Filter by content type

Select one or more filters. This choice will reload the page to display the filtered results.

Remove all filters

669 results

    • Seminar

    • SoSysec

    Automated verification of privacy-type properties for security protocols

    • March 16, 2018

    • Inria Center of the University of Rennes - - Petri/Turing room

    Speaker : Ivan Gazeau (LORIA, Inria Nancy)

    The applied pi-calculus is a powerful framework to model protocols and to define security properties. In this symbolic model, it is possible to verify automatically complex security properties such as strong secrecy, anonymity and unlinkability properties which are based on equivalence of processes.In this talk, we will see an overview of a verification method used by a tool, Akiss. The tool is[…]
    • Seminar

    • SoSysec

    A Compositional and Complete approach to Verifying Privacy Properties using the Applied Pi-calculus

    • February 08, 2019

    • Inria Center of the University of Rennes - - Petri/Turing room

    Speaker : Ross Horne (University of Luxembourg)

    The pi-calculus was introduced for verifying cryptographic protocols by Abadi and Fournet in 2001. They proposed an equivalence technique, called bisimilarity, useful for verify privacy properties. It is widely acknowledged (cf. Paige and Tarjan 1987), that bisimilarity is more efficient to check than trace equivalence; however, surprisingly, tools based on the applied pi-calculus typically still[…]
    • Seminar

    • SoSysec

    How to decrypt without keys with GlobalPlatform SCP02 protocol

    • July 06, 2018

    • Inria Center of the University of Rennes - - Petri/Turing room

    Speaker : par Loic Ferreira (Orange Labs, IRISA)

    The GlobalPlatform SCP02 protocol is a security protocol implemented in smart cards, and used by transport companies, in the banking world and by mobile network operators (UICC/SIM cards). We describe how to perform a padding oracle attack against SCP02. The attack allows an adversary to efficiently retrieve plaintext bytes from an encrypted data field. We provide results of our experiments done[…]
    • Seminar

    • SoSysec

    Breaking and fixing HB+DB: A Short Tale of Provable vs Experimental Security and Lightweight Designs

    • February 02, 2018

    • Inria Center of the University of Rennes - - Petri/Turing room

    Speaker : Ioana Boureanu (University of Surrey)

    HB+ is a well-know authentication scheme purposely designed to be lightweight. However, HB+ is vulnerable to a key-recovery, man-in-the-middle (MiM) attack dubbed GRS. To this end, at WiSec2015, the HB+DB protocol added a distance-bounding dimension to HB+, which was experimentally shown to counteract the GRS attack.In this talk, we will exhibit however a number of security flaws in the HB+DB[…]
    • Seminar

    • SoSysec

    Voting : You Can’t Have Privacy without Individual Verifiability

    • March 01, 2019

    • Inria Center of the University of Rennes - - Petri/Turing room

    Speaker : Joseph Lallemand (Loria)

    Electronic voting typically aims at two main security goals: vote privacy and verifiability. These two goals are often seen as antagonistic and some national agencies even impose a hierarchy between them: first privacy, and then verifiability as an additional feature. Verifiability typically includes individual verifiability (a voter can check that her ballot is counted); universal verifiability […]
    • Seminar

    • SoSysec

    Binary Edwards Curves for intrinsically secure ECC implementations for the IoT

    • September 07, 2018

    • Inria Center of the University of Rennes - - Petri/Turing room

    Speaker : Antoine Loiseau (CEA)

    Even if recent advances in public key cryptography tend to focus on algorithms able to survive the post quantum era, at present, there is a urgent need to propose fast, low power and securely implemented cryptography to address the immediate security challenges of the IoT. In this talk, we present a new set of Binary Edwards Curves which have been defined to achieve the highest security levels (up[…]