Motivated by the currently widespread concern about mass surveillance of encrypted
communications, Bellare et al. introduced at CRYPTO 2014 the notion of Algorithm …

The revelations about massive surveillance have created significant interest in algorithm
substitution attack (ASA), where an honest implementation of a cryptographic primitive is …

Restoring the security of maliciously implemented cryptosystems has been widely
considered challenging due to the fact that the subverted implementation could arbitrarily …

We study interactive proof systems (IPSes) in a strong adversarial setting where the
machines of honest parties might be corrupted and under control of the adversary. Our aim …

In this paper, we study algorithm substitution attacks (ASAs), where an algorithm in a
cryptographic scheme is substituted for a subverted version. First, we formalize and study …

In 2013, the Snowden revelations have shown subversion of cryptographic implementations
to be a relevant threat. Since then, the academic community has been pushing the …

Adversarial implementations of cryptographic primitives called kleptographic attacks cause
the leakage of secret information. Subliminal channel attacks are one of the kleptographic …

Abstract Password-Authenticated Key Exchange (PAKE) allows two parties to establish a
common high-entropy secret from a possibly low-entropy pre-shared secret such as a …

We consider the problem of constructing secure cryptographic hash functions from
subverted ideal primitives. Hash functions are used to instantiate Random Oracles in …

In this thesis, we study extensions of statistical cryptographic primitives. In particular we
study leakage-resilient secret sharing, non-malleable extractors, and immunized ideal one …