Demo Data from EDBT 2026 / reviewers in the wild / expert
Mike Ounsworth
dblp:305/4763
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2022
0000-0002-4656-5811ORCID · reported
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Cryptographic protocols and secure computation · 62% Cryptographic primitives and cryptanalysis · 38% |
Topics — the 6 heaviest of 6, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Cryptographic primitives and cryptanalysis › post-quantum cryptography
lattice-based key encapsulation |
0.6 | 1 | 2022 | Proof-of-Possession for KEM Certificates using Verifiable Generation · CCS 2022 |
Cryptographic protocols and secure computation › proof systems › zero-knowledge proofs
MPC-in-the-head |
0.6 | 1 | 2022 | Proof-of-Possession for KEM Certificates using Verifiable Generation · CCS 2022 |
Cryptographic primitives and cryptanalysis
post-quantum cryptography |
0.6 | 1 | 2022 | Proof-of-Possession for KEM Certificates using Verifiable Generation · CCS 2022 |
Cryptographic protocols and secure computation › verifiable storage
proofs of possession |
0.6 | 1 | 2022 | Proof-of-Possession for KEM Certificates using Verifiable Generation · CCS 2022 |
Cryptographic protocols and secure computation › proof systems
zero-knowledge proofs |
0.6 | 1 | 2022 | Proof-of-Possession for KEM Certificates using Verifiable Generation · CCS 2022 |
Cryptographic protocols and secure computation
key exchange |
0.2 | 1 | 2022 | Proof-of-Possession for KEM Certificates using Verifiable Generation · CCS 2022 |
Methods — techniques the papers use, named apart from their topics
verifiable generation · 0.6picnic signature scheme · 0.6
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2022 | Proof-of-Possession for KEM Certificates using Verifiable GenerationabstractCertificate authorities in public key infrastructures typically require entities to prove possession of the secret key corresponding to the public key they want certified. While this is straightforward for digital signature schemes, the most efficient solution for public key encryption and key encapsulation mechanisms (KEMs) requires an interactive challenge-response protocol, requiring a departure from current issuance processes. In this work we investigate how to non-interactively prove possession of a KEM secret key, specifically for lattice-based KEMs, motivated by the recently proposed KEMTLS protocol which replaces signature-based authentication in TLS 1.3 with KEM-based authentication. Although there are various zero-knowledge (ZK) techniques that can be used to prove possession of a lattice key, they yield large proofs or are inefficient to generate. We propose a technique called verifiable generation, in which a proof of possession is generated at the same time as the key itself is generated. Our technique is inspired by the Picnic signature scheme and uses the multi-party-computation-in-the-head (MPCitH) paradigm; this similarity to a signature scheme allows us to bind attribute data to the proof of possession, as required by certificate issuance protocols. We show how to instantiate this approach for two lattice-based KEMs in Round 3 of the NIST post-quantum cryptography standardization project, Kyber and FrodoKEM, and achieve reasonable proof sizes and performance. Our proofs of possession are faster and an order of magnitude smaller than the previous best MPCitH technique for knowledge of a lattice key, and in size-optimized cases can be comparable to even state-of-the-art direct lattice-based ZK proofs for Kyber. Our approach relies on a new result showing the uniqueness of Kyber and FrodoKEM secret keys, even if the requirement that all secret key components are small is partially relaxed, which may be of independent interest for improving efficiency of zero-knowledge proofs for other lattice-based statements. Tim Güneysu, Philip W. Hodges, Georg Land, Mike Ounsworth, Douglas Stebila, Gregory M. Zaverucha |
CCS | 4 |