{"id":"https://openalex.org/W7203636097","doi":"https://doi.org/10.48550/arxiv.2608.13685","title":"Weird Machines in Transport Layer Security","display_name":"Weird Machines in Transport Layer Security","publication_year":2026,"publication_date":"2026-08-13","ids":{"openalex":"https://openalex.org/W7203636097","doi":"https://doi.org/10.48550/arxiv.2608.13685"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2608.13685","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.13685","pdf_url":"https://arxiv.org/pdf/2608.13685","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2608.13685","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5062112595","display_name":"Michael Collins","orcid":"https://orcid.org/0009-0006-0119-8129","observed_orcids":["https://orcid.org/0009-0006-0119-8129"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Collins, Michael","raw_affiliation_strings":["Laboratory for Advanced Cybersecurity Research Fort Meade , MD 20755"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Laboratory for Advanced Cybersecurity Research Fort Meade , MD 20755","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5147316077","display_name":"Jada Cumberland","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cumberland, Jada","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029108532","display_name":"Brianne Dunn","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I81365321","display_name":"Old Dominion University","ror":"https://ror.org/04zjtrb98","country_code":"US","type":"education","lineage":["https://openalex.org/I81365321"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dunn, Brianne","raw_affiliation_strings":["Old Dominion University Norfolk , VA 23259"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Old Dominion University Norfolk , VA 23259","institution_ids":["https://openalex.org/I81365321"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139993742","display_name":"Ross Gore","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I81365321","display_name":"Old Dominion University","ror":"https://ror.org/04zjtrb98","country_code":"US","type":"education","lineage":["https://openalex.org/I81365321"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Gore, Ross","raw_affiliation_strings":["Center for Secure and Intelligent Critical Systems Old Dominion University Norfolk , VA 23259"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Center for Secure and Intelligent Critical Systems Old Dominion University Norfolk , VA 23259","institution_ids":["https://openalex.org/I81365321"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5147372325","display_name":"Samuel Jackson","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I81365321","display_name":"Old Dominion University","ror":"https://ror.org/04zjtrb98","country_code":"US","type":"education","lineage":["https://openalex.org/I81365321"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jackson, Samuel","raw_affiliation_strings":["Jada Cumberland School of Cybersecurity Old Dominion University Norfolk , VA 23259","Old Dominion University Norfolk , VA 23259"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Jada Cumberland School of Cybersecurity Old Dominion University Norfolk , VA 23259","institution_ids":["https://openalex.org/I81365321"]},{"raw_affiliation_string":"Old Dominion University Norfolk , VA 23259","institution_ids":["https://openalex.org/I81365321"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052787847","display_name":"Sachin S. Shetty","orcid":"https://orcid.org/0000-0002-8789-0610","observed_orcids":["https://orcid.org/0000-0002-8789-0610"]},"institutions":[{"id":"https://openalex.org/I81365321","display_name":"Old Dominion University","ror":"https://ror.org/04zjtrb98","country_code":"US","type":"education","lineage":["https://openalex.org/I81365321"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shetty, Sachin","raw_affiliation_strings":["Center for Secure and Intelligent Critical Systems","Department of Electrical and Computer Engineering Old Dominion University Norfolk , VA 23259"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Center for Secure and Intelligent Critical Systems","institution_ids":[]},{"raw_affiliation_string":"Department of Electrical and Computer Engineering Old Dominion University Norfolk , VA 23259","institution_ids":["https://openalex.org/I81365321"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5067034144","display_name":"Jonathan Takeshita","orcid":"https://orcid.org/0000-0002-8655-5343","observed_orcids":["https://orcid.org/0000-0002-8655-5343"]},"institutions":[{"id":"https://openalex.org/I81365321","display_name":"Old Dominion University","ror":"https://ror.org/04zjtrb98","country_code":"US","type":"education","lineage":["https://openalex.org/I81365321"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Takeshita, Jonathan","raw_affiliation_strings":["Department of Computer Science School of Cybersecurity Old Dominion University Norfolk , VA 23259"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science School of Cybersecurity Old Dominion University Norfolk , VA 23259","institution_ids":["https://openalex.org/I81365321"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9843999743461609,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9843999743461609,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.01080000028014183,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.0010000000474974513,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/transport-layer-security","display_name":"Transport Layer Security","score":0.8040000200271606},{"id":"https://openalex.org/keywords/tls-handshake","display_name":"TLS handshake","score":0.9660000205039978},{"id":"https://openalex.org/keywords/openssl","display_name":"OpenSSL","score":0.781000018119812},{"id":"https://openalex.org/keywords/turing-completeness","display_name":"Turing completeness","score":0.7739999890327454},{"id":"https://openalex.org/keywords/authentication-bypass","display_name":"authentication bypass","score":0.652999997138977},{"id":"https://openalex.org/keywords/tls-extensions","display_name":"TLS extensions","score":0.3499999940395355}],"concepts":[{"id":"https://openalex.org/C2778000800","wikidata":"https://www.wikidata.org/wiki/Q830043","display_name":"Handshake","level":3,"score":0.9520000219345093},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7621999979019165},{"id":"https://openalex.org/C148176105","wikidata":"https://www.wikidata.org/wiki/Q206494","display_name":"Transport Layer Security","level":3,"score":0.5651000142097473},{"id":"https://openalex.org/C9996903","wikidata":"https://www.wikidata.org/wiki/Q1749235","display_name":"Cryptographic nonce","level":3,"score":0.4690999984741211},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.45080000162124634},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.44530001282691956},{"id":"https://openalex.org/C2779182362","wikidata":"https://www.wikidata.org/wiki/Q17126187","display_name":"Session (web analytics)","level":2,"score":0.4334000051021576},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.4000999927520752},{"id":"https://openalex.org/C96865113","wikidata":"https://www.wikidata.org/wiki/Q2946816","display_name":"Certificate","level":2,"score":0.3806999921798706},{"id":"https://openalex.org/C141492731","wikidata":"https://www.wikidata.org/wiki/Q1052621","display_name":"Message authentication code","level":3,"score":0.35580000281333923},{"id":"https://openalex.org/C99138194","wikidata":"https://www.wikidata.org/wiki/Q183427","display_name":"Hash function","level":2,"score":0.3441999852657318},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.3425000011920929},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.3361000120639801},{"id":"https://openalex.org/C113843644","wikidata":"https://www.wikidata.org/wiki/Q901882","display_name":"Interface (matter)","level":4,"score":0.32679998874664307},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.32199999690055847},{"id":"https://openalex.org/C205383636","wikidata":"https://www.wikidata.org/wiki/Q14746","display_name":"Merkle tree","level":4,"score":0.3127000033855438},{"id":"https://openalex.org/C94284585","wikidata":"https://www.wikidata.org/wiki/Q228184","display_name":"Random oracle","level":4,"score":0.3125999867916107},{"id":"https://openalex.org/C159718280","wikidata":"https://www.wikidata.org/wiki/Q5526353","display_name":"Gas meter prover","level":3,"score":0.29899999499320984},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.29580000042915344},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.288100004196167},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2797999978065491},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.2786000072956085},{"id":"https://openalex.org/C32455479","wikidata":"https://www.wikidata.org/wiki/Q506053","display_name":"Kerberos","level":3,"score":0.2782999873161316},{"id":"https://openalex.org/C110406131","wikidata":"https://www.wikidata.org/wiki/Q41349","display_name":"Smart card","level":2,"score":0.2773999869823456},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.26840001344680786},{"id":"https://openalex.org/C168065819","wikidata":"https://www.wikidata.org/wiki/Q845566","display_name":"Debugging","level":2,"score":0.26409998536109924},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2632000148296356},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2578999996185303},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.2540000081062317},{"id":"https://openalex.org/C193702766","wikidata":"https://www.wikidata.org/wiki/Q1414548","display_name":"Concurrency","level":2,"score":0.25290000438690186},{"id":"https://openalex.org/C111498074","wikidata":"https://www.wikidata.org/wiki/Q173326","display_name":"Formal verification","level":2,"score":0.2524000108242035}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2608.13685","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.13685","pdf_url":"https://arxiv.org/pdf/2608.13685","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2608.13685","doi":"https://doi.org/10.48550/arxiv.2608.13685","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2608.13685","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2608.13685","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2608.13685","pdf_url":"https://arxiv.org/pdf/2608.13685","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320311672","display_name":"Old Dominion University","ror":"https://ror.org/04zjtrb98"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7203636097.pdf","grobid_xml":"https://content.openalex.org/works/W7203636097.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2580339477","https://openalex.org/W2365281462","https://openalex.org/W1495444061","https://openalex.org/W3194872594","https://openalex.org/W7084107477","https://openalex.org/W7100392766","https://openalex.org/W2072210640","https://openalex.org/W7151312741","https://openalex.org/W3196168686","https://openalex.org/W2064815039"],"abstract_inverted_index":{"Weird":[0],"machines":[1],"are":[2],"latent":[3],"computational":[4],"capabilities":[5],"that":[6,69,113,169,188],"emerge":[7],"from":[8],"the":[9,53,137,180],"composition":[10],"of":[11,183],"architectural":[12],"components.":[13],"Prior":[14],"work":[15],"has":[16],"studied":[17],"this":[18,104,144],"phenomenon":[19],"extensively":[20],"in":[21,35,213],"software":[22],"systems,":[23],"including":[24,73],"x86":[25],"instructions,":[26],"ELF":[27],"metadata,":[28],"and":[29,32,59,65,81,95,111,129,210],"page":[30],"tables,":[31],"more":[33],"recently":[34],"cyber-physical":[36],"systems":[37,88],"such":[38],"as":[39],"industrial":[40],"control":[41],"networks.":[42],"This":[43],"paper":[44],"extends":[45],"weird":[46],"machine":[47],"theory":[48,145],"to":[49,93],"a":[50,158,166,190],"new":[51],"domain:":[52],"Transport":[54],"Layer":[55],"Security":[56],"(TLS)":[57],"handshake":[58,127,172],"its":[60],"two":[61,147],"dominant":[62],"implementations,":[63],"OpenSSL":[64,153],"BoringSSL.":[66],"We":[67,102,142],"show":[68],"legitimate":[70],"TLS":[71,115,163],"primitives,":[72],"session":[74,118],"cache":[75],"entries,":[76],"renegotiation":[77],"logic,":[78],"extension":[79],"parsing,":[80],"certificate":[82],"verification":[83],"steps,":[84],"compose":[85],"into":[86,165,185],"Turing-complete":[87],"whose":[89],"computation":[90],"is":[91],"coupled":[92],"authentication":[94,177],"trust":[96,109],"decisions":[97],"rather":[98],"than":[99],"physical":[100],"actuation.":[101],"formalize":[103],"coupling,":[105],"which":[106],"we":[107],"call":[108],"actuation,":[110],"argue":[112],"any":[114,198],"implementation":[116],"providing":[117],"storage,":[119],"arithmetic":[120],"on":[121,126,151],"sequence":[122],"counters,":[123],"conditional":[124],"branching":[125],"state,":[128],"iteration":[130],"through":[131,194],"resumption":[132],"or":[133,201],"retry":[134],"loops":[135],"satisfies":[136],"conditions":[138],"for":[139],"arbitrary":[140],"computation.":[141],"validate":[143],"with":[146],"working":[148],"demonstrations":[149,205],"built":[150],"real":[152,208],"code":[154],"paths.":[155],"The":[156,174],"first,":[157],"sentinel":[159],"system,":[160],"composes":[161,179],"standard":[162],"primitives":[164,184],"defensive":[167],"mechanism":[168],"detects":[170],"anomalous":[171],"behavior.":[173],"second,":[175],"an":[176,186],"bypass,":[178],"same":[181],"class":[182],"attack":[187],"defeats":[189],"cipher-strength":[191],"policy":[192],"check":[193],"mid-connection":[195],"renegotiation,":[196],"without":[197],"memory":[199],"corruption":[200],"external":[202],"malware.":[203],"Both":[204],"run":[206],"against":[207],"server":[209],"client":[211],"binaries":[212],"Docker.":[214]},"counts_by_year":[],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-08-18T00:00:00"}