{"id":"https://openalex.org/W2640092413","doi":"https://doi.org/10.1109/sp.2017.58","title":"Implementing and Proving the TLS 1.3 Record Layer","display_name":"Implementing and Proving the TLS 1.3 Record Layer","publication_year":2017,"publication_date":"2017-05-01","ids":{"openalex":"https://openalex.org/W2640092413","doi":"https://doi.org/10.1109/sp.2017.58","mag":"2640092413"},"language":"en","primary_location":{"id":"doi:10.1109/sp.2017.58","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp.2017.58","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://www.research.ed.ac.uk/en/publications/4bfb4335-3859-4583-9dca-6a0dae28a7f5","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5112054753","display_name":"Antoine Delignat-Lavaud","orcid":null},"institutions":[{"id":"https://openalex.org/I4210164937","display_name":"Microsoft Research (United Kingdom)","ror":"https://ror.org/05k87vq12","country_code":"GB","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210164937"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Antoine Delignat-Lavaud","raw_affiliation_strings":["Microsoft Research","Microsoft Research [Cambridge]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research","institution_ids":["https://openalex.org/I4210164937"]},{"raw_affiliation_string":"Microsoft Research [Cambridge]","institution_ids":["https://openalex.org/I4210164937"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5108519702","display_name":"C\u00e9dric Fournet","orcid":"https://orcid.org/0000-0001-6929-886X"},"institutions":[{"id":"https://openalex.org/I4210164937","display_name":"Microsoft Research (United Kingdom)","ror":"https://ror.org/05k87vq12","country_code":"GB","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210164937"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Cedric Fournet","raw_affiliation_strings":["Microsoft Research","Microsoft Research [Cambridge]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research","institution_ids":["https://openalex.org/I4210164937"]},{"raw_affiliation_string":"Microsoft Research [Cambridge]","institution_ids":["https://openalex.org/I4210164937"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082774652","display_name":"Markulf Kohlweiss","orcid":"https://orcid.org/0000-0002-8660-9663"},"institutions":[{"id":"https://openalex.org/I4210164937","display_name":"Microsoft Research (United Kingdom)","ror":"https://ror.org/05k87vq12","country_code":"GB","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210164937"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Markulf Kohlweiss","raw_affiliation_strings":["Microsoft Research","Microsoft Research [Cambridge]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research","institution_ids":["https://openalex.org/I4210164937"]},{"raw_affiliation_string":"Microsoft Research [Cambridge]","institution_ids":["https://openalex.org/I4210164937"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055019834","display_name":"Jonathan Protzenko","orcid":"https://orcid.org/0000-0001-7347-3050"},"institutions":[{"id":"https://openalex.org/I4210132990","display_name":"State Key Laboratory of Cryptology","ror":"https://ror.org/02pn5rj08","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210132990"]},{"id":"https://openalex.org/I4210164937","display_name":"Microsoft Research (United Kingdom)","ror":"https://ror.org/05k87vq12","country_code":"GB","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210164937"]}],"countries":["CN","GB"],"is_corresponding":false,"raw_author_name":"Jonathan Protzenko","raw_affiliation_strings":["Microsoft Research","Programming securely with cryptography"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research","institution_ids":["https://openalex.org/I4210164937"]},{"raw_affiliation_string":"Programming securely with cryptography","institution_ids":["https://openalex.org/I4210132990"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102801489","display_name":"Aseem Rastogi","orcid":"https://orcid.org/0000-0003-3283-8011"},"institutions":[{"id":"https://openalex.org/I4210164937","display_name":"Microsoft Research (United Kingdom)","ror":"https://ror.org/05k87vq12","country_code":"GB","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210164937"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Aseem Rastogi","raw_affiliation_strings":["Microsoft Research"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research","institution_ids":["https://openalex.org/I4210164937"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039334115","display_name":"Nikhil Swamy","orcid":"https://orcid.org/0000-0001-5348-9266"},"institutions":[{"id":"https://openalex.org/I4210164937","display_name":"Microsoft Research (United Kingdom)","ror":"https://ror.org/05k87vq12","country_code":"GB","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210164937"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Nikhil Swamy","raw_affiliation_strings":["Microsoft Research"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research","institution_ids":["https://openalex.org/I4210164937"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088954009","display_name":"Santiago Zanella-B\u00e9guelin","orcid":"https://orcid.org/0000-0003-0479-9967"},"institutions":[{"id":"https://openalex.org/I4210164937","display_name":"Microsoft Research (United Kingdom)","ror":"https://ror.org/05k87vq12","country_code":"GB","type":"company","lineage":["https://openalex.org/I1290206253","https://openalex.org/I4210164937"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Santiago Zanella-Beguelin","raw_affiliation_strings":["Microsoft Research","Microsoft Research [Cambridge]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Microsoft Research","institution_ids":["https://openalex.org/I4210164937"]},{"raw_affiliation_string":"Microsoft Research [Cambridge]","institution_ids":["https://openalex.org/I4210164937"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026297326","display_name":"Karthikeyan Bhargavan","orcid":"https://orcid.org/0000-0002-3152-8997"},"institutions":[{"id":"https://openalex.org/I1326498283","display_name":"Institut national de recherche en sciences et technologies du num\u00e9rique","ror":"https://ror.org/02kvxyf05","country_code":"FR","type":"government","lineage":["https://openalex.org/I1326498283"]},{"id":"https://openalex.org/I4210132990","display_name":"State Key Laboratory of Cryptology","ror":"https://ror.org/02pn5rj08","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210132990"]}],"countries":["CN","FR"],"is_corresponding":false,"raw_author_name":"Karthikeyan Bhargavan","raw_affiliation_strings":["INRIA Paris-Rocquencourt","Programming securely with cryptography"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"INRIA Paris-Rocquencourt","institution_ids":["https://openalex.org/I1326498283"]},{"raw_affiliation_string":"Programming securely with cryptography","institution_ids":["https://openalex.org/I4210132990"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046846342","display_name":"Jianyang Pan","orcid":null},"institutions":[{"id":"https://openalex.org/I1326498283","display_name":"Institut national de recherche en sciences et technologies du num\u00e9rique","ror":"https://ror.org/02kvxyf05","country_code":"FR","type":"government","lineage":["https://openalex.org/I1326498283"]},{"id":"https://openalex.org/I4210132990","display_name":"State Key Laboratory of Cryptology","ror":"https://ror.org/02pn5rj08","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210132990"]}],"countries":["CN","FR"],"is_corresponding":false,"raw_author_name":"Jianyang Pan","raw_affiliation_strings":["INRIA Paris-Rocquencourt","Programming securely with cryptography"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"INRIA Paris-Rocquencourt","institution_ids":["https://openalex.org/I1326498283"]},{"raw_affiliation_string":"Programming securely with cryptography","institution_ids":["https://openalex.org/I4210132990"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5000876822","display_name":"Jean Karim Zinzindohou\u00e9","orcid":null},"institutions":[{"id":"https://openalex.org/I1326498283","display_name":"Institut national de recherche en sciences et technologies du num\u00e9rique","ror":"https://ror.org/02kvxyf05","country_code":"FR","type":"government","lineage":["https://openalex.org/I1326498283"]},{"id":"https://openalex.org/I4210132990","display_name":"State Key Laboratory of Cryptology","ror":"https://ror.org/02pn5rj08","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210132990"]}],"countries":["CN","FR"],"is_corresponding":false,"raw_author_name":"Jean Karim Zinzindohoue","raw_affiliation_strings":["INRIA Paris-Rocquencourt","Programming securely with cryptography"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"INRIA Paris-Rocquencourt","institution_ids":["https://openalex.org/I1326498283"]},{"raw_affiliation_string":"Programming securely with cryptography","institution_ids":["https://openalex.org/I4210132990"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":82,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"463","last_page":"482"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.842679500579834},{"id":"https://openalex.org/keywords/authenticated-encryption","display_name":"Authenticated encryption","score":0.6802557706832886},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.6504303812980652},{"id":"https://openalex.org/keywords/handshake","display_name":"Handshake","score":0.6463102102279663},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.5813657641410828},{"id":"https://openalex.org/keywords/cryptographic-nonce","display_name":"Cryptographic nonce","score":0.534713625907898},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.5245868563652039},{"id":"https://openalex.org/keywords/padding","display_name":"Padding","score":0.47114625573158264},{"id":"https://openalex.org/keywords/transport-layer-security","display_name":"Transport Layer Security","score":0.4518031179904938},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.448906809091568},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.42224428057670593},{"id":"https://openalex.org/keywords/replay-attack","display_name":"Replay attack","score":0.4123838543891907},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3042086064815521},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.28637564182281494},{"id":"https://openalex.org/keywords/asynchronous-communication","display_name":"Asynchronous communication","score":0.27542996406555176},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.2176225185394287}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.842679500579834},{"id":"https://openalex.org/C128619300","wikidata":"https://www.wikidata.org/wiki/Q15263584","display_name":"Authenticated encryption","level":3,"score":0.6802557706832886},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.6504303812980652},{"id":"https://openalex.org/C2778000800","wikidata":"https://www.wikidata.org/wiki/Q830043","display_name":"Handshake","level":3,"score":0.6463102102279663},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.5813657641410828},{"id":"https://openalex.org/C9996903","wikidata":"https://www.wikidata.org/wiki/Q1749235","display_name":"Cryptographic nonce","level":3,"score":0.534713625907898},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.5245868563652039},{"id":"https://openalex.org/C165435473","wikidata":"https://www.wikidata.org/wiki/Q1509884","display_name":"Padding","level":2,"score":0.47114625573158264},{"id":"https://openalex.org/C148176105","wikidata":"https://www.wikidata.org/wiki/Q206494","display_name":"Transport Layer Security","level":3,"score":0.4518031179904938},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.448906809091568},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.42224428057670593},{"id":"https://openalex.org/C11560541","wikidata":"https://www.wikidata.org/wiki/Q1756025","display_name":"Replay attack","level":3,"score":0.4123838543891907},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3042086064815521},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.28637564182281494},{"id":"https://openalex.org/C151319957","wikidata":"https://www.wikidata.org/wiki/Q752739","display_name":"Asynchronous communication","level":2,"score":0.27542996406555176},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2176225185394287}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.1109/sp.2017.58","is_oa":false,"landing_page_url":"https://doi.org/10.1109/sp.2017.58","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2017 IEEE Symposium on Security and Privacy (SP)","raw_type":"proceedings-article"},{"id":"pmh:oai:pure.ed.ac.uk:publications/4bfb4335-3859-4583-9dca-6a0dae28a7f5","is_oa":true,"landing_page_url":"http://hdl.handle.net/20.500.11820/4bfb4335-3859-4583-9dca-6a0dae28a7f5","pdf_url":"https://www.research.ed.ac.uk/en/publications/4bfb4335-3859-4583-9dca-6a0dae28a7f5","source":{"id":"https://openalex.org/S4406922455","display_name":"Edinburgh Research Explorer","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":""},{"id":"pmh:oai:HAL:hal-01674096v1","is_oa":true,"landing_page_url":"https://hal.inria.fr/hal-01674096","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"SP 2017 - 38th IEEE Symposium on Security and Privacy","raw_type":"\\ninfo:eu-repo/semantics/conferenceObject\\n"},{"id":"pmh:oai:HAL:hal-01674096v2","is_oa":false,"landing_page_url":"https://inria.hal.science/hal-01674096","pdf_url":null,"source":{"id":"https://openalex.org/S4306402512","display_name":"HAL (Le Centre pour la Communication Scientifique Directe)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1294671590","host_organization_name":"Centre National de la Recherche Scientifique","host_organization_lineage":["https://openalex.org/I1294671590"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"SP 2017 - 38th IEEE Symposium on Security and Privacy, May 2017, San Jose, United States. pp.463-482, ⟨10.1109/SP.2017.58⟩","raw_type":"info:eu-repo/semantics/conferenceObject"},{"id":"pmh:oai:pure.ed.ac.uk:openaire/4bfb4335-3859-4583-9dca-6a0dae28a7f5","is_oa":true,"landing_page_url":"https://www.research.ed.ac.uk/en/publications/4bfb4335-3859-4583-9dca-6a0dae28a7f5","pdf_url":null,"source":{"id":"https://openalex.org/S4306400321","display_name":"Edinburgh Research Explorer (University of Edinburgh)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I98677209","host_organization_name":"University of Edinburgh","host_organization_lineage":["https://openalex.org/I98677209"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Delignat-Lavaud, A, Fournet, C, Kohlweiss, M, Protzenko, J, Rastogi, A, Swamy, N, B\u00e9guelin, S Z, Bhargavan, K, Pan, J & Zinzindohoue, J K 2017, Implementing and Proving the TLS 1.3 Record Layer. in 2017 IEEE Symposium on Security and Privacy, SP 2017, San Jose, CA, USA, May 22-26, 2017. Institute of Electrical and Electronics Engineers, San Jose, CA, USA, pp. 463-482, 2017 IEEE Symposium on Security and Privacy, San Jose, CA, United States, 22/05/17. https://doi.org/10.1109/SP.2017.58","raw_type":"info:eu-repo/semantics/conferenceObject"}],"best_oa_location":{"id":"pmh:oai:pure.ed.ac.uk:publications/4bfb4335-3859-4583-9dca-6a0dae28a7f5","is_oa":true,"landing_page_url":"http://hdl.handle.net/20.500.11820/4bfb4335-3859-4583-9dca-6a0dae28a7f5","pdf_url":"https://www.research.ed.ac.uk/en/publications/4bfb4335-3859-4583-9dca-6a0dae28a7f5","source":{"id":"https://openalex.org/S4406922455","display_name":"Edinburgh Research Explorer","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":""},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2640092413.pdf","grobid_xml":"https://content.openalex.org/works/W2640092413.grobid-xml"},"referenced_works_count":54,"referenced_works":["https://openalex.org/W39167138","https://openalex.org/W75729132","https://openalex.org/W189766157","https://openalex.org/W1495368944","https://openalex.org/W1511186238","https://openalex.org/W1535554763","https://openalex.org/W1551910192","https://openalex.org/W1627549671","https://openalex.org/W1763079358","https://openalex.org/W1975344666","https://openalex.org/W1982774175","https://openalex.org/W1993825099","https://openalex.org/W2070775894","https://openalex.org/W2085179296","https://openalex.org/W2092279637","https://openalex.org/W2099537756","https://openalex.org/W2107506969","https://openalex.org/W2153041122","https://openalex.org/W2163005041","https://openalex.org/W2167606175","https://openalex.org/W2170528665","https://openalex.org/W2170618460","https://openalex.org/W2189153846","https://openalex.org/W2249289274","https://openalex.org/W2267469130","https://openalex.org/W2268491029","https://openalex.org/W2270246438","https://openalex.org/W2295619595","https://openalex.org/W2399916509","https://openalex.org/W2401040404","https://openalex.org/W2402906095","https://openalex.org/W2404275717","https://openalex.org/W2406476592","https://openalex.org/W2488274487","https://openalex.org/W2497610130","https://openalex.org/W2513374167","https://openalex.org/W2515070993","https://openalex.org/W2532335977","https://openalex.org/W2536707834","https://openalex.org/W2727655671","https://openalex.org/W2774510177","https://openalex.org/W2949799029","https://openalex.org/W2950588028","https://openalex.org/W2951531629","https://openalex.org/W3031568925","https://openalex.org/W4255560409","https://openalex.org/W6607788392","https://openalex.org/W6629813207","https://openalex.org/W6633067163","https://openalex.org/W6638205164","https://openalex.org/W6648836723","https://openalex.org/W6696724901","https://openalex.org/W6713209237","https://openalex.org/W6713488249"],"related_works":["https://openalex.org/W2951181267","https://openalex.org/W2407726188","https://openalex.org/W4386737895","https://openalex.org/W4302854873","https://openalex.org/W3216230948","https://openalex.org/W3030044402","https://openalex.org/W2620067289","https://openalex.org/W3124916713","https://openalex.org/W1593404714","https://openalex.org/W2093324650"],"abstract_inverted_index":{"The":[0],"record":[1,59,151,181,284,321,354],"layer":[2,152,182,285,322,355],"is":[3,16,194,363],"the":[4,47,58,108,149,176,180,192,213,219,249,283,291,300,320,324,351],"main":[5],"bridge":[6],"between":[7,113],"TLS":[8,65,94,150,292,353],"applications":[9],"and":[10,31,37,89,103,124,126,133,143,153,165,222,233,235,262,303,306,333,335,345,360,366],"internal":[11],"sub-protocols.":[12,114,293],"Its":[13],"core":[14],"functionality":[15],"an":[17,198,287],"elaborate":[18],"form":[19],"of":[20,24,72,99,138,148,179,225,228,240,251,282,319],"authenticated":[21],"encryption:":[22],"streams":[23],"messages":[25,129],"for":[26,76,201,299],"each":[27,202],"sub-protocol":[28],"(handshake,":[29],"alert,":[30],"application":[32,121],"data)":[33],"are":[34],"fragmented,":[35],"multiplexed,":[36],"encrypted":[38],"with":[39,79,84,331],"optional":[40],"padding":[41],"to":[42,57,62,111,183,268,272],"hide":[43],"their":[44,241],"lengths.":[45],"Conversely,":[46],"sub-protocols":[48],"may":[49],"provide":[50,236,368],"fresh":[51],"keys":[52,132],"or":[53],"signal":[54],"stream":[55,269],"termination":[56],"layer.":[60],"Compared":[61],"prior":[63],"versions,":[64],"1.3":[66],"discards":[67],"obsolete":[68],"schemes":[69],"in":[70,96,157,191,358],"favor":[71],"a":[73,134,145,159,206,237,252,279],"common":[74],"construction":[75,255],"Authenticated":[77],"Encryption":[78],"Associated":[80],"Data":[81],"(AEAD),":[82],"instantiated":[83],"algorithms":[85,156,231],"such":[86,118],"as":[87,119,171],"AES-GCM":[88],"ChaCha20-Poly1305.":[90],"It":[91,105],"differs":[92],"from":[93,257],"1.2":[95],"its":[97,154,187,369],"use":[98],"padding,":[100],"associated":[101],"data":[102,122,312],"nonces.":[104],"also":[106],"encrypts":[107],"content-type":[109],"used":[110],"multiplex":[112],"New":[115],"protocol":[116],"features":[117],"early":[120],"(0-RTT":[123],"0.5-RTT)":[125],"late":[127],"handshake":[128],"require":[130],"additional":[131],"more":[135],"general":[136],"model":[137,281],"stateful":[139],"encryption.":[140,275],"We":[141,174,216,247,264,294,315],"build":[142,278],"verify":[144,218],"reference":[146],"implementation":[147,318],"cryptographic":[155,184,207,361],"F*,":[158],"dependently":[160],"typed":[161],"language":[162],"where":[163],"security":[164,178,242,250,280,297],"functional":[166,220,342],"guarantees":[167],"can":[168],"be":[169],"specified":[170],"pre-and":[172],"post-conditions.":[173],"reduce":[175],"high-level":[177],"assumptions":[185],"on":[186,310],"ciphers.":[188],"Each":[189],"step":[190,203],"reduction":[193],"verified":[195,371],"by":[196],"typing":[197],"F*":[199],"module,":[200],"that":[204,289,328,350],"involves":[205],"assumption,":[208],"this":[209],"module":[210],"precisely":[211],"captures":[212],"corresponding":[214],"game.":[215],"first":[217,267,370],"correctness":[221],"injectivity":[223],"properties":[224],"our":[226,317,341],"implementations":[227],"one-time":[229,260],"MAC":[230,261],"(Poly1305":[232],"GHASH)":[234],"generic":[238,253],"proof":[239],"given":[243],"these":[244],"two":[245],"properties.":[246],"show":[248],"AEAD":[254],"built":[256],"any":[258],"secure":[259],"PRF.":[263],"extend":[265],"AEAD,":[266],"encryption,":[270],"then":[271],"length-hiding,":[273],"multiplexed":[274],"Finally,":[276],"we":[277,348,367],"against":[286],"adversary":[288],"controls":[290],"compute":[295],"concrete":[296],"bounds":[298],"AES_128_GCM,":[301],"AES_256_GCM,":[302],"CHACHA20_POLY1305":[304],"ciphersuites,":[305],"derive":[307],"recommended":[308],"limits":[309],"sent":[311],"before":[313],"re-keying.":[314],"plug":[316],"into":[323],"miTLS":[325],"library,":[326],"confirm":[327],"they":[329],"interoperate":[330],"Chrome":[332],"Firefox,":[334],"report":[336],"initial":[337],"performance":[338],"results.":[339],"Combining":[340],"correctness,":[343],"security,":[344],"experimental":[346],"results,":[347],"conclude":[349],"new":[352],"(as":[356],"described":[357],"RFCs":[359],"standards)":[362],"provably":[364],"secure,":[365],"implementation.":[372]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":8},{"year":2022,"cited_by_count":9},{"year":2021,"cited_by_count":13},{"year":2020,"cited_by_count":8},{"year":2019,"cited_by_count":13},{"year":2018,"cited_by_count":9},{"year":2017,"cited_by_count":6}],"updated_date":"2026-07-19T07:52:34.831488","created_date":"2025-10-10T00:00:00"}