{"id":"https://openalex.org/W3134730287","doi":"https://doi.org/10.1007/s00145-021-09374-3","title":"Bloom Filter Encryption and Applications to Efficient Forward-Secret 0-RTT Key Exchange","display_name":"Bloom Filter Encryption and Applications to Efficient Forward-Secret 0-RTT Key Exchange","publication_year":2021,"publication_date":"2021-03-09","ids":{"openalex":"https://openalex.org/W3134730287","doi":"https://doi.org/10.1007/s00145-021-09374-3","mag":"3134730287"},"language":"en","primary_location":{"id":"doi:10.1007/s00145-021-09374-3","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s00145-021-09374-3","pdf_url":"https://link.springer.com/content/pdf/10.1007/s00145-021-09374-3.pdf","source":{"id":"https://openalex.org/S190936789","display_name":"Journal of Cryptology","issn_l":"0933-2790","issn":["0933-2790","1432-1378"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cryptology","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s00145-021-09374-3.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078427219","display_name":"David Derler","orcid":"https://orcid.org/0000-0002-5345-3906"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"David Derler","raw_affiliation_strings":["DFINITY, Z\u00fcrich, Switzerland"],"affiliations":[{"raw_affiliation_string":"DFINITY, Z\u00fcrich, Switzerland","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041890370","display_name":"Kai Gellert","orcid":"https://orcid.org/0000-0003-0985-7265"},"institutions":[{"id":"https://openalex.org/I167360494","display_name":"University of Wuppertal","ror":"https://ror.org/00613ak93","country_code":"DE","type":"education","lineage":["https://openalex.org/I167360494"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Kai Gellert","raw_affiliation_strings":["University of Wuppertal, Wuppertal, Germany"],"affiliations":[{"raw_affiliation_string":"University of Wuppertal, Wuppertal, Germany","institution_ids":["https://openalex.org/I167360494"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090157645","display_name":"Tibor Jager","orcid":"https://orcid.org/0000-0002-3205-7699"},"institutions":[{"id":"https://openalex.org/I167360494","display_name":"University of Wuppertal","ror":"https://ror.org/00613ak93","country_code":"DE","type":"education","lineage":["https://openalex.org/I167360494"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Tibor Jager","raw_affiliation_strings":["University of Wuppertal, Wuppertal, Germany"],"affiliations":[{"raw_affiliation_string":"University of Wuppertal, Wuppertal, Germany","institution_ids":["https://openalex.org/I167360494"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044774496","display_name":"Daniel Slamanig","orcid":"https://orcid.org/0000-0002-4181-2561"},"institutions":[{"id":"https://openalex.org/I132118926","display_name":"Austrian Institute of Technology","ror":"https://ror.org/04knbh022","country_code":"AT","type":"facility","lineage":["https://openalex.org/I132118926"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Daniel Slamanig","raw_affiliation_strings":["AIT Austrian Institute of Technology, Vienna, Austria"],"affiliations":[{"raw_affiliation_string":"AIT Austrian Institute of Technology, Vienna, Austria","institution_ids":["https://openalex.org/I132118926"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5046950410","display_name":"Christoph Striecks","orcid":"https://orcid.org/0000-0003-4724-8022"},"institutions":[{"id":"https://openalex.org/I132118926","display_name":"Austrian Institute of Technology","ror":"https://ror.org/04knbh022","country_code":"AT","type":"facility","lineage":["https://openalex.org/I132118926"]}],"countries":["AT"],"is_corresponding":false,"raw_author_name":"Christoph Striecks","raw_affiliation_strings":["AIT Austrian Institute of Technology, Vienna, Austria"],"affiliations":[{"raw_affiliation_string":"AIT Austrian Institute of Technology, Vienna, Austria","institution_ids":["https://openalex.org/I132118926"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5078427219"],"corresponding_institution_ids":[],"apc_list":{"value":2290,"currency":"EUR","value_usd":2890},"apc_paid":{"value":2290,"currency":"EUR","value_usd":2890},"fwci":2.0995,"has_fulltext":true,"cited_by_count":21,"citation_normalized_percentile":{"value":0.89090769,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"34","issue":"2","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11498","display_name":"Security in Wireless Sensor Networks","score":0.9943000078201294,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/forward-secrecy","display_name":"Forward secrecy","score":0.8467259407043457},{"id":"https://openalex.org/keywords/bloom-filter","display_name":"Bloom filter","score":0.8163697719573975},{"id":"https://openalex.org/keywords/puncturing","display_name":"Puncturing","score":0.758519172668457},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7432231307029724},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.6719824075698853},{"id":"https://openalex.org/keywords/secrecy","display_name":"Secrecy","score":0.5436437129974365},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.5255076885223389},{"id":"https://openalex.org/keywords/ciphertext","display_name":"Ciphertext","score":0.4753563106060028},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.47310853004455566},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.44620200991630554},{"id":"https://openalex.org/keywords/key-exchange","display_name":"Key exchange","score":0.44122856855392456},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.41168588399887085},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.37645724415779114},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.3703608214855194},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.34391993284225464},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.15333101153373718}],"concepts":[{"id":"https://openalex.org/C205009425","wikidata":"https://www.wikidata.org/wiki/Q935662","display_name":"Forward secrecy","level":4,"score":0.8467259407043457},{"id":"https://openalex.org/C147224247","wikidata":"https://www.wikidata.org/wiki/Q885373","display_name":"Bloom filter","level":2,"score":0.8163697719573975},{"id":"https://openalex.org/C2778808095","wikidata":"https://www.wikidata.org/wiki/Q3899825","display_name":"Puncturing","level":2,"score":0.758519172668457},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7432231307029724},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.6719824075698853},{"id":"https://openalex.org/C2776452267","wikidata":"https://www.wikidata.org/wiki/Q1503443","display_name":"Secrecy","level":2,"score":0.5436437129974365},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5255076885223389},{"id":"https://openalex.org/C93974786","wikidata":"https://www.wikidata.org/wiki/Q1589480","display_name":"Ciphertext","level":3,"score":0.4753563106060028},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.47310853004455566},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.44620200991630554},{"id":"https://openalex.org/C99674996","wikidata":"https://www.wikidata.org/wiki/Q1414155","display_name":"Key exchange","level":4,"score":0.44122856855392456},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.41168588399887085},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.37645724415779114},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3703608214855194},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.34391993284225464},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.15333101153373718},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s00145-021-09374-3","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s00145-021-09374-3","pdf_url":"https://link.springer.com/content/pdf/10.1007/s00145-021-09374-3.pdf","source":{"id":"https://openalex.org/S190936789","display_name":"Journal of Cryptology","issn_l":"0933-2790","issn":["0933-2790","1432-1378"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cryptology","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s00145-021-09374-3","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s00145-021-09374-3","pdf_url":"https://link.springer.com/content/pdf/10.1007/s00145-021-09374-3.pdf","source":{"id":"https://openalex.org/S190936789","display_name":"Journal of Cryptology","issn_l":"0933-2790","issn":["0933-2790","1432-1378"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cryptology","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/17","display_name":"Partnerships for the goals","score":0.4099999964237213}],"awards":[{"id":"https://openalex.org/G2406128221","display_name":"Theoretically-Sound Real-World Cryptography","funder_award_id":"802823","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G3350584863","display_name":null,"funder_award_id":"JA 2445/2-1","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"},{"id":"https://openalex.org/G4775422595","display_name":"PRIvacy and Security MAintaining services in the CLOUD","funder_award_id":"644962","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G4937468798","display_name":null,"funder_award_id":"H2020","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G4992659302","display_name":null,"funder_award_id":"826610","funder_id":"https://openalex.org/F4320327207","funder_display_name":"Electronic Components and Systems for European Leadership"},{"id":"https://openalex.org/G6052429835","display_name":null,"funder_award_id":"(DFG)","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"},{"id":"https://openalex.org/G6476596866","display_name":null,"funder_award_id":"826610","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G7280292742","display_name":null,"funder_award_id":"P31621-N38","funder_id":"https://openalex.org/F4320321181","funder_display_name":"Austrian Science Fund"},{"id":"https://openalex.org/G7393147716","display_name":null,"funder_award_id":"Climate","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"},{"id":"https://openalex.org/G794955070","display_name":null,"funder_award_id":"2445/2-1","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"},{"id":"https://openalex.org/G7954571388","display_name":null,"funder_award_id":"653454","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G8330397625","display_name":null,"funder_award_id":"Funding","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"},{"id":"https://openalex.org/G8928656450","display_name":null,"funder_award_id":"Projekt DEAL","funder_id":"https://openalex.org/F4320320879","funder_display_name":"Deutsche Forschungsgemeinschaft"}],"funders":[{"id":"https://openalex.org/F4320313454","display_name":"Bergische Universit\u00e4t Wuppertal","ror":"https://ror.org/00613ak93"},{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320320879","display_name":"Deutsche Forschungsgemeinschaft","ror":"https://ror.org/018mejw64"},{"id":"https://openalex.org/F4320321181","display_name":"Austrian Science Fund","ror":"https://ror.org/013tf3c58"},{"id":"https://openalex.org/F4320323031","display_name":"\u00d6sterreichische Forschungsf\u00f6rderungsgesellschaft","ror":"https://ror.org/028jc0449"},{"id":"https://openalex.org/F4320327207","display_name":"Electronic Components and Systems for European Leadership","ror":null},{"id":"https://openalex.org/F4320332999","display_name":"Horizon 2020 Framework Programme","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3134730287.pdf","grobid_xml":"https://content.openalex.org/works/W3134730287.grobid-xml"},"referenced_works_count":50,"referenced_works":["https://openalex.org/W148801026","https://openalex.org/W201721620","https://openalex.org/W1482786207","https://openalex.org/W1484751769","https://openalex.org/W1534733761","https://openalex.org/W1548963432","https://openalex.org/W1553083934","https://openalex.org/W1568885723","https://openalex.org/W1597922576","https://openalex.org/W1601035152","https://openalex.org/W1603068992","https://openalex.org/W1607264302","https://openalex.org/W1610688607","https://openalex.org/W1973801321","https://openalex.org/W2052267638","https://openalex.org/W2076046175","https://openalex.org/W2097638666","https://openalex.org/W2108072891","https://openalex.org/W2116556172","https://openalex.org/W2122973102","https://openalex.org/W2123845384","https://openalex.org/W2127196932","https://openalex.org/W2138001464","https://openalex.org/W2138805158","https://openalex.org/W2145255308","https://openalex.org/W2146450895","https://openalex.org/W2152924492","https://openalex.org/W2167296203","https://openalex.org/W2256833911","https://openalex.org/W2345117577","https://openalex.org/W2406585997","https://openalex.org/W2416910455","https://openalex.org/W2545990795","https://openalex.org/W2590349999","https://openalex.org/W2601396684","https://openalex.org/W2684257313","https://openalex.org/W2740966734","https://openalex.org/W2741945342","https://openalex.org/W2790485266","https://openalex.org/W2791179510","https://openalex.org/W2794987877","https://openalex.org/W2915352631","https://openalex.org/W2935452154","https://openalex.org/W3023659140","https://openalex.org/W3029881607","https://openalex.org/W3046578658","https://openalex.org/W3080846549","https://openalex.org/W3088559286","https://openalex.org/W4285719527","https://openalex.org/W6727403620"],"related_works":["https://openalex.org/W3006652224","https://openalex.org/W2947414929","https://openalex.org/W110317680","https://openalex.org/W2359065662","https://openalex.org/W2604277541","https://openalex.org/W2790635691","https://openalex.org/W2947337737","https://openalex.org/W2978912884","https://openalex.org/W2950509843","https://openalex.org/W2907273444"],"abstract_inverted_index":{"Abstract":[0],"Forward":[1,99],"secrecy":[2,74,100],"is":[3,33,94,101,132,156,187],"considered":[4],"an":[5],"essential":[6],"design":[7],"goal":[8],"of":[9,200,226,233,236,246],"modern":[10],"key":[11,107],"establishment":[12],"(KE)":[13],"protocols,":[14],"such":[15,24,112,152],"as":[16,25],"TLS":[17],"1.3,":[18],"for":[19,54,146],"example.":[20],"Furthermore,":[21],"efficiency":[22],"considerations":[23],"zero":[26],"round-trip":[27],"time":[28],"(0-RTT),":[29],"where":[30],"a":[31,59,114,158,176,218,223],"client":[32],"able":[34],"to":[35,166,251,261],"send":[36],"cryptographically":[37],"protected":[38],"payload":[39],"data":[40,194],"along":[41],"with":[42,212],"the":[43,51,78,105,190,231,237,252],"very":[44,227],"first":[45,79,159,253],"KE":[46],"message,":[47],"are":[48,258],"motivated":[49],"by":[50,85,103,244],"practical":[52],"demand":[53],"secure":[55],"low-latency":[56],"communication.":[57],"For":[58],"long":[60],"time,":[61],"it":[62],"was":[63,83],"unclear":[64],"whether":[65],"protocols":[66,256],"that":[67,113,153,179,257,268],"simultaneously":[68],"achieve":[69],"0-RTT":[70,81,255,275],"and":[71,125,143,149,203],"full":[72],"forward":[73],"exist.":[75],"Only":[76],"recently,":[77],"forward-secret":[80,254,274],"protocol":[82],"described":[84],"G\u00fcnther":[86],"et":[87],"al.":[88],"(":[89],"Eurocrypt":[90],",":[91],"2017).":[92],"It":[93],"based":[95],"on":[96],"puncturable":[97,209],"encryption.":[98],"achieved":[102],"\u201cpuncturing\u201d":[104],"secret":[106,238],"after":[108],"each":[109],"decryption":[110],"operation,":[111],"given":[115],"ciphertext":[116],"can":[117],"only":[118,157,221],"be":[119,167,262],"decrypted":[120],"once":[121],"(cf.":[122],"also":[123],"Green":[124],"Miers,":[126],"S&P":[127],"2015).":[128],"Unfortunately,":[129],"their":[130],"scheme":[131],"completely":[133],"impractical,":[134],"since":[135],"one":[136],"puncturing":[137,219],"operation":[138,220],"takes":[139],"between":[140],"30":[141],"s":[142],"several":[144],"minutes":[145],"reasonable":[147],"security":[148],"deployment":[150],"parameters,":[151],"this":[154,172],"solution":[155],"feasibility":[160],"result,":[161],"but":[162],"not":[163],"efficient":[164,214,228,259],"enough":[165,260],"deployed":[168,263],"in":[169,264],"practice.":[170,265],"In":[171],"paper,":[173],"we":[174,180],"introduce":[175],"new":[177,208],"primitive":[178],"term":[181],"Bloom":[182,192],"filter":[183,193],"encryption":[184,210],"(BFE),":[185],"which":[186,240],"derived":[188],"from":[189],"probabilistic":[191],"structure.":[195],"We":[196,266],"describe":[197],"different":[198],"constructions":[199,243],"BFE":[201,269],"schemes":[202],"show":[204],"how":[205],"these":[206],"yield":[207],"mechanisms":[211],"extremely":[213],"puncturing.":[215],"Most":[216],"importantly,":[217],"involves":[222],"small":[224],"number":[225],"computations,":[229],"plus":[230],"deletion":[232],"certain":[234],"parts":[235],"key,":[239],"outperforms":[241],"previous":[242],"orders":[245],"magnitude.":[247],"This":[248],"gives":[249],"rise":[250],"believe":[267],"will":[270],"find":[271],"applications":[272],"beyond":[273],"protocols.":[276]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":6},{"year":2021,"cited_by_count":1}],"updated_date":"2026-04-10T15:06:20.359241","created_date":"2025-10-10T00:00:00"}