The Security Impact of a New Cryptographic Library

By Daniel J. Bernstein, Tanja Lange, Peter Schwabe. 2012

272 citations recorded by the source corpus.

Subfields: Artificial Intelligence, Computer Vision and Pattern Recognition

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Artificial Intelligence

In Computer Vision and Pattern Recognition

Citations in the corpus

Ekiden: A Platform for Confidentiality-Preserving, Trustworthy, and Performant Smart Contracts (2018, neutral): “, crypto libraries avoid certain data-dependent operations [16]); and generalizing such protections remains challenging.”
A survey of microarchitectural timing attacks and countermeasures on contemporary hardware (2016, methodology): “Constant-time techniques are used extensively in the design of the NaCl library [27], which is intended to avoid many of the vulnerabilities discovered in OpenSSL.”
FLUSH+RELOAD: A High Resolution, Low Noise, L3 Cache Side-Channel Attack (2014, background): “Techniques for constant time computation have been explored in the NaCl cryptographic library [10].”
Last-Level Cache Side-Channel Attacks are Practical (2015, unknown): “All g[0] g[1] g[2] g[3] g[4] g[5] g[6] g[7]”
Charm: a framework for rapidly prototyping cryptosystems (2013, background): “More recently, Dan Bernstein’s NaCl (or “salt”) [12] software library in C/C++ provides an easy-to-use interface (e.”
CATalyst: Defeating last-level cache side channel attacks in cloud computing (2016, background): “Such constant time implementations avoid secret-dependent memory accesses and branches [5, 6].”
Secure Multiparty Computation from SGX (2017, methodology): “We use elliptic curves for both the key exchange (Diffie-Hellman) and signatures, and a combination of the Salsa20 and Poly1305 encryption and authentication schemes [8] for authenticated encryption.”
Build It, Break It, Fix It: Contesting Secure Development (2016, background): “dom in the security community: submissions that fared well through the break-it phase made heavy use of existing highlevel cryptographic libraries with few “knobs” that allow for incorrect usage[3].”
CRYSTALS - Kyber: A CCA-Secure Module-Lattice-Based KEM (2017, unknown): “The reason is that this simplifies implementation with non-incremental hash APIs, such as the ones used in the SUPERCOP benchmarking framework [14] and the Networking and Cryptography library (NaCl) [15].”