Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Philip W. Hodges

dblp:295/8409 · DBLP profile ↗
← Back
1ranked-venue papers
0as first author
1since 2021 · last 2022
—ORCID · none

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
1 paper
Cryptographic protocols and secure computation · 62% Cryptographic primitives and cryptanalysis · 38%

Topics — the 6 heaviest of 6, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Cryptographic primitives and cryptanalysis › post-quantum cryptography
lattice-based key encapsulation
0.612022
Proof-of-Possession for KEM Certificates using Verifiable Generation · CCS 2022
Cryptographic protocols and secure computation › proof systems › zero-knowledge proofs
MPC-in-the-head
0.612022
Proof-of-Possession for KEM Certificates using Verifiable Generation · CCS 2022
Cryptographic primitives and cryptanalysis
post-quantum cryptography
0.612022
Proof-of-Possession for KEM Certificates using Verifiable Generation · CCS 2022
Cryptographic protocols and secure computation › verifiable storage
proofs of possession
0.612022
Proof-of-Possession for KEM Certificates using Verifiable Generation · CCS 2022
Cryptographic protocols and secure computation › proof systems
zero-knowledge proofs
0.612022
Proof-of-Possession for KEM Certificates using Verifiable Generation · CCS 2022
Cryptographic protocols and secure computation
key exchange
0.212022
Proof-of-Possession for KEM Certificates using Verifiable Generation · CCS 2022

Methods — techniques the papers use, named apart from their topics

verifiable generation · 0.6picnic signature scheme · 0.6
YearPublicationVenuePosition
2022 Proof-of-Possession for KEM Certificates using Verifiable Generation
abstract
Certificate authorities in public key infrastructures typically require entities to prove possession of the secret key corresponding to the public key they want certified. While this is straightforward for digital signature schemes, the most efficient solution for public key encryption and key encapsulation mechanisms (KEMs) requires an interactive challenge-response protocol, requiring a departure from current issuance processes. In this work we investigate how to non-interactively prove possession of a KEM secret key, specifically for lattice-based KEMs, motivated by the recently proposed KEMTLS protocol which replaces signature-based authentication in TLS 1.3 with KEM-based authentication. Although there are various zero-knowledge (ZK) techniques that can be used to prove possession of a lattice key, they yield large proofs or are inefficient to generate. We propose a technique called verifiable generation, in which a proof of possession is generated at the same time as the key itself is generated. Our technique is inspired by the Picnic signature scheme and uses the multi-party-computation-in-the-head (MPCitH) paradigm; this similarity to a signature scheme allows us to bind attribute data to the proof of possession, as required by certificate issuance protocols. We show how to instantiate this approach for two lattice-based KEMs in Round 3 of the NIST post-quantum cryptography standardization project, Kyber and FrodoKEM, and achieve reasonable proof sizes and performance. Our proofs of possession are faster and an order of magnitude smaller than the previous best MPCitH technique for knowledge of a lattice key, and in size-optimized cases can be comparable to even state-of-the-art direct lattice-based ZK proofs for Kyber. Our approach relies on a new result showing the uniqueness of Kyber and FrodoKEM secret keys, even if the requirement that all secret key components are small is partially relaxed, which may be of independent interest for improving efficiency of zero-knowledge proofs for other lattice-based statements.
Tim Güneysu, Philip W. Hodges, Georg Land, Mike Ounsworth, Douglas Stebila, Gregory M. Zaverucha
CCS2