{"id":"https://openalex.org/W4283260508","doi":"https://doi.org/10.1007/s10207-022-00596-5","title":"Algorithm substitution attacks against receivers","display_name":"Algorithm substitution attacks against receivers","publication_year":2022,"publication_date":"2022-06-21","ids":{"openalex":"https://openalex.org/W4283260508","doi":"https://doi.org/10.1007/s10207-022-00596-5"},"language":"en","primary_location":{"id":"doi:10.1007/s10207-022-00596-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-022-00596-5","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-022-00596-5.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10207-022-00596-5.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5021957484","display_name":"Marcel Armour","orcid":"https://orcid.org/0000-0002-1231-6120"},"institutions":[{"id":"https://openalex.org/I184558857","display_name":"Royal Holloway University of London","ror":"https://ror.org/04g2vpn86","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I184558857"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Marcel Armour","raw_affiliation_strings":["Royal Holloway University of London, Egham, UK"],"raw_orcid":"https://orcid.org/0000-0002-1231-6120","affiliations":[{"raw_affiliation_string":"Royal Holloway University of London, Egham, UK","institution_ids":["https://openalex.org/I184558857"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5005389283","display_name":"Bertram Poettering","orcid":"https://orcid.org/0000-0001-6525-5141"},"institutions":[{"id":"https://openalex.org/I4210126328","display_name":"IBM Research - Zurich","ror":"https://ror.org/02js37d36","country_code":"CH","type":"facility","lineage":["https://openalex.org/I1341412227","https://openalex.org/I4210114115","https://openalex.org/I4210126328"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Bertram Poettering","raw_affiliation_strings":["IBM Research Europe \u2013 Zurich, R\u00fcschlikon, Switzerland"],"raw_orcid":"https://orcid.org/0000-0001-6525-5141","affiliations":[{"raw_affiliation_string":"IBM Research Europe \u2013 Zurich, R\u00fcschlikon, Switzerland","institution_ids":["https://openalex.org/I4210126328"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5021957484"],"corresponding_institution_ids":["https://openalex.org/I184558857"],"apc_list":{"value":2590,"currency":"EUR","value_usd":3190},"apc_paid":{"value":2590,"currency":"EUR","value_usd":3190},"fwci":1.1098,"has_fulltext":true,"cited_by_count":8,"citation_normalized_percentile":{"value":0.81246997,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"21","issue":"5","first_page":"1027","last_page":"1050"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12122","display_name":"Physical Unclonable Functions (PUFs) and Hardware Security","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7642112970352173},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.7497269511222839},{"id":"https://openalex.org/keywords/probabilistic-encryption","display_name":"Probabilistic encryption","score":0.6973140835762024},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5886099338531494},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.552724301815033},{"id":"https://openalex.org/keywords/on-the-fly-encryption","display_name":"On-the-fly encryption","score":0.5372709035873413},{"id":"https://openalex.org/keywords/multiple-encryption","display_name":"Multiple encryption","score":0.5031561255455017},{"id":"https://openalex.org/keywords/56-bit-encryption","display_name":"56-bit encryption","score":0.500953197479248},{"id":"https://openalex.org/keywords/symmetric-key-algorithm","display_name":"Symmetric-key algorithm","score":0.4916229844093323},{"id":"https://openalex.org/keywords/40-bit-encryption","display_name":"40-bit encryption","score":0.47846341133117676},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.43688973784446716},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.4327964782714844},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.4199601411819458},{"id":"https://openalex.org/keywords/attribute-based-encryption","display_name":"Attribute-based encryption","score":0.4198583960533142},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.39439091086387634}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7642112970352173},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.7497269511222839},{"id":"https://openalex.org/C54569210","wikidata":"https://www.wikidata.org/wiki/Q7246854","display_name":"Probabilistic encryption","level":3,"score":0.6973140835762024},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5886099338531494},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.552724301815033},{"id":"https://openalex.org/C147977885","wikidata":"https://www.wikidata.org/wiki/Q117010","display_name":"On-the-fly encryption","level":3,"score":0.5372709035873413},{"id":"https://openalex.org/C184685986","wikidata":"https://www.wikidata.org/wiki/Q3505167","display_name":"Multiple encryption","level":3,"score":0.5031561255455017},{"id":"https://openalex.org/C46905813","wikidata":"https://www.wikidata.org/wiki/Q4640678","display_name":"56-bit encryption","level":4,"score":0.500953197479248},{"id":"https://openalex.org/C65302260","wikidata":"https://www.wikidata.org/wiki/Q327675","display_name":"Symmetric-key algorithm","level":4,"score":0.4916229844093323},{"id":"https://openalex.org/C158215988","wikidata":"https://www.wikidata.org/wiki/Q4637271","display_name":"40-bit encryption","level":3,"score":0.47846341133117676},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.43688973784446716},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4327964782714844},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.4199601411819458},{"id":"https://openalex.org/C7646194","wikidata":"https://www.wikidata.org/wiki/Q4818713","display_name":"Attribute-based encryption","level":4,"score":0.4198583960533142},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.39439091086387634}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s10207-022-00596-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-022-00596-5","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-022-00596-5.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s10207-022-00596-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-022-00596-5","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-022-00596-5.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.7900000214576721,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G2942840681","display_name":null,"funder_award_id":"779391","funder_id":"https://openalex.org/F4320338335","funder_display_name":"H2020 European Research Council"},{"id":"https://openalex.org/G4325523037","display_name":null,"funder_award_id":"EP/P009301/1","funder_id":"https://openalex.org/F4320335935","funder_display_name":"Royal Holloway, University of London"},{"id":"https://openalex.org/G8498677286","display_name":"Centre for Doctoral Training in Cyber Security at Royal Holloway: Renewal of the CS-CDT at RHUL","funder_award_id":"EP/P009301/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320314707","display_name":"Government of the United Kingdom","ror":"https://ror.org/05wnh3t63"},{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"},{"id":"https://openalex.org/F4320335935","display_name":"Royal Holloway, University of London","ror":"https://ror.org/04g2vpn86"},{"id":"https://openalex.org/F4320338335","display_name":"H2020 European Research Council","ror":"https://ror.org/0472cxd90"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4283260508.pdf","grobid_xml":"https://content.openalex.org/works/W4283260508.grobid-xml"},"referenced_works_count":53,"referenced_works":["https://openalex.org/W180983570","https://openalex.org/W639928820","https://openalex.org/W1483713801","https://openalex.org/W1494066960","https://openalex.org/W1499713421","https://openalex.org/W1521222412","https://openalex.org/W1552695147","https://openalex.org/W1776976194","https://openalex.org/W1791542404","https://openalex.org/W1868857761","https://openalex.org/W1878907771","https://openalex.org/W1976955200","https://openalex.org/W1996182770","https://openalex.org/W2017779503","https://openalex.org/W2101803085","https://openalex.org/W2105209441","https://openalex.org/W2117852003","https://openalex.org/W2129719496","https://openalex.org/W2147906334","https://openalex.org/W2157679418","https://openalex.org/W2182584071","https://openalex.org/W2219924285","https://openalex.org/W2257504697","https://openalex.org/W2395250232","https://openalex.org/W2401376465","https://openalex.org/W2406153758","https://openalex.org/W2480384353","https://openalex.org/W2487384095","https://openalex.org/W2514456970","https://openalex.org/W2538603146","https://openalex.org/W2605376357","https://openalex.org/W2727655671","https://openalex.org/W2765434243","https://openalex.org/W2884501650","https://openalex.org/W2884588574","https://openalex.org/W2885172851","https://openalex.org/W2886926540","https://openalex.org/W2887440378","https://openalex.org/W2950427876","https://openalex.org/W2962928921","https://openalex.org/W2969100481","https://openalex.org/W2978045173","https://openalex.org/W3046259272","https://openalex.org/W3089693180","https://openalex.org/W3114169274","https://openalex.org/W3157446831","https://openalex.org/W3172830517","https://openalex.org/W3198802402","https://openalex.org/W4206646609","https://openalex.org/W4239555993","https://openalex.org/W4246889920","https://openalex.org/W4249844008","https://openalex.org/W6941772226"],"related_works":["https://openalex.org/W2361619969","https://openalex.org/W2188276378","https://openalex.org/W2396533199","https://openalex.org/W4387191618","https://openalex.org/W1993945719","https://openalex.org/W4387429380","https://openalex.org/W3149394126","https://openalex.org/W2168926258","https://openalex.org/W4246652009","https://openalex.org/W1976536045"],"abstract_inverted_index":{"Abstract":[0],"This":[1],"work":[2,22,61,73,145,345],"describes":[3],"a":[4,16,24,33,101,124,191,199,230,235,239,246,250,254,340,355],"class":[5,104,201],"of":[6,15,95,108,118,202,209,313,326,357],"Algorithm":[7],"Substitution":[8],"Attack":[9],"(ASA)":[10],"generically":[11],"targeting":[12,62],"the":[13,39,106,119,176,184,195,206,221,269,303,310,324,349],"receiver":[14],"communication":[17],"between":[18,238],"two":[19,156],"parties.":[20],"Our":[21,55,344],"provides":[23],"unified":[25,56],"framework":[26,57,232,271],"that":[27,76,127,170,204,268,297,332,359],"applies":[28],"to":[29,129,132,174,252,261,275,322,347,354],"any":[30],"scheme":[31,121,212,237],"where":[32],"secret":[34,177,263],"key":[35,52,78,163,218,285,314],"is":[36,366],"held":[37],"by":[38,74,88,142,165],"receiver;":[40],"in":[41,93,136,194],"particular,":[42],"message":[43,281],"authentication":[44,226,282],"schemes":[45,64,68,151,161],"(MACs),":[46],"authenticated":[47,276],"encryption":[48,53,79,109,150,182,185,211,215,277,286],"(AEAD)":[49],"and":[50,66,91,187,216,241,243,287,294,316,352,362],"public":[51,77,168,217,284],"(PKE).":[54],"brings":[58],"together":[59],"prior":[60,72],"MAC":[63],"(FSE\u201919)":[65],"AEAD":[67],"(IMACC\u201919);":[69],"we":[70,307],"extend":[71],"showing":[75],"may":[80],"also":[81],"be":[82,153,259,273,320],"targeted.":[83],"ASAs":[84,148,158,179],"were":[85],"initially":[86],"introduced":[87],"Bellare,":[89],"Paterson":[90],"Rogaway":[92],"light":[94],"revelations":[96],"concerning":[97],"mass":[98,137,341],"surveillance,":[99],"as":[100],"novel":[102],"attack":[103,113,203,334],"against":[105,149,159,180],"confidentiality":[107],"schemes.":[110],"Such":[111],"an":[112,133,172,210,225,336],"replaces":[114],"one":[115],"or":[116,220],"more":[117],"regular":[120],"algorithms":[122,318],"with":[123,278,368],"subverted":[125,167],"version":[126],"aims":[128],"reveal":[130],"information":[131,189],"adversary":[134,173],"(engaged":[135],"surveillance),":[138],"while":[139],"remaining":[140],"undetected":[141],"users.":[143],"Previous":[144],"looking":[146],"at":[147],"can":[152,258,272,319],"divided":[154],"into":[155],"groups.":[157],"PKE":[160],"target":[162,183],"generation":[164,315],"creating":[166],"keys":[169],"allow":[171],"recover":[175],"key.":[178],"symmetric":[181,214],"algorithm":[186,208,223],"leak":[188,262],"through":[190],"subliminal":[192,255],"channel":[193,256],"ciphertexts.":[196],"We":[197,228,265,290,330],"present":[198,229],"new":[200],"targets":[205],"decryption":[207,247,317,328],"for":[213,224,233,299,339],"encryption,":[219],"verification":[222],"scheme.":[227],"generic":[231,270,304],"subverting":[234],"cryptographic":[236],"sender":[240],"receiver,":[242],"show":[244,267,308],"how":[245,309],"oracle":[248],"allows":[249],"subverter":[251],"create":[253],"which":[257],"used":[260,321],"keys.":[264],"then":[266],"applied":[274],"associated":[279],"data,":[280],"schemes,":[283,301],"KEM/DEM":[288],"constructions.":[289],"consider":[291],"practical":[292],"considerations":[293],"specific":[295],"conditions":[296],"apply":[298],"particular":[300],"strengthening":[302],"approach.":[305],"Furthermore,":[306],"hybrid":[311],"subversion":[312],"amplify":[323],"effectiveness":[325],"our":[327],"attack.":[329],"argue":[331],"this":[333],"represents":[335],"attractive":[337],"opportunity":[338],"surveillance":[342],"adversary.":[343],"serves":[346],"refine":[348],"ASA":[350],"model":[351],"contributes":[353],"series":[356],"papers":[358],"raises":[360],"awareness":[361],"understanding":[363],"about":[364],"what":[365],"possible":[367],"ASAs.":[369]},"counts_by_year":[{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}