Post-quantum TLS without handshake signatures
We present KEMTLS, an alternative to the TLS 1.3 handshake that uses key-encapsulation
mechanisms (KEMs) instead of signatures for server authentication. Among existing post …
mechanisms (KEMs) instead of signatures for server authentication. Among existing post …
[图书][B] Protocols for authentication and key establishment
The first edition of this book was published in 2003. Inevitably, certain parts of the book
became outdated quickly. At the same time new developments have continued apace …
became outdated quickly. At the same time new developments have continued apace …
Post-quantum asynchronous deniable key exchange and the signal handshake
The key exchange protocol that establishes initial shared secrets in the handshake of the
Signal end-to-end encrypted messaging protocol has several important characteristics:(1) it …
Signal end-to-end encrypted messaging protocol has several important characteristics:(1) it …
Strongly secure authenticated key exchange from factoring, codes, and lattices
An unresolved problem in research on authenticated key exchange (AKE) in the public-key
setting is to construct a secure protocol against advanced attacks such as key compromise …
setting is to construct a secure protocol against advanced attacks such as key compromise …
Non-interactive key exchange
Non-interactive key exchange (NIKE) is a fundamental but much-overlooked cryptographic
primitive. It appears as a major contribution in the ground-breaking paper of Diffie and …
primitive. It appears as a major contribution in the ground-breaking paper of Diffie and …
Post-quantum anonymity of Kyber
Kyber is a key-encapsulation mechanism (KEM) that was recently selected by NIST in its
PQC standardization process; it is also the only scheme to be selected in the context of …
PQC standardization process; it is also the only scheme to be selected in the context of …
A logic and an interactive prover for the computational post-quantum security of protocols
C Cremers, C Fontaine… - 2022 IEEE Symposium on …, 2022 - ieeexplore.ieee.org
We provide the first mechanized post-quantum sound security protocol proofs. We achieve
this by developing PQ-BC, a computational first-order logic that is sound with respect to …
this by developing PQ-BC, a computational first-order logic that is sound with respect to …
Beyond eCK: Perfect forward secrecy under actor compromise and ephemeral-key reveal
C Cremers, M Feltz - Computer Security–ESORICS 2012: 17th European …, 2012 - Springer
We show that it is possible to achieve perfect forward secrecy in two-message key exchange
(KE) protocols that satisfy even stronger security properties than provided by the extended …
(KE) protocols that satisfy even stronger security properties than provided by the extended …
Anonymity of NIST PQC round 3 KEMs
K Xagawa - Annual International Conference on the Theory and …, 2022 - Springer
This paper investigates anonymity of all NIST PQC Round 3 KEMs: Classic McEliece, Kyber,
NTRU, Saber, BIKE, FrodoKEM, HQC, NTRU Prime (Streamlined NTRU Prime and NTRU …
NTRU, Saber, BIKE, FrodoKEM, HQC, NTRU Prime (Streamlined NTRU Prime and NTRU …
Know your enemy: Compromising adversaries in protocol analysis
We present a symbolic framework, based on a modular operational semantics, for
formalizing different notions of compromise relevant for the design and analysis of …
formalizing different notions of compromise relevant for the design and analysis of …