGM) protocols allow large groups of users to communicate in a
secure and asynchronous manner. In recent years, continuous group key agreements …

DeCAF: decentralizable continuous group key agreement with fast healing

J Alwen, B Auerbach, MC Noval, K Klein… - Cryptology ePrint …, 2022 - eprint.iacr.org
Continuous group key agreement (CGKA) allows a group of users to maintain a
continuously updated shared key in an asynchronous setting where parties only come …