{"id":"https://openalex.org/W4384811565","doi":"https://doi.org/10.1109/eurosp57164.2023.00048","title":"From Dragondoom to Dragonstar: Side-channel Attacks and Formally Verified Implementation of WPA3 Dragonfly Handshake","display_name":"From Dragondoom to Dragonstar: Side-channel Attacks and Formally Verified Implementation of WPA3 Dragonfly Handshake","publication_year":2023,"publication_date":"2023-07-01","ids":{"openalex":"https://openalex.org/W4384811565","doi":"https://doi.org/10.1109/eurosp57164.2023.00048"},"language":"en","primary_location":{"id":"doi:10.1109/eurosp57164.2023.00048","doi":"https://doi.org/10.1109/eurosp57164.2023.00048","is_oa":false,"landing_page_url":"https://doi.org/10.1109/eurosp57164.2023.00048","pdf_url":null,"source":{"id":"https://openalex.org/S4306418620","display_name":"IEEE European Symposium on Security and Privacy","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE 8th European Symposium on Security and Privacy (EuroS&P)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2307.09243","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5057707662","display_name":"Daniel De Almeida Braga","orcid":"https://orcid.org/0000-0001-5083-5434","observed_orcids":["https://orcid.org/0000-0001-5083-5434"]},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I2802519937","display_name":"Institut de Recherche en Informatique et Syst\u00e8mes Al\u00e9atoires","ror":"https://ror.org/00myn0z94","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I2802519937","https://openalex.org/I28221208","https://openalex.org/I4210127572","https://openalex.org/I4210159245","https://openalex.org/I56067802"]},{"id":"https://openalex.org/I56067802","display_name":"Universit\u00e9 de Rennes","ror":"https://ror.org/015m7wh34","country_code":"FR","type":"education","lineage":["https://openalex.org/I56067802"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Daniel De Almeida Braga","raw_affiliation_strings":["Univ Rennes,CNRS, IRISA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Univ Rennes,CNRS, IRISA","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I2802519937","https://openalex.org/I56067802"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071663172","display_name":"Natalia Kulatova","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I1291431925","display_name":"Mozilla Foundation","ror":"https://ror.org/01y8r3379","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1291431925"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Natalia Kulatova","raw_affiliation_strings":["Mozilla","Mozilla [Paris] (117/119 quai de Valmy\r\nParis 75010 - France)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Mozilla","institution_ids":["https://openalex.org/I1291431925"]},{"raw_affiliation_string":"Mozilla [Paris] (117/119 quai de Valmy\r\nParis 75010 - France)","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047988273","display_name":"Mohamed Sabt","orcid":"https://orcid.org/0000-0002-9540-5363","observed_orcids":["https://orcid.org/0000-0002-9540-5363"]},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I2802519937","display_name":"Institut de Recherche en Informatique et Syst\u00e8mes Al\u00e9atoires","ror":"https://ror.org/00myn0z94","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I2802519937","https://openalex.org/I28221208","https://openalex.org/I4210127572","https://openalex.org/I4210159245","https://openalex.org/I56067802"]},{"id":"https://openalex.org/I56067802","display_name":"Universit\u00e9 de Rennes","ror":"https://ror.org/015m7wh34","country_code":"FR","type":"education","lineage":["https://openalex.org/I56067802"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Mohamed Sabt","raw_affiliation_strings":["Univ Rennes,CNRS, IRISA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Univ Rennes,CNRS, IRISA","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I2802519937","https://openalex.org/I56067802"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016755346","display_name":"Pierre-Alain Fouque","orcid":"https://orcid.org/0000-0003-4997-2276","observed_orcids":["https://orcid.org/0000-0003-4997-2276"]},"institutions":[{"id":"https://openalex.org/I1294671590","display_name":"Centre National de la Recherche Scientifique","ror":"https://ror.org/02feahw73","country_code":"FR","type":"government","lineage":["https://openalex.org/I1294671590"]},{"id":"https://openalex.org/I2802519937","display_name":"Institut de Recherche en Informatique et Syst\u00e8mes Al\u00e9atoires","ror":"https://ror.org/00myn0z94","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1326498283","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I2802519937","https://openalex.org/I28221208","https://openalex.org/I4210127572","https://openalex.org/I4210159245","https://openalex.org/I56067802"]},{"id":"https://openalex.org/I56067802","display_name":"Universit\u00e9 de Rennes","ror":"https://ror.org/015m7wh34","country_code":"FR","type":"education","lineage":["https://openalex.org/I56067802"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Pierre-Alain Fouque","raw_affiliation_strings":["Univ Rennes,CNRS, IRISA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Univ Rennes,CNRS, IRISA","institution_ids":["https://openalex.org/I1294671590","https://openalex.org/I2802519937","https://openalex.org/I56067802"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5026297326","display_name":"Karthikeyan Bhargavan","orcid":"https://orcid.org/0000-0002-3152-8997","observed_orcids":["https://orcid.org/0000-0002-3152-8997"]},"institutions":[{"id":"https://openalex.org/I1326498283","display_name":"Institut national de recherche en sciences et technologies du num\u00e9rique","ror":"https://ror.org/02kvxyf05","country_code":"FR","type":"government","lineage":["https://openalex.org/I1326498283"]},{"id":"https://openalex.org/I4405259063","display_name":"PROSECCO: Programming securely with cryptography","ror":"https://ror.org/01nryz461","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1326498283","https://openalex.org/I4405257605","https://openalex.org/I4405259063"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Karthikeyan Bhargavan","raw_affiliation_strings":["INRIA,Paris","PROSECCO - Programming securely with cryptography (48 Rue Barrault, 75013 Paris - France)"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"INRIA,Paris","institution_ids":["https://openalex.org/I1326498283"]},{"raw_affiliation_string":"PROSECCO - Programming securely with cryptography (48 Rue Barrault, 75013 Paris - France)","institution_ids":["https://openalex.org/I4405259063"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.68,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":{"value":0.73371303,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":96},"biblio":{"volume":null,"issue":null,"first_page":"707","last_page":"723"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9047999978065491,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9047999978065491,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.06629999727010727,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.020500000566244125,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/wpa3","display_name":"WPA3","score":0.9200000166893005},{"id":"https://openalex.org/keywords/password-authenticated-key-exchange","display_name":"password-authenticated key exchange","score":0.8859999775886536},{"id":"https://openalex.org/keywords/side-channel-attacks","display_name":"side-channel attacks","score":0.9779999852180481},{"id":"https://openalex.org/keywords/password-reset","display_name":"password recovery","score":0.628000020980835},{"id":"https://openalex.org/keywords/flush-reload","display_name":"Flush+Reload","score":0.9129999876022339},{"id":"https://openalex.org/keywords/formal-verification","display_name":"formal verification","score":0.7630000114440918},{"id":"https://openalex.org/keywords/wi-fi-security","display_name":"Wi-Fi security","score":0.6150000095367432},{"id":"https://openalex.org/keywords/offline-dictionary-attack","display_name":"offline dictionary attack","score":0.5690000057220459}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8332520127296448},{"id":"https://openalex.org/C2778000800","wikidata":"https://www.wikidata.org/wiki/Q830043","display_name":"Handshake","level":3,"score":0.7297762036323547},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.724669337272644},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5832021832466125},{"id":"https://openalex.org/C113328881","wikidata":"https://www.wikidata.org/wiki/Q599809","display_name":"Dictionary attack","level":3,"score":0.5605458617210388},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.5328851938247681},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.5304229855537415},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5159502625465393},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5050862431526184},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.4545010030269623},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.35165929794311523},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C151319957","wikidata":"https://www.wikidata.org/wiki/Q752739","display_name":"Asynchronous communication","level":2,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/eurosp57164.2023.00048","doi":"https://doi.org/10.1109/eurosp57164.2023.00048","is_oa":false,"landing_page_url":"https://doi.org/10.1109/eurosp57164.2023.00048","pdf_url":null,"source":{"id":"https://openalex.org/S4306418620","display_name":"IEEE European Symposium on Security and Privacy","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2023 IEEE 8th European Symposium on Security and Privacy (EuroS&P)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2307.09243","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2307.09243","pdf_url":"https://arxiv.org/pdf/2307.09243","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"pmh:oai:HAL:hal-04175322v1","doi":null,"is_oa":true,"landing_page_url":"https://hal.science/hal-04175322","pdf_url":"https://hal.science/hal-04175322v1/file/2023-eurosp-dragondoom.pdf","source":{"id":"https://openalex.org/S4306402512","display_name":"HAL","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I4405252976","host_organization_name":"Centre pour la Communication Scientifique Directe","host_organization_lineage":["https://openalex.org/I4405252976"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"EuroS&P 2023 - IEEE 8th European Symposium on Security and Privacy, Jul 2023, Delft, Netherlands. pp.707-723, ⟨10.1109/EuroSP57164.2023.00048⟩","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"doi:10.48550/arxiv.2307.09243","doi":"https://doi.org/10.48550/arxiv.2307.09243","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2307.09243","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article-journal"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2307.09243","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2307.09243","pdf_url":"https://arxiv.org/pdf/2307.09243","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G1190173965","display_name":null,"funder_award_id":"France2030","funder_id":"https://openalex.org/F4320320883","funder_display_name":"Agence Nationale de la Recherche"},{"id":"https://openalex.org/G3653829778","display_name":"Attacks and Security Analysis of Digital Rights Management Systems","funder_award_id":"ANR-22-CE39-0005","funder_id":"https://openalex.org/F4320320883","funder_display_name":"Agence Nationale de la Recherche"},{"id":"https://openalex.org/G4041451713","display_name":"Verification of Security Protocols","funder_award_id":"ANR-22-PECY-0006","funder_id":"https://openalex.org/F4320320883","funder_display_name":"Agence Nationale de la Recherche"},{"id":"https://openalex.org/G4656594441","display_name":null,"funder_award_id":"ANR18","funder_id":"https://openalex.org/F4320320883","funder_display_name":"Agence Nationale de la Recherche"},{"id":"https://openalex.org/G6271627173","display_name":"Security and privacy in 5G mobile networks","funder_award_id":"ANR-18-CE39-0019","funder_id":"https://openalex.org/F4320320883","funder_display_name":"Agence Nationale de la Recherche"}],"funders":[{"id":"https://openalex.org/F4320320883","display_name":"Agence Nationale de la Recherche","ror":"https://ror.org/00rbzpz17"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4384811565.pdf","grobid_xml":"https://content.openalex.org/works/W4384811565.grobid-xml"},"referenced_works_count":59,"referenced_works":["https://openalex.org/W1488058190","https://openalex.org/W1496265857","https://openalex.org/W1518147993","https://openalex.org/W1934458198","https://openalex.org/W2043753392","https://openalex.org/W2122074070","https://openalex.org/W2146573211","https://openalex.org/W2159520802","https://openalex.org/W2172060328","https://openalex.org/W2210258279","https://openalex.org/W2267469130","https://openalex.org/W2285187078","https://openalex.org/W2310762999","https://openalex.org/W2350778671","https://openalex.org/W2478103818","https://openalex.org/W2538893033","https://openalex.org/W2559892799","https://openalex.org/W2566159363","https://openalex.org/W2604664164","https://openalex.org/W2741866430","https://openalex.org/W2753324901","https://openalex.org/W2765255210","https://openalex.org/W2767098552","https://openalex.org/W2767162229","https://openalex.org/W2797042583","https://openalex.org/W2885297972","https://openalex.org/W2891653310","https://openalex.org/W2891854691","https://openalex.org/W2892310063","https://openalex.org/W2900188961","https://openalex.org/W2928036819","https://openalex.org/W2937036172","https://openalex.org/W2955155286","https://openalex.org/W2964540713","https://openalex.org/W2972962130","https://openalex.org/W2978995152","https://openalex.org/W2984214499","https://openalex.org/W2990470761","https://openalex.org/W3003637591","https://openalex.org/W3008953071","https://openalex.org/W3016124431","https://openalex.org/W3029108158","https://openalex.org/W3048896543","https://openalex.org/W3096664316","https://openalex.org/W3111662257","https://openalex.org/W3118011705","https://openalex.org/W3156526578","https://openalex.org/W3165540879","https://openalex.org/W3170330008","https://openalex.org/W3181370975","https://openalex.org/W3189992245","https://openalex.org/W4210493863","https://openalex.org/W4233145884","https://openalex.org/W4256734252","https://openalex.org/W4281388424","https://openalex.org/W4385187318","https://openalex.org/W6628261430","https://openalex.org/W6722814306","https://openalex.org/W7098243644"],"related_works":["https://openalex.org/W3201879389","https://openalex.org/W4206900060","https://openalex.org/W6950564663","https://openalex.org/W3111662257","https://openalex.org/W4292153222","https://openalex.org/W7027873813","https://openalex.org/W7151602507","https://openalex.org/W4392529117","https://openalex.org/W2947985461","https://openalex.org/W3008953071"],"abstract_inverted_index":{"It":[0],"is":[1,239,246],"universally":[2],"acknowledged":[3],"that":[4,68,218,233,244],"Wi-Fi":[5,13,107],"communications":[6],"are":[7,72],"important":[8],"to":[9,32,54,80,100,169,226,241,251],"secure.":[10],"Thus,":[11],"the":[12,56,69,124,149,167,171,191,198,227,234],"Alliance":[14],"published":[15],"WPA3":[16],"in":[17,52,60,104,112,142,160,175],"2018":[18],"with":[19],"a":[20,26,61,77,90,186,207],"distinctive":[21],"security":[22],"feature:":[23],"it":[24],"leverages":[25],"Password-Authenticated":[27],"Key":[28],"Exchange":[29],"(PAKE)":[30],"protocol":[31,57,79],"protect":[33],"users\u2019":[34,102],"passwords":[35,103],"from":[36],"offline":[37],"dictionary":[38],"attacks.":[39],"Unfortunately,":[40],"soon":[41],"after":[42],"its":[43,50,113,129,219],"release,":[44],"several":[45],"attacks":[46,156],"were":[47],"reported":[48],"against":[49],"implementations,":[51,177],"response":[53],"which":[55],"was":[58],"updated":[59],"best-effort":[62],"manner.In":[63],"this":[64],"paper,":[65],"we":[66,87,178],"show":[67,232],"proposed":[70],"mitigations":[71],"not":[73],"enough,":[74],"especially":[75],"for":[76,83],"complex":[78],"implement":[81],"even":[82],"savvy":[84],"developers.":[85],"Indeed,":[86],"present":[88],"Dragondoom,":[89],"collection":[91],"of":[92,95,153,162,173,183,190,236],"side-channel":[93],"vulnerabilities":[94],"varying":[96],"strength":[97],"allowing":[98],"attackers":[99],"recover":[101],"widely":[105],"deployed":[106],"daemons,":[108],"such":[109],"as":[110],"hostap":[111,222,238],"default":[114,125],"settings.":[115],"Our":[116,155,202,230],"findings":[117],"target":[118],"both":[119,247],"password":[120],"conversion":[121],"methods,":[122],"namely":[123],"probabilistic":[126],"hunting-and-pecking":[127],"and":[128,147,249],"newly":[130],"standardized":[131],"deterministic":[132],"alternative":[133],"based":[134],"on":[135,205],"SSWU.":[136],"We":[137,214],"successfully":[138],"exploit":[139],"our":[140],"leakage":[141,200],"practice":[143],"through":[144],"microarchitectural":[145],"mechanisms,":[146],"overcome":[148],"limited":[150],"spatial":[151],"resolution":[152],"Flush+Reload.":[154],"outperform":[157],"previous":[158],"works":[159],"terms":[161],"required":[163],"measurements.Then,":[164],"driven":[165],"by":[166],"need":[168],"end":[170],"spiral":[172],"patch-and-hack":[174],"Dragonfly":[176,184],"propose":[179],"Dragonstar,":[180,216],"an":[181],"implementation":[182,189,203],"leveraging":[185],"formally":[187,208],"verified":[188,209],"underlying":[192],"mathematical":[193],"operations,":[194],"thereby":[195],"removing":[196],"all":[197],"related":[199],"vector.":[201],"relies":[204],"HACL*,":[206],"crypto":[210],"library":[211],"guaranteeing":[212],"secret-independence.":[213],"design":[215],"so":[217],"integration":[220],"within":[221],"requires":[223],"minimal":[224],"modifications":[225],"existing":[228],"project.":[229],"experiments":[231],"performance":[235],"HACL*-based":[237],"comparable":[240],"OpenSSL-based,":[242],"implying":[243],"Dragonstar":[245],"efficient":[248],"proved":[250],"be":[252],"leakage-free.":[253]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2023-07-20T00:00:00"}