Publication

Power Yoga: Variable-Stretch Security of CCM for Energy-Efficient Lightweight IoT

Graph Chatbot

Chat with Graph Search

Ask any question about EPFL courses, lectures, exercises, research, news, etc. or try the example questions below.

DISCLAIMER: The Graph Chatbot is not programmed to provide explicit or categorical answers to your questions. Rather, it transforms your questions into API requests that are distributed across the various IT services officially administered by EPFL. Its purpose is solely to collect and recommend relevant references to content that you can explore to help you answer your questions.

An authentication scheme based on roots of sparse polynomials

Mohammad Amin Shokrollahi

We describe an authentication scheme whose security is based on the hardness of finding roots of systems of sparse polynomial equations in many variables and of high degree. One of the new ideas is the use of many keys. In one authentication session, a sma ...

2003

Decorrelation over Infinite Domains: the Encrypted CBC-MAC Case

Serge Vaudenay

Decorrelation theory has recently been proposed in order to address the security of block ciphers and other cryptographic primitives over a finite domain. We show here how to extend it to infinite domains, which can be used in the Message Authentication Co ...

2001

Decorrelation over infinite domains: the encrypted CBC-MAC case

Serge Vaudenay

2001

Decorrelation over Infinite Domains: the Encrypted CBC-MAC Case

Serge Vaudenay

2000

Authenticated multi-party key agreement

Serge Vaudenay

We examine key agreement protocols providing: (i) key authentication, (ii) key confirmation, and (iii) forward secrecy. Attacks are presented against previous two-party key agreement schemes and we subsequently present a protocol providing the properties l ...

1996

KryptoKnight family of light-weight protocols for authentication and key distribution

Philippe Janson

An essential function for achieving security in computer networks is reliable authentication of communicating parties and network components. Such authentication typically relies on exchanges of cryptographic messages between the involved parties, which in ...

1995