The Signal protocol is a cryptographic messaging protocol that provides end-to-end
encryption for instant messaging in WhatsApp, Wire, and Facebook Messenger among …

We present here a new family of trapdoor one-way functions that are Preimage Sampleable
on Average (PSA) based on codes, the Wave-PSA family. The trapdoor function is one-way …

Tight security is increasingly gaining importance in real-world cryptography, as it allows to
choose cryptographic parameters in a way that is supported by a security proof, without the …

We consider the theoretically sound selection of cryptographic parameters, such as the size
of algebraic groups or RSA keys, for TLS 1.3 in practice. While prior works gave security …

We give new, fully-quantitative and concrete bounds that justify the SIGMA and TLS 1.3 key
exchange protocols not just in principle, but in practice. By this we mean that, for …

We construct the currently most efficient signature schemes with tight multi-user security
against adaptive corruptions. It is the first generic construction of such schemes, based on …

Tightly secure cryptographic schemes can be implemented with standardized parameters,
while still having a sufficiently high security level backed up by their analysis. In a recent …

We construct the first authenticated key exchange protocols that achieve tight security in the
standard model. Previous works either relied on techniques that seem to inherently require a …

We construct the first tightly secure signature schemes in the multi-user setting with adaptive
corruptions from lattices. In stark contrast to the previous tight constructions whose security is …

In this paper we give nearly-tight reductions for modern implicitly authenticated Diffie-
Hellman protocols in the style of the Signal and Noise protocols, which are extremely simple …