Why Does Your Data Leak? Uncovering the Data Leakage in Cloud from Mobile Apps
Explores root causes of data leaks in cloud-based mobile apps, revealing authentication and permission issues. Presents automated analysis techniques to identify vulnerabilities in cloud API usage.
Threshold ECDSA from ECDSA Assumptions - The Multiparty Case
Explores extending threshold ECDSA protocols to arbitrary thresholds, proposing a new scheme with improved efficiency and security under weaker assumptions for cryptocurrency applications.
Data Recovery on Encrypted Databases with k-Nearest Neighbor Query Leakage
Explores data recovery attacks on encrypted databases supporting k-nearest neighbor queries, analyzing feasibility of exact reconstruction and proposing practical approximate reconstruction methods for spatial data.
Building Production-Grade End to End Encrypted Applications
Insights on building end-to-end encrypted applications, addressing challenges in security, compliance, abuse prevention, availability, and observability for privacy-focused collaborative products.
Machine-Checked Proofs of Privacy for Electronic Voting Protocols
Explore machine-checked proofs for privacy in electronic voting, focusing on the Helios protocol family. Learn about computational model analysis and formalization challenges.
One TPM to Bind Them All - Fixing TPM2.0 for Provably Secure Anonymous Attestation
Enhancing TPM 2.0 interfaces for secure anonymous attestation, addressing shortcomings, and proposing minimal changes to improve functionality and security in cryptographic key management and remote attestation.
Revisiting Square Root ORAM - Efficient Random Access in Multi-Party Computation
Explores modifications to square-root ORAM for efficient random access in multi-party computation, offering significant performance improvements over existing approaches for various applications.
SoK - Secure Messaging
Evaluation of secure messaging solutions, proposing a framework for assessing security, usability, and adoption. Explores trust establishment, conversation security, and transport privacy challenges.
Security of the J-PAKE Password-Authenticated Key Exchange Protocol
Comprehensive security analysis of J-PAKE protocol, proving its robustness against various attacks and demonstrating its suitability for practical use in password-authenticated key exchange.
Post-Quantum Key Exchange for the TLS Protocol from the Ring Learning with Errors Problem
Explores practical implementation of post-quantum key exchange in TLS using ring learning with errors, demonstrating its feasibility and performance in real-world scenarios.
Math in Cyber Security
Explore the crucial role of mathematics in cybersecurity, uncovering its applications and importance in protecting digital systems and data.
Crypto for Everyone – Libsodium in PHP 7.2
Explore libsodium in PHP 7.2 for secure app development. Learn modern crypto functions, their history, and how to implement strong encryption, hashing, and authentication in your projects.
More Secrets of Cryptography
Explore advanced cryptography concepts like hash functions, elliptic curves, and quantum cryptography, with practical applications in web trust and blockchain technology.
Facebook's Approach to Common Web Vulnerabilities
Explore Facebook's strategies for combating web vulnerabilities, including XSS, CSRF, and SQL injection, through security libraries, automated detection, and lint rules.
Don't Lose Sleep, Secure Your REST
Learn to secure REST APIs using JOSE standards, including JWT, JWS, and JWE. Explore key concepts like cryptography, hierarchical auth, and request/response validation for robust API protection.
Security Theatre
Explore web security threats, vulnerabilities, and best practices. Learn about encryption, authentication, and strategies to protect against hacks and social engineering in this comprehensive talk.
JWT JKU and X5U Equals Love
Explore JWT vulnerabilities related to jku and x5u headers, understanding potential security risks and exploitation techniques in web applications.
A Retrospective on the Use of Export Cryptography
Explores vulnerabilities in TLS due to export-grade cryptography, examining FREAK, Logjam, and Drown attacks, their impact, and lessons for future cryptographic protocol design and implementation.
Nonce-Disrespecting Adversaries - Practical Forgery Attacks on GCM in TLS
Explore nonce-reuse vulnerabilities in GCM encryption for TLS, including Internet-wide scans, proof-of-concept attacks, and implications for HTTPS security.
Cunning With CNG - Soliciting Secrets From Schannel
Explore Schannel's internal security, CNG key caching, and forensic implications. Learn to extract and leverage TLS/SSL connection data for decryption and analysis of ephemeral key exchanges.
Recover a RSA Private Key From a TLS Session With Perfect Forward Secrecy
Explore RSA private key recovery from TLS sessions with Perfect Forward Secrecy, focusing on faulty digital signatures and hardware vulnerabilities in network devices.