{"id":"https://openalex.org/W4400905308","doi":"https://doi.org/10.1109/tnse.2024.3432836","title":"LURK-T: Limited Use of Remote Keys With Added Trust in TLS 1.3","display_name":"LURK-T: Limited Use of Remote Keys With Added Trust in TLS 1.3","publication_year":2024,"publication_date":"2024-07-23","ids":{"openalex":"https://openalex.org/W4400905308","doi":"https://doi.org/10.1109/tnse.2024.3432836"},"language":"en","primary_location":{"id":"doi:10.1109/tnse.2024.3432836","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnse.2024.3432836","pdf_url":null,"source":{"id":"https://openalex.org/S2484352698","display_name":"IEEE Transactions on Network Science and Engineering","issn_l":"2327-4697","issn":["2327-4697","2334-329X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network Science and Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2506.12026","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5008241298","display_name":"Behnam Shobiri","orcid":"https://orcid.org/0000-0002-7433-050X"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":true,"raw_author_name":"Behnam Shobiri","raw_affiliation_strings":["Concordia Institute for Information Systems Engineering (CIISE), Concordia University, Montreal, QC, Canada"],"affiliations":[{"raw_affiliation_string":"Concordia Institute for Information Systems Engineering (CIISE), Concordia University, Montreal, QC, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089252137","display_name":"Sajjad Pourali","orcid":"https://orcid.org/0000-0001-9405-8710"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Sajjad Pourali","raw_affiliation_strings":["Concordia Institute for Information Systems Engineering (CIISE), Concordia University, Montreal, QC, Canada"],"affiliations":[{"raw_affiliation_string":"Concordia Institute for Information Systems Engineering (CIISE), Concordia University, Montreal, QC, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065232133","display_name":"Daniel Migault","orcid":null},"institutions":[{"id":"https://openalex.org/I4210094041","display_name":"Ericsson (Canada)","ror":"https://ror.org/00nas2c56","country_code":"CA","type":"company","lineage":["https://openalex.org/I1306339040","https://openalex.org/I4210094041"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Daniel Migault","raw_affiliation_strings":["Ericsson, Montreal, QC, Canada"],"affiliations":[{"raw_affiliation_string":"Ericsson, Montreal, QC, Canada","institution_ids":["https://openalex.org/I4210094041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036379679","display_name":"Ioana Boureanu","orcid":"https://orcid.org/0000-0001-5864-777X"},"institutions":[{"id":"https://openalex.org/I28290843","display_name":"University of Surrey","ror":"https://ror.org/00ks66431","country_code":"GB","type":"education","lineage":["https://openalex.org/I28290843"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ioana Boureanu","raw_affiliation_strings":["Surrey Centre for Cyber Security, the Department of Computer Science, University of Surrey, Guildfordl, U.K"],"affiliations":[{"raw_affiliation_string":"Surrey Centre for Cyber Security, the Department of Computer Science, University of Surrey, Guildfordl, U.K","institution_ids":["https://openalex.org/I28290843"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039954521","display_name":"Stere Preda","orcid":null},"institutions":[{"id":"https://openalex.org/I4210094041","display_name":"Ericsson (Canada)","ror":"https://ror.org/00nas2c56","country_code":"CA","type":"company","lineage":["https://openalex.org/I1306339040","https://openalex.org/I4210094041"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Stere Preda","raw_affiliation_strings":["Ericsson, Montreal, QC, Canada"],"affiliations":[{"raw_affiliation_string":"Ericsson, Montreal, QC, Canada","institution_ids":["https://openalex.org/I4210094041"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055898168","display_name":"Mohammad Mannan","orcid":"https://orcid.org/0000-0002-9630-5858"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mohammad Mannan","raw_affiliation_strings":["Concordia Institute for Information Systems Engineering (CIISE), Concordia University, Montreal, QC, Canada"],"affiliations":[{"raw_affiliation_string":"Concordia Institute for Information Systems Engineering (CIISE), Concordia University, Montreal, QC, Canada","institution_ids":["https://openalex.org/I60158472"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085765243","display_name":"Amr Youssef","orcid":"https://orcid.org/0000-0002-4284-8646"},"institutions":[{"id":"https://openalex.org/I60158472","display_name":"Concordia University","ror":"https://ror.org/0420zvk78","country_code":"CA","type":"education","lineage":["https://openalex.org/I60158472"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Amr Youssef","raw_affiliation_strings":["Concordia Institute for Information Systems Engineering (CIISE), Concordia University, Montreal, QC, Canada"],"affiliations":[{"raw_affiliation_string":"Concordia Institute for Information Systems Engineering (CIISE), Concordia University, Montreal, QC, Canada","institution_ids":["https://openalex.org/I60158472"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5008241298"],"corresponding_institution_ids":["https://openalex.org/I60158472"],"apc_list":null,"apc_paid":null,"fwci":1.0425,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.80213343,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":"11","issue":"6","first_page":"6313","last_page":"6327"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9973000288009644,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11504","display_name":"Advanced Authentication Protocols Security","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6568310856819153},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5194196701049805}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6568310856819153},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5194196701049805}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tnse.2024.3432836","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnse.2024.3432836","pdf_url":null,"source":{"id":"https://openalex.org/S2484352698","display_name":"IEEE Transactions on Network Science and Engineering","issn_l":"2327-4697","issn":["2327-4697","2334-329X"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network Science and Engineering","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2506.12026","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2506.12026","pdf_url":"https://arxiv.org/pdf/2506.12026","source":{"id":"https://openalex.org/S4393918464","display_name":"ArXiv.org","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2506.12026","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2506.12026","pdf_url":"https://arxiv.org/pdf/2506.12026","source":{"id":"https://openalex.org/S4393918464","display_name":"ArXiv.org","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":41,"referenced_works":["https://openalex.org/W2077092541","https://openalex.org/W2091877728","https://openalex.org/W2544274814","https://openalex.org/W2597779881","https://openalex.org/W2612012086","https://openalex.org/W2618267215","https://openalex.org/W2625154275","https://openalex.org/W2756609872","https://openalex.org/W2794657001","https://openalex.org/W2903166669","https://openalex.org/W2915352631","https://openalex.org/W2923884942","https://openalex.org/W3015844221","https://openalex.org/W3027300110","https://openalex.org/W3112409568","https://openalex.org/W3130410014","https://openalex.org/W3164280817","https://openalex.org/W3168180835","https://openalex.org/W3197835242","https://openalex.org/W3199104148","https://openalex.org/W3215660704","https://openalex.org/W4224027183","https://openalex.org/W4238891088","https://openalex.org/W4255015421","https://openalex.org/W4287845197","https://openalex.org/W4288247330","https://openalex.org/W4297802758","https://openalex.org/W4310398604","https://openalex.org/W6691491171","https://openalex.org/W6712237015","https://openalex.org/W6725918562","https://openalex.org/W6730426483","https://openalex.org/W6742578501","https://openalex.org/W6742834333","https://openalex.org/W6766106223","https://openalex.org/W6767207705","https://openalex.org/W6776698970","https://openalex.org/W6781945658","https://openalex.org/W6787230407","https://openalex.org/W6801131132","https://openalex.org/W6926872087"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052","https://openalex.org/W2382290278","https://openalex.org/W4395014643"],"abstract_inverted_index":{"In":[0,255],"many":[1],"web":[2],"applications,":[3],"such":[4,43,193],"as":[5,181,183],"Content":[6],"Delivery":[7],"Networks":[8],"(CDNs),":[9],"TLS":[10,18,40,64,73,179],"credentials":[11],"are":[12],"shared,":[13],"e.g.,":[14],"between":[15],"the":[16,22,31,35,69,129,145,153,174,178],"website's":[17],"origin":[19],"server":[20,70],"and":[21,37,85,121,171,219,229,261],"CDN's":[23],"edge":[24],"servers,":[25],"which":[26,52],"can":[27],"be":[28,150],"distributed":[29],"around":[30],"globe.":[32],"To":[33,191,207],"enhance":[34],"security":[36,263],"trust":[38,62],"for":[39,54,167,184,205],"1.3":[41,74],"in":[42,63,103,168],"scenarios,":[44],"we":[45,197,210,257],"propose":[46],"LURK-T,":[47],"a":[48,76,86,104,194,199,233,241],"provably":[49],"secure":[50],"framework":[51],"allows":[53,166],"limited":[55],"use":[56],"of":[57,72,136,173,177,187],"remote":[58],"keys":[59],"with":[60,152,222],"added":[61],"1.3.":[65],"We":[66,224],"efficiently":[67],"decouple":[68],"side":[71,176],"into":[75],"LURK-T":[77,87,146,154,213,239],"Crypto":[78,147,214],"Service":[79,148,215],"(<inline-formula":[80,89],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[81,90,95,111,117,123],"xmlns:xlink=\"http://www.w3.org/1999/xlink\"><tex-math":[82,91,96,112,118,124],"notation=\"LaTeX\">$\\mathit":[83,92,97,113,119,125],"{CS}$</tex-math></inline-formula>)":[84],"Engine":[88],"{E}$</tex-math></inline-formula>).":[93],"<inline-formula":[94,110,116,122],"{CS}$</tex-math></inline-formula>":[98,120],"executes":[99],"all":[100,185],"cryptographic":[101,175,259],"operations":[102],"Trusted":[105],"Execution":[106],"Environment":[107],"(TEE),":[108],"upon":[109],"{E}$</tex-math></inline-formula>\u2019s":[114],"requests.":[115],"{E}$</tex-math></inline-formula>":[126],"together":[127],"provide":[128,198,258],"whole":[130],"TLS-server":[131,243],"functionality.":[132],"A":[133],"major":[134],"benefit":[135],"our":[137,164,212],"construction":[138],"is":[139,142],"that":[140],"it":[141,157,221],"application":[143],"agnostic;":[144],"could":[149,158],"collocated":[151],"Engine,":[155],"or":[156],"run":[159],"on":[160],"different":[161],"machines.":[162],"Thus,":[163],"design":[165],"situ":[169],"attestation":[170],"protection":[172],"server,":[180],"well":[182],"setups":[186],"CDNs":[188],"over":[189],"TLS.":[190],"support":[192],"generic":[195],"decoupling,":[196],"full":[200],"Application":[201],"Programming":[202],"Interface":[203],"(API)":[204],"LURK-T.":[206],"this":[208],"end,":[209],"implement":[211],"using":[216,238,265],"Intel":[217],"SGX":[218],"integrate":[220],"OpenSSL.":[223],"also":[225],"test":[226],"LURK-T's":[227],"efficiency":[228],"show":[230],"that,":[231],"from":[232],"TLS-client's":[234],"perspective,":[235],"HTTPS":[236],"servers":[237],"instead":[240],"traditional":[242],"have":[244],"no":[245],"noticeable":[246],"overhead":[247],"when":[248],"serving":[249],"files":[250],"greater":[251],"than":[252],"1":[253],"MB.":[254],"addition,":[256],"proofs":[260],"formal":[262],"verification":[264],"ProVerif.":[266]},"counts_by_year":[{"year":2025,"cited_by_count":3}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}
