Publications related to Security and Cryptography Laboratory

Closing Leaks: Routing Against Crosstalk Side-Channel Attacks

Mirjana Stojilovic, Seyedeh Sharareh Mirzargar, Zeinab Seifoori

This paper presents an extension to PathFinder FPGA routing algorithm, which enables it to deliver FPGA designs free from risks of crosstalk attacks. Crosstalk side-channel attacks are a real threat in large designs assembled from various IPs, where some I ...

2020

Classical Misuse Attacks on NIST Round 2 PQC: The Power of Rank-Based Schemes

Serge Vaudenay, Loïs Evan Huguenin-Dumittan

The US National Institute of Standards and Technology (NIST) recently announced the public-key cryptosystems (PKC) that have passed to the second round of the post-quantum standardization process. Most of these PKC come in two flavours: a weak IND-CPA vers ...

Springer, Cham2020

Multiquadratic Rings and Walsh-Hadamard Transforms for Oblivious Linear Function Evaluation

Juan Ramón Troncoso-Pastoriza

The Ring Learning with Errors (RLWE) problem has become one of the most widely used cryptographic assumptions for the construction of modern cryptographic primitives. Most of these solutions make use of power-of-two cyclotomic rings mainly due to its simpl ...

IEEE2020

Key Negotiation Downgrade Attacks on Bluetooth and Bluetooth Low Energy

Daniele Antonioli

Bluetooth (BR/EDR) and Bluetooth Low Energy (BLE) are pervasive wireless technologies specified in the Bluetooth standard. The standard includes key negotiation protocols used to generate long-term keys (during pairing) and session keys (during secure conn ...

ASSOC COMPUTING MACHINERY2020

Side-channel attacks on SIKE

Natacha Yolande Emmanuel Marie Linard de Guertechin

This thesis presents, firstly, an introduction to the current state of the art in isogeny-based cryptography, and secondly, a side-channel differential power analysis of SIKE—an isogeny-based key exchange algorithm—in semi-static mode. These attacks have b ...

2020

Mneme: A Mobile Distributed Ledger

Boi Faltings, Sujit Prakash Gujar, Dimitrios Chatzopoulos

Advances in mobile computing have paved the way for new types of distributed applications that can be executed solely by mobile devices on device-to-device (D2D) ecosystems (e.g., crowdsensing). More sophisticated applications, like cryptocurrencies, need ...

IEEE2020

An Operational Approach to Information Leakage

Ibrahim Issa

Given two random variables X and Y , an operational approach is undertaken to quantify the "leakage" of information from X to Y . The resulting measure L (X -> Y) is called maximal leakage, and is defined as the multiplicative increase, upon observing Y , ...

IEEE-INST ELECTRICAL ELECTRONICS ENGINEERS INC2020

SafetyPin: Encrypted Backups with Human-Memorable Secrets

Henry Nathaniel Corrigan-Gibbs

We present the design and implementation of SafetyPin, a system for encrypted mobile-device backups. Like existing cloud-based mobile-backup systems, including those of Apple and Google, SafetyPin requires users to remember only a short PIN and defends aga ...

USENIX Association2020

SafetyPin: Encrypted Backups with Human-Memorable Secrets

Henry Nathaniel Corrigan-Gibbs

We present the design and implementation of SafetyPin, a system for encrypted mobile-device backups. Like existing cloud-based mobile-backup systems, including those of Apple and Google, SafetyPin requires users to remember only a short PIN and defends aga ...

USENIX ASSOC2020

Centralized or Decentralized? The Contact Tracing Dilemma

Serge Vaudenay

The COVID-19 pandemic created a noticeable challenge to the cryptographic community with the development of contact tracing applications. The media reported a dispute between designers proposing a centralized or a decentralized solution (namely, the PEPP-P ...

2020

Security and Cryptography Laboratory

Graph Chatbot

Chat with Graph Search

Closing Leaks: Routing Against Crosstalk Side-Channel Attacks

Classical Misuse Attacks on NIST Round 2 PQC: The Power of Rank-Based Schemes

Multiquadratic Rings and Walsh-Hadamard Transforms for Oblivious Linear Function Evaluation

Key Negotiation Downgrade Attacks on Bluetooth and Bluetooth Low Energy

Side-channel attacks on SIKE

Mneme: A Mobile Distributed Ledger

An Operational Approach to Information Leakage

SafetyPin: Encrypted Backups with Human-Memorable Secrets

SafetyPin: Encrypted Backups with Human-Memorable Secrets

Centralized or Decentralized? The Contact Tracing Dilemma

An Operational Approach to Information Leakage

Closing Leaks: Routing Against Crosstalk Side-Channel Attacks

Multiquadratic Rings and Walsh-Hadamard Transforms for Oblivious Linear Function Evaluation

Side-channel attacks on SIKE

Mneme: A Mobile Distributed Ledger

SafetyPin: Encrypted Backups with Human-Memorable Secrets

SafetyPin: Encrypted Backups with Human-Memorable Secrets

Centralized or Decentralized? The Contact Tracing Dilemma

Classical Misuse Attacks on NIST Round 2 PQC: The Power of Rank-Based Schemes

Key Negotiation Downgrade Attacks on Bluetooth and Bluetooth Low Energy