Explanipedia

Introduction to the Special Issue on TLS 1.3 Open

Colin Boyd · 2021

The Transport Layer Security (TLS) protocol is known as one of the most important and widely-used security protocols.It emerged in the 1990s from the proprietary SSL protocol, originally designed for securing web traffic in the Netscape br…

A Modern View on Forward Security Open

Colin Boyd, Kai Gellert · 2020

Forward security ensures that compromise of entities today does not impact the security of cryptographic primitives employed in the past. Such a form of security is regarded as increasingly important in the modern world due to the existenc…

A Blockchain Model in Tamarin and Formal Analysis of Hash Time Lock Contract Open

Colin Boyd, Kristian Gjøsteen, Shuang Wu · 2020

Formal analysis and verification methods can aid the design and validation of security properties in blockchain based protocols. However, to generate a reasonable and correct verification, a proper model for the blockchain is needed. In th…

Towards protected VNFs for multi-operator service delivery Open

Enio Marku, Gergely Biczók, Colin Boyd · 2019

Value-added 5G verticals are foreseen to be delivered as a service chain over multiple network operators with extensive outsourcing of Virtual Network Functions (VNFs). In this short paper we introduce the initial design of SafeLib, a soft…

Fast and Secure Updatable Encryption Open

Colin Boyd, Gareth T. Davies, Kristian Gjøsteen, Yao Jiang · 2019

Updatable encryption allows a client to outsource ciphertexts to some untrusted server and periodically rotate the encryption key. The server can update ciphertexts from an old key to a new key with the help of an update token, received fr…

OWASP Top 10 - Do Startups Care? Open

Halldis Margrete Søhoel, Martin Gilje Jaatun, Colin Boyd · 2018

In a cut-throat world where time-to-market can be the difference between success and failure, it can be tempting for startups to think “let’s get it to work first, and then we’ll worry about security later.” However, major security flaws h…

Offline Assisted Group Key Exchange. Open

Colin Boyd, Gareth T. Davies, Kristian Gjøsteen, Yao Jiang · 2018

We design a group key exchange protocol with forward secrecy where most of the participants remain offline until they wish to compute the key. This is well suited to a cloud storage environment where users are often offline, but have onlin…

Security notions for cloud storage and deduplication. Open

Colin Boyd, Gareth T. Davies, Kristian Gjøsteen, Mohsen Toorani, Håvard Raddum · 2017

Cloud storage is in widespread use by individuals and enterprises but introduces a wide array of attack vectors. A basic step for users is to encrypt their data, yet it is not obvious what security properties are required for such encrypti…

Key recovery: Inert and public Open

Colin Boyd, Xavier Boyen, Christopher Carr, Thomas Haines · 2017

We propose a public key infrastructure framework, inspired by modern distributed cryptocurrencies, that allows for tunable key escrow, where the availability of key escrow is only provided under strict conditions and enforced through crypt…

Secure Channels and Termination: The Last Word on TLS. Open

Colin Boyd, Britta Hale · 2017

Secure channels are one of the most pivotal building blocks of cryptography today. Internet connections, secure messaging, protected IoT data, etc., all rely upon the security of the underlying channel. In this work we define channel proto…

Side channels in deduplication: trade-offs between leakage and efficiency. Open

Frederik Armknecht, Colin Boyd, Gareth T. Davies, Kristian Gjøsteen, Mohsen Toorani · 2016

Deduplication removes redundant copies of files or data blocks stored on the cloud. Clientside deduplication, where the client only uploads the file upon the request of the server, provides major storage and bandwidth savings, but introduc…

Content-independent embedding scheme for multi-modal medical image watermarking Open

Hussain Nyeem, Wageeh Boles, Colin Boyd · 2015

Our proposed image-content independent embedding scheme is modality-wise consistent, and maintains a good image quality of RONI while keeping all other pixels in the image untouched. Thus, with an appropriate watermarking framework (i.e., …

From Stateless to Stateful: Generic Authentication and Authenticated Encryption Constructions with Application to TLS. Open

Colin Boyd, Britta Hale, Stig F. Mjølsnes, Douglas Stebila · 2015

Authentication and authenticated encryption with associated data (AEAD) are applied in cryptographic protocols to provide message integrity. The definitions in the literature and the constructions used in practice all protect against forge…

Content-independent embedding scheme for multi-modal medical image watermarking Open

Hussain Nyeem, Wageeh Boles, Colin Boyd · 2015

As the increasing adoption of information technology continues to offer better distant medical services, the distribution of, and remote access to digital medical images over public networks continues to grow significantly. Such use of med…

A Guide to Fully Homomorphic Encryption. Open

Frederik Armknecht, Colin Boyd, Christopher Carr, Kristian Gjøsteen, Angela Jäschke , et al. · 2015

Fully homomorphic encryption (FHE) has been dubbed the holy grail of cryptography, an elusive goal which could solve the IT world’s problems of security and trust. Research in the area exploded after 2009 when Craig Gentry showed that FHE …

Protecting Encrypted Cookies from Compression Side-Channel Attacks Open

Janaka Alawatugoda, Douglas Stebila, Colin Boyd · 2015

Continuous After-the-Fact Leakage-Resilient eCK-Secure Key Exchange Open

Janaka Alawatugoda, Douglas Stebila, Colin Boyd · 2015

Colin Boyd YOU? Author Swipe