4 papers
Reverse Online Guessing Attacks on PAKE Protocols
Eloise Christian, Tejas Gadwalkar, Arthur Azevedo de Amorim +1
Though not yet widely deployed, password-authenticated key exchange (PAKE) protocols have been the subject of several recent standardization efforts, partly because of their resist…
Analysis of the Security Design, Engineering, and Implementation of the SecureDNA System
Alan T. Sherman, Jeremy J. Romanik Romano, Edward Zieglar +3
We analyze security aspects of the SecureDNA system regarding its system design, engineering, and implementation. This system enables DNA synthesizers to screen order requests agai…
Cryptographic Binding Should Not Be Optional: A Formal-Methods Analysis of FIDO UAF Channel Binding
Enis Golaszewski, Alan T. Sherman, Edward Zieglar +2
As a case study in cryptographic binding, we present a formal-methods analysis of the cryptographic channel binding mechanisms in the Fast IDentity Online (FIDO) Universal Authenti…
Formal Methods Analysis of the Secure Remote Password Protocol
Alan T. Sherman, Erin Lanus, Moses Liskov +7
We analyze the Secure Remote Password (SRP) protocol for structural weaknesses using the Cryptographic Protocol Shapes Analyzer (CPSA) in the first formal analysis of SRP (specific…