USENIX Security '23 - Automated Analysis of Protocols that use Authenticated Encryption: How...

USENIX Security '23 - Automated Analysis of Protocols that use Authenticated Encryption: How Subtle AEAD Differences can impact Protocol Security

Cas Cremers, CISPA Helmholtz Center for Information Security; Alexander Dax, CISPA Helmholtz Center for Information Security and Saarland University; Charlie Jacomme, Inria Paris; Mang Zhao, CISPA Helmholtz Center for Information Security and Saarland University
Distinguished Paper Award Winner

Many modern security protocols such as TLS, WPA2, WireGuard, and Signal use a cryptographic primitive called Authenticated Encryption (optionally with Authenticated Data), …

aead analysis automated center dax encryption impact information information security paris protocol protocols protocol security security university usenix usenix security