Demo Data from EDBT 2026 / reviewers in the wild / expert
Jérôme Plût
dblp:67/10927
· DBLP profile ↗
3ranked-venue papers
0as first author
1since 2021 · last 2025
—ORCID · none
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 3 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
2 papers |
Cryptographic primitives and cryptanalysis · 100% |
Topics — the 5 heaviest of 6, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Cryptographic primitives and cryptanalysis
block cipher cryptanalysis |
0.2 | 1 | 2015 | Key-Recovery Attack on the ASASA Cryptosystem with Expanding S-Boxes · CRYPTO (1) 2015 |
Cryptographic primitives and cryptanalysis › cryptanalysis
key recovery attack |
0.2 | 1 | 2015 | Key-Recovery Attack on the ASASA Cryptosystem with Expanding S-Boxes · CRYPTO (1) 2015 |
Cryptographic primitives and cryptanalysis › cryptographic assumptions
isomorphism of polynomials problem |
0.2 | 1 | 2013 | New Insight into the Isomorphism of Polynomial Problem IP1S and Its Use in Cryptography · ASIACRYPT (1) 2013 |
Cryptographic primitives and cryptanalysis › post-quantum cryptography
multivariate cryptography |
0.2 | 1 | 2013 | New Insight into the Isomorphism of Polynomial Problem IP1S and Its Use in Cryptography · ASIACRYPT (1) 2013 |
Cryptographic primitives and cryptanalysis › block cipher
ASASA |
0.1 | 1 | 2015 | Key-Recovery Attack on the ASASA Cryptosystem with Expanding S-Boxes · CRYPTO (1) 2015 |
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2025 | The Art of Bonsai: How Well-Shaped Trees Improve the Communication Cost of MLSabstractMessaging Layer Security (MLS) is a Secure Group Messaging protocol that uses for its handshake a binary tree – called a Ratchet Tree – in order to reach a logarithmic communication cost in the number of group members. This Ratchet Tree represents users as its leaves; therefore any change in the group membership results in adding or removing a leaf in the tree. MLS consequently implements what we call a tree evolution mechanism, consisting of a user add algorithm – determining where to insert a new leaf – and a tree expansion process – stating how to increase the size of the tree when no space is available for a new user. The tree evolution mechanism currently used by MLS is designed so that it naturally left-balances the Ratchet Tree. However, such a tree structure is often quite inefficient in terms of communication cost. Furthermore, one may wonder whether the binary Ratchet Tree has a degree optimized for the features of MLS.Therefore, we study in this paper how to improve the communication cost of the handshake in MLS – realized through an operation called a commit – by considering both the tree evolution mechanism and the tree degree used for the Ratchet Tree. To do so, we determine the tree structure that optimizes its communication cost and we propose algorithms for both the user add and the tree expansion processes, that allow to remain close to that optimal structure and thus to have a communication cost as close as possible to the optimum. We also find out the Ratchet Tree degree that is best suited to a given set of parameters induced by the encryption scheme used by MLS. This study shows that when using classical (i.e. pre-quantum) ciphersuites, a binary tree is indeed the most appropriate Ratchet Tree; nevertheless, with post-quantum algorithms, it generally becomes more interesting to use instead a ternary tree.Our improvements do not change the TreeKEM protocol and are easy to implement. With parameter sets corresponding to practical ciphersuites, they reduce TreeKEM’s communication cost by 5 to 10%. In particular, the gain of 10% appears in the post-quantum setting – when both an optimized tree evolution mechanism and a ternary tree are necessary –, which is precisely the context where any optimization of the protocol’s communication cost is welcome, due to the large bandwidth of PQ encrypted communication. Céline Chevalier, Guirec Lebrun, Ange Martinelli, Jérôme Plût |
EuroS&P | 4 |
| 2015 | Key-Recovery Attack on the ASASA Cryptosystem with Expanding S-Boxes
Henri Gilbert, Jérôme Plût, Joana Treger |
CRYPTO (1) | 2 |
| 2013 | New Insight into the Isomorphism of Polynomial Problem IP1S and Its Use in Cryptography
Gilles Macario-Rat, Jérôme Plût, Henri Gilbert |
ASIACRYPT (1) | 2 |