Demo Data from SIGIR 2026 / reviewers in the wild / expert
Marc Stevens 0001
dblp:15/4413
· DBLP profile ↗
17ranked-venue papers
7as first author
5since 2021 · last 2025
0000-0002-7091-2924ORCID · verified
Domains — the database's venue-derived domains; a paper can count in several
Security and privacy · 16 · 7 first-author · 5 since 2021Theory of computation · 1
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
15 papers |
Cryptographic primitives and cryptanalysis · 86% Authentication and access control · 8% Systems and software security · 3% | |
| Computer architecture, parallel and distributed computing, and storage systems
1 paper |
GPUs and heterogeneous computing · 100% |
Topics — the 22 heaviest of 26, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Cryptographic primitives and cryptanalysis › post-quantum cryptography › lattice-based cryptography
lattice reduction |
1.2 | 2 | 2025 | Towards a Modern LLL Implementation · ASIACRYPT (3) 2025 The General Sieve Kernel and New Records in Lattice Reduction · EUROCRYPT (2) 2019 |
Cryptographic primitives and cryptanalysis › post-quantum cryptography
lattice-based cryptography |
0.9 | 2 | 2021 | Advanced Lattice Sieving on GPUs, with Tensor Cores · EUROCRYPT (2) 2021 The General Sieve Kernel and New Records in Lattice Reduction · EUROCRYPT (2) 2019 |
Cryptographic primitives and cryptanalysis
lattice attack |
0.9 | 1 | 2025 | Towards a Modern LLL Implementation · ASIACRYPT (3) 2025 |
Cryptographic primitives and cryptanalysis
hash functions |
0.9 | 5 | 2017 | The First Collision for Full SHA-1 · CRYPTO (1) 2017 Freestart Collision for Full SHA-1 · EUROCRYPT (1) 2016 New Collision Attacks on SHA-1 Based on Optimal Joint Local-Collision Analysis · EUROCRYPT 2013 |
Cryptographic primitives and cryptanalysis › hash functions › dedicated hash functions
SHA-1 |
0.8 | 4 | 2017 | The First Collision for Full SHA-1 · CRYPTO (1) 2017 Freestart Collision for Full SHA-1 · EUROCRYPT (1) 2016 New Collision Attacks on SHA-1 Based on Optimal Joint Local-Collision Analysis · EUROCRYPT 2013 |
Authentication and access control › authentication
authentication protocols |
0.8 | 1 | 2024 | RADIUS/UDP Considered Harmful · USENIX Security Symposium 2024 |
Cryptographic primitives and cryptanalysis › generic attacks
meet-in-the-middle attack |
0.6 | 1 | 2022 | Simplified MITM Modeling for Permutations: New (Quantum) Attacks · CRYPTO (3) 2022 |
Cryptographic primitives and cryptanalysis › cryptanalysis
quantum cryptanalysis |
0.6 | 1 | 2022 | Simplified MITM Modeling for Permutations: New (Quantum) Attacks · CRYPTO (3) 2022 |
Cryptographic primitives and cryptanalysis › post-quantum cryptography › lattice-based cryptography › shortest vector problem
lattice sieving |
0.5 | 1 | 2021 | Advanced Lattice Sieving on GPUs, with Tensor Cores · EUROCRYPT (2) 2021 |
Cryptographic primitives and cryptanalysis › hash function cryptanalysis
collision attack |
0.5 | 2 | 2017 | The First Collision for Full SHA-1 · CRYPTO (1) 2017 New Collision Attacks on SHA-1 Based on Optimal Joint Local-Collision Analysis · EUROCRYPT 2013 |
Network security › protocol security
protocol vulnerabilities |
0.2 | 1 | 2024 | RADIUS/UDP Considered Harmful · USENIX Security Symposium 2024 |
Cryptographic primitives and cryptanalysis
hash function cryptanalysis |
0.2 | 1 | 2015 | Practical Free-Start Collision Attacks on 76-step SHA-1 · CRYPTO (1) 2015 |
Systems and software security
reverse engineering |
0.2 | 1 | 2015 | Reverse-Engineering of the Cryptanalytic Attack Used in the Flame Super-Malware · ASIACRYPT (2) 2015 |
Cryptographic primitives and cryptanalysis › hash function cryptanalysis
SHA-1 collision attack |
0.2 | 1 | 2015 | Practical Free-Start Collision Attacks on 76-step SHA-1 · CRYPTO (1) 2015 |
Cryptographic primitives and cryptanalysis › hash function cryptanalysis
chosen-prefix collision |
0.2 | 2 | 2009 | Short Chosen-Prefix Collisions for MD5 and the Creation of a Rogue CA Certificate · CRYPTO 2009 Chosen-Prefix Collisions for MD5 and Colliding X.509 Certificates for Different Identities · EUROCRYPT 2007 |
Cryptographic primitives and cryptanalysis › hash functions › dedicated hash functions
MD5 |
0.2 | 2 | 2009 | Short Chosen-Prefix Collisions for MD5 and the Creation of a Rogue CA Certificate · CRYPTO 2009 Chosen-Prefix Collisions for MD5 and Colliding X.509 Certificates for Different Identities · EUROCRYPT 2007 |
GPUs and heterogeneous computing
GPU computing |
0.1 | 1 | 2021 | Advanced Lattice Sieving on GPUs, with Tensor Cores · EUROCRYPT (2) 2021 |
GPUs and heterogeneous computing › GPU computing
tensor cores |
0.1 | 1 | 2021 | Advanced Lattice Sieving on GPUs, with Tensor Cores · EUROCRYPT (2) 2021 |
Cryptographic protocols and secure computation › key management
public key infrastructure |
0.1 | 2 | 2009 | Short Chosen-Prefix Collisions for MD5 and the Creation of a Rogue CA Certificate · CRYPTO 2009 Chosen-Prefix Collisions for MD5 and Colliding X.509 Certificates for Different Identities · EUROCRYPT 2007 |
Systems and software security
vulnerability discovery |
0.0 | 1 | 2013 | Counter-Cryptanalysis · CRYPTO (1) 2013 |
Authentication and access control
certificate authority |
0.0 | 1 | 2009 | Short Chosen-Prefix Collisions for MD5 and the Creation of a Rogue CA Certificate · CRYPTO 2009 |
Cryptographic protocols and secure computation › key management
x.509 certificate |
0.0 | 1 | 2007 | Chosen-Prefix Collisions for MD5 and Colliding X.509 Certificates for Different Identities · EUROCRYPT 2007 |
Methods — techniques the papers use, named apart from their topics
lattice sieving · 1.0LLL algorithm · 0.9meet-in-the-middle modeling · 0.6general sieve kernel · 0.4cryptanalysis · 0.3collision attack optimization · 0.3reverse engineering · 0.2local-collision analysis · 0.2cryptanalytic techniques · 0.2collision attack · 0.1
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2025 | Towards a Modern LLL Implementation
Léo Ducas, Ludo N. Pulles, Marc Stevens 0001 |
ASIACRYPT (3) | 3 |
| 2024 | RADIUS/UDP Considered Harmful
Sharon Goldberg, Miro Haller, Nadia Heninger, Mike Milano, Daniel Shumow, Marc Stevens 0001, Adam Suhl |
USENIX Security Symposium | 6 |
| 2022 | Simplified MITM Modeling for Permutations: New (Quantum) Attacks
André Schrottenloher, Marc Stevens 0001 |
CRYPTO (3) | 2 |
| 2021 | On Time-Lock Cryptographic Assumptions in Abelian Hidden-Order Groups
Aron van Baarsen, Marc Stevens 0001 |
ASIACRYPT (2) | 2 |
| 2021 | Advanced Lattice Sieving on GPUs, with Tensor Cores
Léo Ducas, Marc Stevens 0001, Wessel P. J. van Woerden |
EUROCRYPT (2) | 2 |
| 2019 | The General Sieve Kernel and New Records in Lattice Reduction
Martin R. Albrecht, Léo Ducas, Gottfried Herold, Elena Kirshanova, Eamonn W. Postlethwaite, Marc Stevens 0001 |
EUROCRYPT (2) | 6 |
| 2017 | The First Collision for Full SHA-1
Marc Stevens 0001, Elie Bursztein, Pierre Karpman, Ange Albertini, Yarik Markov |
CRYPTO (1) | 1 |
| 2017 | M4GB: An Efficient Gröbner-Basis AlgorithmabstractThis paper introduces a new efficient algorithm for computing Grobner-bases named M4GB. Like Faugere's algorithm F4 it is an extension of Buchberger's algorithm that describes: how to store already computed (tail-)reduced multiples of basis polynomials to prevent redundant work in the reduction step; and how to exploit efficient linear algebra for the reduction step. In comparison to F4 it removes further redundant work in the processing of reducible monomials. Furthermore, instead of translating the reduction of many critical pairs into the row reduction of some large matrix, our algorithm is described more natively and is efficient while processing critical pairs one by one. This feature implies that typically M4GB has to process fewer critical pairs than F4, and reduces the time and data complexity 'staircase' related to the increasing degree of regularity for a sequence of problems one observes for F4. To achieve high efficiency, M4GB has been designed specifically to operate only on tail-reduced polynomials, i.e., polynomials of which all terms except the leading term are non-reducible. This allows it to perform full-reduction directly in the computation of a term polynomial multiplication, where all computations are done over coefficient vectors over the non-reducible monomials. We have implemented a version of our new algorithm tailored for dense overdefined polynomial systems as a proof of concept and made our source code publicly available. We have made a comparison of our implementation against the implementations of FGBlib, Magma and OpenF4 on various dense Fukuoka MQ challenge problems that we were able to compute in reasonable time and memory. We observed that M4GB uses the least total CPU time and the least memory of all these implementations for those MQ problems, often by a significant factor. In the Fukuoka MQ challenges, the starting challenges of Type V and Type VI have 16 equations which was chosen based on an extrapolated computational runtime of more than a month using Magma. M4GB allowed us to set new records for these Fukuoka MQ challenges breaking Type V (F28) up to 18 equations and Type VI (F31) up to 19 equations, each can be computed within up to 11 days on our dual Xeon system. Rusydi H. Makarim, Marc Stevens 0001 |
ISSAC | 2 |
| 2017 | Speeding up detection of SHA-1 collision attacks using unavoidable attack conditions
Marc Stevens 0001, Daniel Shumow |
USENIX Security Symposium | 1 |
| 2016 | Freestart Collision for Full SHA-1
Marc Stevens 0001, Pierre Karpman, Thomas Peyrin |
EUROCRYPT (1) | 1 |
| 2016 | New Second Preimage Attacks on Dithered Hash Functions with Low Memory Complexity
Muhammad Barham, Orr Dunkelman, Stefan Lucks, Marc Stevens 0001 |
SAC | 4 |
| 2015 | Reverse-Engineering of the Cryptanalytic Attack Used in the Flame Super-Malware
Max Fillinger, Marc Stevens 0001 |
ASIACRYPT (2) | 2 |
| 2015 | Practical Free-Start Collision Attacks on 76-step SHA-1
Pierre Karpman, Thomas Peyrin, Marc Stevens 0001 |
CRYPTO (1) | 3 |
| 2013 | Counter-Cryptanalysis
Marc Stevens 0001 |
CRYPTO (1) | 1 |
| 2013 | New Collision Attacks on SHA-1 Based on Optimal Joint Local-Collision Analysis
Marc Stevens 0001 |
EUROCRYPT | 1 |
| 2009 | Short Chosen-Prefix Collisions for MD5 and the Creation of a Rogue CA Certificate
Marc Stevens 0001, Alexander Sotirov, Jacob Appelbaum, Arjen K. Lenstra, David Molnar, Dag Arne Osvik, Benne de Weger |
CRYPTO | 1 |
| 2007 | Chosen-Prefix Collisions for MD5 and Colliding X.509 Certificates for Different Identities
Marc Stevens 0001, Arjen K. Lenstra, Benne de Weger |
EUROCRYPT | 1 |