correcting subverted random oracles
play

Correcting Subverted Random Oracles Qiang Tang New Jersey - PowerPoint PPT Presentation

Sep 13, 2022 •236 likes •578 views

Correcting Subverted Random Oracles Qiang Tang New Jersey Institute of Technology Joint work with Alexander Russell (University of Connecticut), Moti Yung (Google & Columbia University) Hong Sheng Zhou (Virginia Commonwealth University)

  1. Correcting Subverted Random Oracles Qiang Tang New Jersey Institute of Technology Joint work with Alexander Russell (University of Connecticut), Moti Yung (Google & Columbia University) Hong Sheng Zhou (Virginia Commonwealth University)

  2. Hash Functions are Useful And many more……

  3. Hash Functions are Complex SHA256 Core

  4. Hash Implementation Can Be Optimized

  5. Common Deployment How can we assure we are really using a SHA256?

  6. This Work 1. Practical attacks 1I. Formal modeling III. Construction IV. Security Analysis

  7. <latexit sha1_base64="tuGbIdo/cyKg4E8sD8kYZHvAio4=">AB73icbVBNS8NAEJ34WetX1aOXxSLUS0lE0GPRS48V7Ae0oWw2m3bpZhN3J0Ip/RNePCji1b/jzX/jts1BWx8MPN6bYWZekEph0HW/nbX1jc2t7cJOcXdv/+CwdHTcMkmGW+yRCa6E1DpVC8iQIl76Sa0ziQvB2M7mZ+4lrIxL1gOU+zEdKBEJRtFKnXqlx8IEL/qlslt15yCrxMtJGXI0+qWvXpiwLOYKmaTGdD03RX9CNQom+bTYywxPKRvRAe9aqmjMjT+Z3zsl51YJSZRoWwrJXP09MaGxMeM4sJ0xaFZ9mbif143w+jGnwiVZsgVWyKMkwIbPnSg0ZyjHlCmhb2VsCHVlKGNqGhD8JZfXiWty6rnVr37q3LtNo+jAKdwBhXw4BpqUIcGNIGBhGd4hTfn0Xlx3p2PReuak8+cwB84nz80xI9p</latexit> <latexit sha1_base64="tuGbIdo/cyKg4E8sD8kYZHvAio4=">AB73icbVBNS8NAEJ34WetX1aOXxSLUS0lE0GPRS48V7Ae0oWw2m3bpZhN3J0Ip/RNePCji1b/jzX/jts1BWx8MPN6bYWZekEph0HW/nbX1jc2t7cJOcXdv/+CwdHTcMkmGW+yRCa6E1DpVC8iQIl76Sa0ziQvB2M7mZ+4lrIxL1gOU+zEdKBEJRtFKnXqlx8IEL/qlslt15yCrxMtJGXI0+qWvXpiwLOYKmaTGdD03RX9CNQom+bTYywxPKRvRAe9aqmjMjT+Z3zsl51YJSZRoWwrJXP09MaGxMeM4sJ0xaFZ9mbif143w+jGnwiVZsgVWyKMkwIbPnSg0ZyjHlCmhb2VsCHVlKGNqGhD8JZfXiWty6rnVr37q3LtNo+jAKdwBhXw4BpqUIcGNIGBhGd4hTfn0Xlx3p2PReuak8+cwB84nz80xI9p</latexit> <latexit sha1_base64="tuGbIdo/cyKg4E8sD8kYZHvAio4=">AB73icbVBNS8NAEJ34WetX1aOXxSLUS0lE0GPRS48V7Ae0oWw2m3bpZhN3J0Ip/RNePCji1b/jzX/jts1BWx8MPN6bYWZekEph0HW/nbX1jc2t7cJOcXdv/+CwdHTcMkmGW+yRCa6E1DpVC8iQIl76Sa0ziQvB2M7mZ+4lrIxL1gOU+zEdKBEJRtFKnXqlx8IEL/qlslt15yCrxMtJGXI0+qWvXpiwLOYKmaTGdD03RX9CNQom+bTYywxPKRvRAe9aqmjMjT+Z3zsl51YJSZRoWwrJXP09MaGxMeM4sJ0xaFZ9mbif143w+jGnwiVZsgVWyKMkwIbPnSg0ZyjHlCmhb2VsCHVlKGNqGhD8JZfXiWty6rnVr37q3LtNo+jAKdwBhXw4BpqUIcGNIGBhGd4hTfn0Xlx3p2PReuak8+cwB84nz80xI9p</latexit> <latexit sha1_base64="tuGbIdo/cyKg4E8sD8kYZHvAio4=">AB73icbVBNS8NAEJ34WetX1aOXxSLUS0lE0GPRS48V7Ae0oWw2m3bpZhN3J0Ip/RNePCji1b/jzX/jts1BWx8MPN6bYWZekEph0HW/nbX1jc2t7cJOcXdv/+CwdHTcMkmGW+yRCa6E1DpVC8iQIl76Sa0ziQvB2M7mZ+4lrIxL1gOU+zEdKBEJRtFKnXqlx8IEL/qlslt15yCrxMtJGXI0+qWvXpiwLOYKmaTGdD03RX9CNQom+bTYywxPKRvRAe9aqmjMjT+Z3zsl51YJSZRoWwrJXP09MaGxMeM4sJ0xaFZ9mbif143w+jGnwiVZsgVWyKMkwIbPnSg0ZyjHlCmhb2VsCHVlKGNqGhD8JZfXiWty6rnVr37q3LtNo+jAKdwBhXw4BpqUIcGNIGBhGd4hTfn0Xlx3p2PReuak8+cwB84nz80xI9p</latexit> <latexit sha1_base64="venyS6Wb6PztQ7mRn1xiaVoAroY=">AB6HicbVBNS8NAEJ3Ur1q/qh69LBbBU0lE0GPRS48t2A9oQ9lsJ+3azSbsboQS+gu8eFDEqz/Jm/GbZuDtj4YeLw3w8y8IBFcG9f9dgobm1vbO8Xd0t7+weFR+fikreNUMWyxWMSqG1CNgktsGW4EdhOFNAoEdoLJ/dzvPKHSPJYPZpqgH9GR5CFn1FipWR+UK27VXYCsEy8nFcjRGJS/+sOYpRFKwTVue5ifEzqgxnAmelfqoxoWxCR9izVNItZ8tDp2RC6sMSRgrW9KQhfp7IqOR1tMosJ0RNWO96s3F/7xeasJbP+MySQ1KtlwUpoKYmMy/JkOukBkxtYQyxe2thI2poszYbEo2BG/15XSvqp6btVrXldqd3kcRTiDc7gED26gBnVoQAsYIDzDK7w5j86L8+58LFsLTj5zCn/gfP4AnXmMzA=</latexit> <latexit sha1_base64="venyS6Wb6PztQ7mRn1xiaVoAroY=">AB6HicbVBNS8NAEJ3Ur1q/qh69LBbBU0lE0GPRS48t2A9oQ9lsJ+3azSbsboQS+gu8eFDEqz/Jm/GbZuDtj4YeLw3w8y8IBFcG9f9dgobm1vbO8Xd0t7+weFR+fikreNUMWyxWMSqG1CNgktsGW4EdhOFNAoEdoLJ/dzvPKHSPJYPZpqgH9GR5CFn1FipWR+UK27VXYCsEy8nFcjRGJS/+sOYpRFKwTVue5ifEzqgxnAmelfqoxoWxCR9izVNItZ8tDp2RC6sMSRgrW9KQhfp7IqOR1tMosJ0RNWO96s3F/7xeasJbP+MySQ1KtlwUpoKYmMy/JkOukBkxtYQyxe2thI2poszYbEo2BG/15XSvqp6btVrXldqd3kcRTiDc7gED26gBnVoQAsYIDzDK7w5j86L8+58LFsLTj5zCn/gfP4AnXmMzA=</latexit> <latexit sha1_base64="venyS6Wb6PztQ7mRn1xiaVoAroY=">AB6HicbVBNS8NAEJ3Ur1q/qh69LBbBU0lE0GPRS48t2A9oQ9lsJ+3azSbsboQS+gu8eFDEqz/Jm/GbZuDtj4YeLw3w8y8IBFcG9f9dgobm1vbO8Xd0t7+weFR+fikreNUMWyxWMSqG1CNgktsGW4EdhOFNAoEdoLJ/dzvPKHSPJYPZpqgH9GR5CFn1FipWR+UK27VXYCsEy8nFcjRGJS/+sOYpRFKwTVue5ifEzqgxnAmelfqoxoWxCR9izVNItZ8tDp2RC6sMSRgrW9KQhfp7IqOR1tMosJ0RNWO96s3F/7xeasJbP+MySQ1KtlwUpoKYmMy/JkOukBkxtYQyxe2thI2poszYbEo2BG/15XSvqp6btVrXldqd3kcRTiDc7gED26gBnVoQAsYIDzDK7w5j86L8+58LFsLTj5zCn/gfP4AnXmMzA=</latexit> <latexit sha1_base64="venyS6Wb6PztQ7mRn1xiaVoAroY=">AB6HicbVBNS8NAEJ3Ur1q/qh69LBbBU0lE0GPRS48t2A9oQ9lsJ+3azSbsboQS+gu8eFDEqz/Jm/GbZuDtj4YeLw3w8y8IBFcG9f9dgobm1vbO8Xd0t7+weFR+fikreNUMWyxWMSqG1CNgktsGW4EdhOFNAoEdoLJ/dzvPKHSPJYPZpqgH9GR5CFn1FipWR+UK27VXYCsEy8nFcjRGJS/+sOYpRFKwTVue5ifEzqgxnAmelfqoxoWxCR9izVNItZ8tDp2RC6sMSRgrW9KQhfp7IqOR1tMosJ0RNWO96s3F/7xeasJbP+MySQ1KtlwUpoKYmMy/JkOukBkxtYQyxe2thI2poszYbEo2BG/15XSvqp6btVrXldqd3kcRTiDc7gED26gBnVoQAsYIDzDK7w5j86L8+58LFsLTj5zCn/gfP4AnXmMzA=</latexit> Subversion Attack I need H ( · ) H “crooked”

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

Lattice-based Signcryption without Random Oracles

Lattice-based Signcryption without Random Oracles

Lattice-based Signcryption without Random Oracles Junji Shikata Graduate School of Environment and Information Sciences, Yokohama National University, Japan Overview Lattice-based Cryptography

277 views • 26 slides
Security Analysis of Constructions Combining FIL Random Oracles Yannick Seurin and Thomas Peyrin

Security Analysis of Constructions Combining FIL Random Oracles Yannick Seurin and Thomas Peyrin

Security Analysis of Constructions Combining FIL Random Oracles Yannick Seurin and Thomas Peyrin France Tlcom R&amp;D and Universit de Versailles FSE 07, March 26 Intro Framework Computability Attacks Bounds Recap Applications

318 views • 19 slides
From Selective-ID to Full-ID IBS without Random Oracles Sanjit Chatterjee and Chethan Kamath

From Selective-ID to Full-ID IBS without Random Oracles Sanjit Chatterjee and Chethan Kamath

Overview Background The Transformation Conclusion and Future Work From Selective-ID to Full-ID IBS without Random Oracles Sanjit Chatterjee and Chethan Kamath Indian Institute of Science, Bangalore November 3, 2013 Overview Background The

1.34k views • 44 slides
Fixing Cracks in the Concrete: Random Oracles with Auxiliary Input, Revisited Yevgeniy Dodis

Fixing Cracks in the Concrete: Random Oracles with Auxiliary Input, Revisited Yevgeniy Dodis

Fixing Cracks in the Concrete: Random Oracles with Auxiliary Input, Revisited Yevgeniy Dodis New York University Joint work with Siyao Guo (Simons Institute, UC Berkeley) Jonathan Katz (University of Maryland) Hash Functions Are Ubiquitous

650 views • 40 slides
Random Oracles in a Quantum World Dan Boneh 1 ur Dagdelen 2 Marc Fischlin 2 Ozg Anja Lehmann

Random Oracles in a Quantum World Dan Boneh 1 ur Dagdelen 2 Marc Fischlin 2 Ozg Anja Lehmann

Introduction Positive Results Conclusion Random Oracles in a Quantum World Dan Boneh 1 ur Dagdelen 2 Marc Fischlin 2 Ozg Anja Lehmann 3 Christian Schaffner 4 Mark Zhandry 1 1 Stanford University, USA 2 CASED &amp; Darmstadt University of

768 views • 65 slides
Combiners for Backdoored Random Oracles Balthazar Bauer, Pooya Farshim, Sogol Mazaheri ENS,

Combiners for Backdoored Random Oracles Balthazar Bauer, Pooya Farshim, Sogol Mazaheri ENS,

Combiners for Backdoored Random Oracles Balthazar Bauer, Pooya Farshim, Sogol Mazaheri ENS, Paris TU Darmstadt Backdoors 1 Backdoors It makes more sense to address any security risks by developing intercept solutions during the design

808 views • 52 slides
Instantiating Random Oracles via UCEs Mihir Bellare Joint work with Sriram Keelveedhi UCSD

Instantiating Random Oracles via UCEs Mihir Bellare Joint work with Sriram Keelveedhi UCSD

Instantiating Random Oracles via UCEs Mihir Bellare Joint work with Sriram Keelveedhi UCSD 1/9/13 Bellare, Stanford RWC Workshop 1 The work reported on here is very much work in progress. The UCE definition has evolved since this talk and

774 views • 44 slides
Oracles and Tokens Prof. Tom Austin San Jos State University Oracles Motivation EVM

Oracles and Tokens Prof. Tom Austin San Jos State University Oracles Motivation EVM

Cryptocurrencies &amp; Security on the Blockchain Oracles and Tokens Prof. Tom Austin San Jos State University Oracles Motivation EVM execution must be deterministic. Cannot rely on outside information But sometimes that

591 views • 17 slides
Chaitins halting probability and the compression of strings using oracles George Barmpalias

Chaitins halting probability and the compression of strings using oracles George Barmpalias

Chaitins halting probability and the compression of strings using oracles George Barmpalias Joint work with Andrew Lewis Institute of Software Chinese Academy of Sciences Barcelona, July 2011 Question Random data lack internal structure

191 views • 18 slides
/k Introduction and content 2/37 Error-correcting pair - Generalized Reed-Solomon codes -

/k Introduction and content 2/37 Error-correcting pair - Generalized Reed-Solomon codes -

Error-correcting Pairs for a Public-key Cryptosystem Ruud Pellikaan g.r.pellikaan@tue.nl joint work with Irene Mrquez-Corbella Code-based Cryptography Workshop 2012 Lyngby, 9 May 2012 /k Introduction and content 2/37 Error-correcting

687 views • 37 slides
Codes Correcting Under- and Over-Shift Errors in Racetrack Memories Presented by: Van Khu Vu

Codes Correcting Under- and Over-Shift Errors in Racetrack Memories Presented by: Van Khu Vu

Codes Correcting Under- and Over-Shift Errors in Racetrack Memories Presented by: Van Khu Vu Joint work with Yeow Meng Chee, Han Mao Kiah, Alexander Vardy and Eitan Yaakobi 11th March 2019 Presented by: Van Khu Vu Codes Correcting Under- and

543 views • 26 slides
Error Codes Correcting Gary Lecture 11 toolkit CMU Preliminaries Setting Error of

Error Codes Correcting Gary Lecture 11 toolkit CMU Preliminaries Setting Error of

Rohan Error Codes Correcting Gary Lecture 11 toolkit CMU Preliminaries Setting Error of Correcting Codes Linear Error Correcting codes and Hadamard Codes Hamming Reed Solomon Code Definitions Basic Def An Error code is

291 views • 18 slides
Test Oracles and Test Script Generation in Combinatorial Testing Peter M. Kruse Berner &amp;

Test Oracles and Test Script Generation in Combinatorial Testing Peter M. Kruse Berner &amp;

Test Oracles and Test Script Generation in Combinatorial Testing Peter M. Kruse Berner &amp; Mattner Systemtechnik GmbH Berlin, Germany Overview Classification Tree Method Expected results Executable test scripts Test Oracles and

374 views • 25 slides
Training Deterministic Parsers with Non-Deterministic Oracles by Yoav Goldberg and Joakim

Training Deterministic Parsers with Non-Deterministic Oracles by Yoav Goldberg and Joakim

Training Deterministic Parsers with Non-Deterministic Oracles by Yoav Goldberg and Joakim Nivre, 2013 Seminarvortrag Pius Meinert July 13, 2018 Training Deterministic Parsers with Non-Deterministic Oracles root PRD SBJ DOBJ IOBJ

842 views • 47 slides
Oracles in TTCN-3 and UTP Ina Schieferdecker 2012, May 22nd, CREST Workshop, London Outline

Oracles in TTCN-3 and UTP Ina Schieferdecker 2012, May 22nd, CREST Workshop, London Outline

Oracles in TTCN-3 and UTP Ina Schieferdecker 2012, May 22nd, CREST Workshop, London Outline Oracles, Test Automation and (Test) Models Oracles in TTCN-3 Test Automation (Oracle) Examples Test oracle as part of a test case A test

326 views • 30 slides
Quantum Error-Correcting Codes by Concatenation Markus Grassl joint work with Bei Zeng Centre

Quantum Error-Correcting Codes by Concatenation Markus Grassl joint work with Bei Zeng Centre

Quantum Error-Correcting Codes by Concatenation QEC11 Second International Conference on Quantum Error Correction University of Southern California, Los Angeles, USA December 59, 2011 Quantum Error-Correcting Codes by Concatenation Markus

1.15k views • 41 slides
VIRGINIA NUCLEAR ENERGY CONSORTIUM VNECA Meeting Richmond, VA March 20, 2018

VIRGINIA NUCLEAR ENERGY CONSORTIUM VNECA Meeting Richmond, VA March 20, 2018

VIRGINIA NUCLEAR ENERGY CONSORTIUM VNECA Meeting Richmond, VA March 20, 2018 www.virginianuclear.org Update Day on the Hill Meeting with Governor Northam Briefing for Governors Key Energy Officials Energy Workforce Cluster

424 views • 7 slides
CAMPUS PUBLIC SAFETY Welcome Welcome Purpose of Webinar Presenters Calvin Hodnett

CAMPUS PUBLIC SAFETY Welcome Welcome Purpose of Webinar Presenters Calvin Hodnett

Guide for Developing High-Quality Emergency Operations Plans for Institutions of Higher Education: A CLOSER LOOK: CAMPUS PUBLIC SAFETY Welcome Welcome Purpose of Webinar Presenters Calvin Hodnett Senior Management Analyst Dept of

599 views • 39 slides
Quotients of strongly proper posets, and related topics Sean Cox Virginia Commonwealth

Quotients of strongly proper posets, and related topics Sean Cox Virginia Commonwealth

Quotients of strongly proper posets, and related topics Sean Cox Virginia Commonwealth University scox9@vcu.edu Forcing and its Applications Retrospective Workshop, March 2015 1 / 50 Joint work with John Krueger. 2 / 50 A conjecture of

537 views • 50 slides
2020-2021 College at wise Undergraduate tuition AND FEE proposal UVA Wises Value Proposition

2020-2021 College at wise Undergraduate tuition AND FEE proposal UVA Wises Value Proposition

2020-2021 College at wise Undergraduate tuition AND FEE proposal UVA Wises Value Proposition Washington Monthly, Most Established in 1954 as a division of UVA Bang For the Buck Award 2100 students 31 majors, 37 minors, 8

250 views • 6 slides
The complexity of club filters Philipp Moritz Lcke Joint work in progress with Sean Cox (VCU

The complexity of club filters Philipp Moritz Lcke Joint work in progress with Sean Cox (VCU

The complexity of club filters Philipp Moritz Lcke Joint work in progress with Sean Cox (VCU Richmond) Mathematisches Institut Rheinische Friedrich-Wilhelms-Universitt Bonn http://www.math.uni-bonn.de/people/pluecke/ Fifth Workshop on

456 views • 33 slides
STRUCTURAL CHALLENGES: THE LABOR MARKET AND BROADER ECONOMY Victor Chen, PhD Virginia

STRUCTURAL CHALLENGES: THE LABOR MARKET AND BROADER ECONOMY Victor Chen, PhD Virginia

STRUCTURAL CHALLENGES: THE LABOR MARKET AND BROADER ECONOMY Victor Chen, PhD Virginia Commonwealth University June 2017 Outline of the Talk Recent trends in todays labor market, and the specific situation of the deep poor

635 views • 32 slides
Automated Conjecturing for Proof Discovery Craig Larson (joint work with Nico Van Cleemput)

Automated Conjecturing for Proof Discovery Craig Larson (joint work with Nico Van Cleemput)

Automated Conjecturing for Proof Discovery Craig Larson (joint work with Nico Van Cleemput) Virginia Commonwealth University Ghent University CombinaTexas Texas A&amp;M University 8 May 2016 Kiran ChilakamarriOn Conjectures Goal To tell

1.43k views • 75 slides
Random Thoughts on 5G Security Prof. Jeffrey H. Reed Bradley Dept. of ECE, Virginia Tech Interim

Random Thoughts on 5G Security Prof. Jeffrey H. Reed Bradley Dept. of ECE, Virginia Tech Interim

Random Thoughts on 5G Security Prof. Jeffrey H. Reed Bradley Dept. of ECE, Virginia Tech Interim Director, Commonwealth Cyber Initiative Founding Director, Wireless@Virginia Tech reedjh@vt.edu (540) 231-2972 Portions of this presentation

525 views • 18 slides

More recommend