{"id":"https://openalex.org/W2561521908","doi":"https://doi.org/10.14722/ndss.2016.23418","title":"Transcript Collision Attacks: Breaking Authentication in TLS, IKE, and SSH","display_name":"Transcript Collision Attacks: Breaking Authentication in TLS, IKE, and SSH","publication_year":2016,"publication_date":"2016-01-01","ids":{"openalex":"https://openalex.org/W2561521908","doi":"https://doi.org/10.14722/ndss.2016.23418","mag":"2561521908"},"language":"en","primary_location":{"id":"doi:10.14722/ndss.2016.23418","doi":"https://doi.org/10.14722/ndss.2016.23418","is_oa":true,"landing_page_url":"https://doi.org/10.14722/ndss.2016.23418","pdf_url":"https://doi.org/10.14722/ndss.2016.23418","source":{"id":"https://openalex.org/S4306420590","display_name":"Network and Distributed System Security Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings 2016 Network and Distributed System Security Symposium","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://doi.org/10.14722/ndss.2016.23418","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5026297326","display_name":"Karthikeyan Bhargavan","orcid":"https://orcid.org/0000-0002-3152-8997","observed_orcids":["https://orcid.org/0000-0002-3152-8997"]},"institutions":[{"id":"https://openalex.org/I1326498283","display_name":"Institut national de recherche en sciences et technologies du num\u00e9rique","ror":"https://ror.org/02kvxyf05","country_code":"FR","type":"government","lineage":["https://openalex.org/I1326498283"]},{"id":"https://openalex.org/I4405259063","display_name":"PROSECCO: Programming securely with cryptography","ror":"https://ror.org/01nryz461","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1326498283","https://openalex.org/I4405257605","https://openalex.org/I4405259063"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Karthikeyan Bhargavan","raw_affiliation_strings":["INRIA","PROSECCO - Programming securely with cryptography (France)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"INRIA","institution_ids":["https://openalex.org/I1326498283"]},{"raw_affiliation_string":"PROSECCO - Programming securely with cryptography (France)","institution_ids":["https://openalex.org/I4405259063"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5008914089","display_name":"Ga\u00ebtan Leurent","orcid":"https://orcid.org/0000-0001-5903-9055","observed_orcids":["https://orcid.org/0000-0001-5903-9055"]},"institutions":[{"id":"https://openalex.org/I1326498283","display_name":"Institut national de recherche en sciences et technologies du num\u00e9rique","ror":"https://ror.org/02kvxyf05","country_code":"FR","type":"government","lineage":["https://openalex.org/I1326498283"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Gaetan Leurent","raw_affiliation_strings":["INRIA","SECRET - Security, Cryptology and Transmissions (France)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"INRIA","institution_ids":["https://openalex.org/I1326498283"]},{"raw_affiliation_string":"SECRET - Security, Cryptology and Transmissions (France)","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":8.6149,"has_fulltext":true,"cited_by_count":114,"citation_normalized_percentile":{"value":0.98479769,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9639000296592712,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9639000296592712,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.027799999341368675,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.002099999925121665,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/md5","display_name":"MD5","score":0.7540000081062317},{"id":"https://openalex.org/keywords/sha-1","display_name":"SHA-1","score":1.0},{"id":"https://openalex.org/keywords/key-agreement-protocol","display_name":"key exchange","score":0.8040000200271606},{"id":"https://openalex.org/keywords/tls","display_name":"TLS","score":0.46399998664855957},{"id":"https://openalex.org/keywords/ikev2","display_name":"IKEv2","score":0.8460000157356262},{"id":"https://openalex.org/keywords/ssh","display_name":"SSH","score":0.7630000114440918},{"id":"https://openalex.org/keywords/impersonation-attacks","display_name":"impersonation attacks","score":0.9800000190734863},{"id":"https://openalex.org/keywords/downgrade-attacks","display_name":"downgrade attacks","score":0.9890000224113464},{"id":"https://openalex.org/keywords/second-preimage-resistance","display_name":"second preimage resistance","score":0.8069999814033508},{"id":"https://openalex.org/keywords/sloths","display_name":"sloths","score":0.6589999794960022},{"id":"https://openalex.org/keywords/tls-1-3","display_name":"TLS 1.3","score":0.7820000052452087},{"id":"https://openalex.org/keywords/client-authentication","display_name":"client authentication","score":0.550000011920929},{"id":"https://openalex.org/keywords/server-authentication","display_name":"server authentication","score":0.8190000057220459},{"id":"https://openalex.org/keywords/channel-binding","display_name":"channel binding","score":0.6700000166893005}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7574402093887329},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.7235122919082642},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6193206310272217},{"id":"https://openalex.org/C7608002","wikidata":"https://www.wikidata.org/wiki/Q477202","display_name":"Cryptographic hash function","level":3,"score":0.549751341342926},{"id":"https://openalex.org/C157172786","wikidata":"https://www.wikidata.org/wiki/Q185235","display_name":"MD5","level":3,"score":0.48009613156318665},{"id":"https://openalex.org/C148176105","wikidata":"https://www.wikidata.org/wiki/Q206494","display_name":"Transport Layer Security","level":3,"score":0.44860225915908813},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.43198898434638977},{"id":"https://openalex.org/C118463975","wikidata":"https://www.wikidata.org/wiki/Q220849","display_name":"Digital signature","level":3,"score":0.42969435453414917},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.42396894097328186},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4026584029197693},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.24425578117370605}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.14722/ndss.2016.23418","doi":"https://doi.org/10.14722/ndss.2016.23418","is_oa":true,"landing_page_url":"https://doi.org/10.14722/ndss.2016.23418","pdf_url":"https://doi.org/10.14722/ndss.2016.23418","source":{"id":"https://openalex.org/S4306420590","display_name":"Network and Distributed System Security Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings 2016 Network and Distributed System Security Symposium","raw_type":"proceedings-article"},{"id":"pmh:oai:HAL:hal-01244855v1","doi":null,"is_oa":true,"landing_page_url":"https://inria.hal.science/hal-01244855","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4405252976","host_organization_name":"Centre pour la Communication Scientifique Directe","host_organization_lineage":["https://openalex.org/I4405252976"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Network and Distributed System Security Symposium -- NDSS 2016, Feb 2016, San Diego, United States. ⟨10.14722/ndss.2016.23418⟩","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"doi:10.14722/ndss.2016.23418","doi":"https://doi.org/10.14722/ndss.2016.23418","is_oa":true,"landing_page_url":"https://doi.org/10.14722/ndss.2016.23418","pdf_url":"https://doi.org/10.14722/ndss.2016.23418","source":{"id":"https://openalex.org/S4306420590","display_name":"Network and Distributed System Security Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings 2016 Network and Distributed System Security Symposium","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2561521908.pdf","grobid_xml":"https://content.openalex.org/works/W2561521908.grobid-xml"},"referenced_works_count":40,"referenced_works":["https://openalex.org/W81015123","https://openalex.org/W1506423323","https://openalex.org/W1512933114","https://openalex.org/W1526000324","https://openalex.org/W1549228503","https://openalex.org/W1566345534","https://openalex.org/W1567888865","https://openalex.org/W1618185284","https://openalex.org/W1975344666","https://openalex.org/W1982774175","https://openalex.org/W1993745906","https://openalex.org/W2008272678","https://openalex.org/W2016747171","https://openalex.org/W2019816098","https://openalex.org/W2071593615","https://openalex.org/W2094250919","https://openalex.org/W2099461076","https://openalex.org/W2103239853","https://openalex.org/W2107506969","https://openalex.org/W2129743776","https://openalex.org/W2138779530","https://openalex.org/W2141113494","https://openalex.org/W2149373482","https://openalex.org/W2153041122","https://openalex.org/W2164428090","https://openalex.org/W2182371770","https://openalex.org/W2236598634","https://openalex.org/W2266218113","https://openalex.org/W2272084235","https://openalex.org/W2283760980","https://openalex.org/W2288917395","https://openalex.org/W2505363557","https://openalex.org/W2549957324","https://openalex.org/W2752061190","https://openalex.org/W2915352631","https://openalex.org/W3122200175","https://openalex.org/W4210531213","https://openalex.org/W4242050417","https://openalex.org/W4248846263","https://openalex.org/W6682035273"],"related_works":["https://openalex.org/W2288917395","https://openalex.org/W7100658053","https://openalex.org/W7145456885","https://openalex.org/W3031517489","https://openalex.org/W1988809392","https://openalex.org/W4210533431","https://openalex.org/W2077119944","https://openalex.org/W1993745906","https://openalex.org/W2121186966","https://openalex.org/W1984484752"],"abstract_inverted_index":{"In":[0],"response":[1],"to":[2,14,36,170],"high-profile":[3],"attacks":[4,87,108,127,143,154],"that":[5,55,92],"exploit":[6],"hash":[7,33,101,185],"function":[8],"collisions,":[9],"software":[10],"vendors":[11],"have":[12,165,193],"started":[13],"phase":[15],"out":[16],"the":[17,99,140,145,161,176,197],"use":[18,57],"of":[19,84,183],"MD5":[20],"and":[21,50,67,76,104,118,125,132,164,190,201],"SHA-1":[22],"in":[23,39,58,128,149,167,187,196],"third-party":[24],"digital":[25],"signature":[26],"applications":[27],"such":[28,46],"as":[29,47,135],"X.509":[30],"certificates.However,":[31],"weak":[32,184],"constructions":[34,42,147],"continue":[35],"be":[37],"used":[38,148],"various":[40],"cryptographic":[41,146],"within":[43],"mainstream":[44,188],"protocols":[45,60,91],"TLS,":[48],"IKE,":[49],"SSH,":[51],"because":[52],"practitioners":[53],"argue":[54],"their":[56],"these":[59,138,150],"relies":[61],"only":[62],"on":[63,88,94,98,109,144,155],"second":[64],"preimage":[65],"resistance,":[66],"hence":[68],"is":[69],"unaffected":[70],"by":[71],"collisions.This":[72],"paper":[73],"systematically":[74],"investigates":[75],"debunks":[77],"this":[78],"argument.We":[79],"identify":[80],"a":[81],"new":[82],"class":[83],"transcript":[85],"collision":[86],"key":[89],"exchange":[90],"rely":[93],"efficient":[95],"collisionfinding":[96],"algorithms":[97],"underlying":[100],"constructions.We":[102],"implement":[103],"demonstrate":[105],"concrete":[106],"credentialforwarding":[107],"TLS":[110,114,119,129,156,172,202],"1.2":[111],"client":[112],"authentication,":[113,117],"1.3":[115,203],"server":[116],"channel":[120],"bindings.We":[121],"describe":[122],"almost-practical":[123],"impersonation":[124],"downgrade":[126],"1.1,":[130],"IKEv2":[131],"SSH-2.As":[133],"far":[134],"we":[136],"know,":[137],"are":[139],"first":[141],"collision-based":[142],"popular":[151],"protocols.Our":[152],"practical":[153],"were":[157],"responsibly":[158],"disclosed":[159],"(under":[160],"name":[162],"SLOTH)":[163],"resulted":[166],"security":[168],"updates":[169],"several":[171],"libraries.Our":[173],"analysis":[174],"demonstrates":[175],"urgent":[177],"need":[178],"for":[179],"disabling":[180],"all":[181],"uses":[182],"functions":[186],"protocols,":[189],"our":[191],"recommendations":[192],"been":[194],"incorporated":[195],"upcoming":[198],"Token":[199],"Binding":[200],"protocols.":[204]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":10},{"year":2022,"cited_by_count":11},{"year":2021,"cited_by_count":12},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":14},{"year":2018,"cited_by_count":15},{"year":2017,"cited_by_count":13},{"year":2016,"cited_by_count":11}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2017-01-06T00:00:00"}