Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Marc Stevens 0001

dblp:15/4413 · DBLP profile ↗
← Back
17ranked-venue papers
7as first author
5since 2021 · last 2025
0000-0002-7091-2924ORCID · verified

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 16 · 7 first-author · 5 since 2021Theory of computation · 1

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
15 papers
Cryptographic primitives and cryptanalysis · 86% Authentication and access control · 8% Systems and software security · 3%
Computer architecture, parallel and distributed computing, and storage systems
1 paper
GPUs and heterogeneous computing · 100%

Topics — the 22 heaviest of 26, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Cryptographic primitives and cryptanalysis › post-quantum cryptography › lattice-based cryptography
lattice reduction
1.222025
Towards a Modern LLL Implementation · ASIACRYPT (3) 2025
The General Sieve Kernel and New Records in Lattice Reduction · EUROCRYPT (2) 2019
Cryptographic primitives and cryptanalysis › post-quantum cryptography
lattice-based cryptography
0.922021
Advanced Lattice Sieving on GPUs, with Tensor Cores · EUROCRYPT (2) 2021
The General Sieve Kernel and New Records in Lattice Reduction · EUROCRYPT (2) 2019
Cryptographic primitives and cryptanalysis
lattice attack
0.912025
Towards a Modern LLL Implementation · ASIACRYPT (3) 2025
Cryptographic primitives and cryptanalysis
hash functions
0.952017
The First Collision for Full SHA-1 · CRYPTO (1) 2017
Freestart Collision for Full SHA-1 · EUROCRYPT (1) 2016
New Collision Attacks on SHA-1 Based on Optimal Joint Local-Collision Analysis · EUROCRYPT 2013
Cryptographic primitives and cryptanalysis › hash functions › dedicated hash functions
SHA-1
0.842017
The First Collision for Full SHA-1 · CRYPTO (1) 2017
Freestart Collision for Full SHA-1 · EUROCRYPT (1) 2016
New Collision Attacks on SHA-1 Based on Optimal Joint Local-Collision Analysis · EUROCRYPT 2013
Authentication and access control › authentication
authentication protocols
0.812024
RADIUS/UDP Considered Harmful · USENIX Security Symposium 2024
Cryptographic primitives and cryptanalysis › generic attacks
meet-in-the-middle attack
0.612022
Simplified MITM Modeling for Permutations: New (Quantum) Attacks · CRYPTO (3) 2022
Cryptographic primitives and cryptanalysis › cryptanalysis
quantum cryptanalysis
0.612022
Simplified MITM Modeling for Permutations: New (Quantum) Attacks · CRYPTO (3) 2022
Cryptographic primitives and cryptanalysis › post-quantum cryptography › lattice-based cryptography › shortest vector problem
lattice sieving
0.512021
Advanced Lattice Sieving on GPUs, with Tensor Cores · EUROCRYPT (2) 2021
Cryptographic primitives and cryptanalysis › hash function cryptanalysis
collision attack
0.522017
The First Collision for Full SHA-1 · CRYPTO (1) 2017
New Collision Attacks on SHA-1 Based on Optimal Joint Local-Collision Analysis · EUROCRYPT 2013
Network security › protocol security
protocol vulnerabilities
0.212024
RADIUS/UDP Considered Harmful · USENIX Security Symposium 2024
Cryptographic primitives and cryptanalysis
hash function cryptanalysis
0.212015
Practical Free-Start Collision Attacks on 76-step SHA-1 · CRYPTO (1) 2015
Systems and software security
reverse engineering
0.212015
Reverse-Engineering of the Cryptanalytic Attack Used in the Flame Super-Malware · ASIACRYPT (2) 2015
Cryptographic primitives and cryptanalysis › hash function cryptanalysis
SHA-1 collision attack
0.212015
Practical Free-Start Collision Attacks on 76-step SHA-1 · CRYPTO (1) 2015
Cryptographic primitives and cryptanalysis › hash function cryptanalysis
chosen-prefix collision
0.222009
Short Chosen-Prefix Collisions for MD5 and the Creation of a Rogue CA Certificate · CRYPTO 2009
Chosen-Prefix Collisions for MD5 and Colliding X.509 Certificates for Different Identities · EUROCRYPT 2007
Cryptographic primitives and cryptanalysis › hash functions › dedicated hash functions
MD5
0.222009
Short Chosen-Prefix Collisions for MD5 and the Creation of a Rogue CA Certificate · CRYPTO 2009
Chosen-Prefix Collisions for MD5 and Colliding X.509 Certificates for Different Identities · EUROCRYPT 2007
GPUs and heterogeneous computing
GPU computing
0.112021
Advanced Lattice Sieving on GPUs, with Tensor Cores · EUROCRYPT (2) 2021
GPUs and heterogeneous computing › GPU computing
tensor cores
0.112021
Advanced Lattice Sieving on GPUs, with Tensor Cores · EUROCRYPT (2) 2021
Cryptographic protocols and secure computation › key management
public key infrastructure
0.122009
Short Chosen-Prefix Collisions for MD5 and the Creation of a Rogue CA Certificate · CRYPTO 2009
Chosen-Prefix Collisions for MD5 and Colliding X.509 Certificates for Different Identities · EUROCRYPT 2007
Systems and software security
vulnerability discovery
0.012013
Counter-Cryptanalysis · CRYPTO (1) 2013
Authentication and access control
certificate authority
0.012009
Short Chosen-Prefix Collisions for MD5 and the Creation of a Rogue CA Certificate · CRYPTO 2009
Cryptographic protocols and secure computation › key management
x.509 certificate
0.012007
Chosen-Prefix Collisions for MD5 and Colliding X.509 Certificates for Different Identities · EUROCRYPT 2007

Methods — techniques the papers use, named apart from their topics

lattice sieving · 1.0LLL algorithm · 0.9meet-in-the-middle modeling · 0.6general sieve kernel · 0.4cryptanalysis · 0.3collision attack optimization · 0.3reverse engineering · 0.2local-collision analysis · 0.2cryptanalytic techniques · 0.2collision attack · 0.1
YearPublicationVenuePosition
2025 Towards a Modern LLL Implementation
Léo Ducas, Ludo N. Pulles, Marc Stevens 0001
ASIACRYPT (3)3
2024 RADIUS/UDP Considered Harmful
Sharon Goldberg, Miro Haller, Nadia Heninger, Mike Milano, Daniel Shumow, Marc Stevens 0001, Adam Suhl
USENIX Security Symposium6
2022 Simplified MITM Modeling for Permutations: New (Quantum) Attacks
André Schrottenloher, Marc Stevens 0001
CRYPTO (3)2
2021 On Time-Lock Cryptographic Assumptions in Abelian Hidden-Order Groups
Aron van Baarsen, Marc Stevens 0001
ASIACRYPT (2)2
2021 Advanced Lattice Sieving on GPUs, with Tensor Cores
Léo Ducas, Marc Stevens 0001, Wessel P. J. van Woerden
EUROCRYPT (2)2
2019 The General Sieve Kernel and New Records in Lattice Reduction
Martin R. Albrecht, Léo Ducas, Gottfried Herold, Elena Kirshanova, Eamonn W. Postlethwaite, Marc Stevens 0001
EUROCRYPT (2)6
2017 The First Collision for Full SHA-1
Marc Stevens 0001, Elie Bursztein, Pierre Karpman, Ange Albertini, Yarik Markov
CRYPTO (1)1
2017 M4GB: An Efficient Gröbner-Basis Algorithm
abstract
This paper introduces a new efficient algorithm for computing Grobner-bases named M4GB. Like Faugere's algorithm F4 it is an extension of Buchberger's algorithm that describes: how to store already computed (tail-)reduced multiples of basis polynomials to prevent redundant work in the reduction step; and how to exploit efficient linear algebra for the reduction step. In comparison to F4 it removes further redundant work in the processing of reducible monomials. Furthermore, instead of translating the reduction of many critical pairs into the row reduction of some large matrix, our algorithm is described more natively and is efficient while processing critical pairs one by one. This feature implies that typically M4GB has to process fewer critical pairs than F4, and reduces the time and data complexity 'staircase' related to the increasing degree of regularity for a sequence of problems one observes for F4. To achieve high efficiency, M4GB has been designed specifically to operate only on tail-reduced polynomials, i.e., polynomials of which all terms except the leading term are non-reducible. This allows it to perform full-reduction directly in the computation of a term polynomial multiplication, where all computations are done over coefficient vectors over the non-reducible monomials. We have implemented a version of our new algorithm tailored for dense overdefined polynomial systems as a proof of concept and made our source code publicly available. We have made a comparison of our implementation against the implementations of FGBlib, Magma and OpenF4 on various dense Fukuoka MQ challenge problems that we were able to compute in reasonable time and memory. We observed that M4GB uses the least total CPU time and the least memory of all these implementations for those MQ problems, often by a significant factor. In the Fukuoka MQ challenges, the starting challenges of Type V and Type VI have 16 equations which was chosen based on an extrapolated computational runtime of more than a month using Magma. M4GB allowed us to set new records for these Fukuoka MQ challenges breaking Type V (F28) up to 18 equations and Type VI (F31) up to 19 equations, each can be computed within up to 11 days on our dual Xeon system.
Rusydi H. Makarim, Marc Stevens 0001
ISSAC2
2017 Speeding up detection of SHA-1 collision attacks using unavoidable attack conditions
Marc Stevens 0001, Daniel Shumow
USENIX Security Symposium1
2016 Freestart Collision for Full SHA-1
Marc Stevens 0001, Pierre Karpman, Thomas Peyrin
EUROCRYPT (1)1
2016 New Second Preimage Attacks on Dithered Hash Functions with Low Memory Complexity
Muhammad Barham, Orr Dunkelman, Stefan Lucks, Marc Stevens 0001
SAC4
2015 Reverse-Engineering of the Cryptanalytic Attack Used in the Flame Super-Malware
Max Fillinger, Marc Stevens 0001
ASIACRYPT (2)2
2015 Practical Free-Start Collision Attacks on 76-step SHA-1
Pierre Karpman, Thomas Peyrin, Marc Stevens 0001
CRYPTO (1)3
2013 Counter-Cryptanalysis
Marc Stevens 0001
CRYPTO (1)1
2013 New Collision Attacks on SHA-1 Based on Optimal Joint Local-Collision Analysis
Marc Stevens 0001
EUROCRYPT1
2009 Short Chosen-Prefix Collisions for MD5 and the Creation of a Rogue CA Certificate
Marc Stevens 0001, Alexander Sotirov, Jacob Appelbaum, Arjen K. Lenstra, David Molnar, Dag Arne Osvik, Benne de Weger
CRYPTO1
2007 Chosen-Prefix Collisions for MD5 and Colliding X.509 Certificates for Different Identities
Marc Stevens 0001, Arjen K. Lenstra, Benne de Weger
EUROCRYPT1