Paper at ESORICS 2022 in Copenhagen

28 September 2022

This week our paper "Unlinkable Delegation of WebAuthn Credentials" was presented at the 27th European Symposium on Research in Computer Security (ESORICS 2022) in Copenhagen, Denmark. The talk was delivered by Nick Frymann, an external PhD student of Prof. Manulis at the University of Surrey, UK.

This paper builds on our earlier work on Asynchronous Remote Key Generation (ARKG), a new primitive for generation of cryptographic key pairs, developed in collaboration with Yubico in 2020. We showed how ARKG can be used to enable delegation of credentials for WebAuthn protected accounts by account owners to their proxies in a way that is controllable and preserves the original security and privacy properties of the WebAuthn standard.

WebAuthn is a new standard for web authentication that is expected to replace passwords and other insecure authentication methods by adopting digital signatures and security keys.

Nick Frymann's successful PhD viva in the UK

Nick Frymann, an external PhD student of Prof. Manulis, has defended his PhD viva at the University of Surrey in the United Kingdom. Nick's PhD thesis titled "Asynchronous Remote Key Generation and its Applications in W3C WebAuthn and FIDO" proposed several technical contributions to the WebAuthn standard, aiming to address scenarios where users lose authentication tokens or need to delegate access to their web accounts without compromising privacy and security. Dr. Frymann serves as a Lecturer at the University of Surrey, where Prof. Manulis has a Visiting Professor appointment.

Invited Talk at SKECH 2024 in Bertinoro

At the 5th workshop "SKECH@BiCi: Secure Key Exchange and Channel Protocols" Prof. Manulis gave an invited talk on "Asynchronous Remote Key Generation (ARKG) and its Applications" on June 5th in Bertinoro, Italy. ARKG is a new variant of a key encapsulation mechanism (KEM) that allows a sender to encapsulate a cryptographic key pair (sk, pk) for the intended recipient in such a way that only the recipient can later compute the private key sk. The pair (sk, pk) can be used as its own freshly generated key pair in public key cryptosystems. Since its introduction in 2020, ARKG has proven to be a versatile building block that enables a range of different privacy-protecting applications in the field of authentication and blockchains. The biennial SKECH workshop brings together renowned researchers working on cryptographic protocols for secure messaging and key management to discuss the latest research developments. Participation in a SKECH workshop is only possible with a prior personal invitation.

PACY at EUROCRYPT 2024 in Zurich

The annual EUROCRYPT conference, which was held in Zurich in May 2024, is one of the most important scientific conferences in the field of cryptography and PACY Lab was there. Jerome Nguyen (pictured) presented the results of the new research work from his joint publication with Prof. Manulis. The work entitled “Fully Homomorphic Encryption beyond IND-CCA1 Security: Integrity through Verifiability” sets new security standards for fully homomorphic encryption (FHE) and strengthens all previously known security requirements for such schemes. The paper also presents design approaches on how to achieve these stronger security properties for known FHE constructions.

Papers accepted at EUROCRYPT 2024 and USENIX Security 2024

A strong start of the year for the PACY Lab with two papers accepted to flagship conferences on the topic of confidential computing over encrypted data: "Fully Homomorphic Encryption beyond IND-CCA1 Security: Integrity through Verifiability" accepted at EUROCRYPT 2024 introduces so-far strongest FHE security guarantees and general techniques achieving integrity and verifiability for (outsourced) FHE computations. It is also the first publication of Jérôme Nguyen. "FEASE: Fast and Expressive Asymmetric Searchable Encryption" appearing at USENIX Security 2024 is a result of collaboration with researchers from Surrey Centre for Cyber Security and our contribution to the EU H2020 project SECANT. The paper features the so-far fastest construction and implementation of a public key encryption scheme supporting private search queries over encrypted indexed data.

Co-Organisation of SECITC 2023 in Bucharest

SECITC (International Conference on Security for Information Technology and Communications) is an annual international conference held in Romania that deals with all theoretical and practical aspects of information technology and communications security. Prof. Manulis was invited to participate in SECITC 2023 in Bukharest from November 23rd to 24th as a PC Chair. The conference program included 14 peer-reviewed papers and 3 invited talks given by Prof. Bart Preneel from KU Leuven, Prof. Ahmad-Reza Sadeghi from TU Darmstadt, and Prof. Ivan Visconti from the University of Salerno. The publication of conference proceedings in an LNCS volume by Springer is expected for 2024.

PACY at ACNS 2023 in Kyoto

Last week Prof. Manulis, Hugo Nartz and Matteo Salvino attended the 21st International Conference on Applied Cryptography and Network Security (ACNS) in Kyoto, Japan. The conference programme featured two papers co-authored by PACY. The first paper titled "Revocable Hierarchical Attribute-based Signatures from Lattices" was presented by Hugo Nartz (on picture). This paper is our joint work with Daniel Gardham and Nick Frymann from the Surrey Centre for Cyber Security in the UK. The second paper titled "On the Complete Non-Malleability of the Fujisaki-Okamoto Transform" was presented by Matteo Salvino and is his joint work with Daniele Friolo and Daniele Venturi from La Sapienza, University of Rome in Italy.

PACY at PhD summer school in Croatia

Last week Jerome Nguyen, Hugo Nartz and Matteo Salvino attended international PhD summer school on Real-world Crypto and Privacy 2023, which was held in Croatia and organised jointly by the researchers from Radboud University, ETH Zurich, and University of Zagreb. The school featured many interesting lectures on different aspects of cryptography and privacy, along with an exciting social programme and networking opportunities. We would like to thank the organisers for the provided generous support towards the participation of our PhD students in this event.