{"id":"https://openalex.org/W4388857906","doi":"https://doi.org/10.1145/3576915.3616629","title":"Passive SSH Key Compromise via Lattices","display_name":"Passive SSH Key Compromise via Lattices","publication_year":2023,"publication_date":"2023-11-15","ids":{"openalex":"https://openalex.org/W4388857906","doi":"https://doi.org/10.1145/3576915.3616629"},"language":"en","primary_location":{"id":"doi:10.1145/3576915.3616629","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3576915.3616629","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3576915.3616629","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3576915.3616629","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022789588","display_name":"Keegan Ryan","orcid":"https://orcid.org/0000-0001-5846-2046"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Keegan Ryan","raw_affiliation_strings":["University of California, San Diego, La Jolla, CA, USA"],"raw_orcid":"https://orcid.org/0000-0001-5846-2046","affiliations":[{"raw_affiliation_string":"University of California, San Diego, La Jolla, CA, USA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5093307715","display_name":"Kaiwen He","orcid":"https://orcid.org/0000-0003-0613-5208"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]},{"id":"https://openalex.org/I63966007","display_name":"Massachusetts Institute of Technology","ror":"https://ror.org/042nb2s44","country_code":"US","type":"education","lineage":["https://openalex.org/I63966007"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kaiwen He","raw_affiliation_strings":["University of California, San Diego & Massachusetts Institute of Technology, La Jolla, CA, USA"],"raw_orcid":"https://orcid.org/0000-0003-0613-5208","affiliations":[{"raw_affiliation_string":"University of California, San Diego & Massachusetts Institute of Technology, La Jolla, CA, USA","institution_ids":["https://openalex.org/I36258959","https://openalex.org/I63966007"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036659612","display_name":"George Arnold Sullivan","orcid":"https://orcid.org/0000-0002-0091-8183"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"George Arnold Sullivan","raw_affiliation_strings":["University of California, San Diego, La Jolla, CA, USA"],"raw_orcid":"https://orcid.org/0000-0002-0091-8183","affiliations":[{"raw_affiliation_string":"University of California, San Diego, La Jolla, CA, USA","institution_ids":["https://openalex.org/I36258959"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007301401","display_name":"Nadia Heninger","orcid":"https://orcid.org/0000-0002-7904-7295"},"institutions":[{"id":"https://openalex.org/I36258959","display_name":"University of California San Diego","ror":"https://ror.org/0168r3w48","country_code":"US","type":"education","lineage":["https://openalex.org/I36258959"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nadia Heninger","raw_affiliation_strings":["University of California, San Diego, La Jolla, CA, USA"],"raw_orcid":"https://orcid.org/0000-0002-7904-7295","affiliations":[{"raw_affiliation_string":"University of California, San Diego, La Jolla, CA, USA","institution_ids":["https://openalex.org/I36258959"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":9,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"2886","last_page":"2900"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.994700014591217,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.992900013923645,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7114058136940002},{"id":"https://openalex.org/keywords/signature","display_name":"Signature (topology)","score":0.6046226024627686},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.5412004590034485},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.5274028182029724},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4939902424812317},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.4532800614833832},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.44251370429992676},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.31913524866104126},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.12890082597732544}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7114058136940002},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.6046226024627686},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.5412004590034485},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5274028182029724},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4939902424812317},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.4532800614833832},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.44251370429992676},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.31913524866104126},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.12890082597732544},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3576915.3616629","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3576915.3616629","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3576915.3616629","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},{"id":"pmh:oai:dspace.mit.edu:1721.1/153136","is_oa":true,"landing_page_url":"https://hdl.handle.net/1721.1/153136","pdf_url":"https://dspace.mit.edu/bitstream/1721.1/153136/1/3576915.3616629.pdf","source":{"id":"https://openalex.org/S4306400425","display_name":"DSpace@MIT (Massachusetts Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I63966007","host_organization_name":"Massachusetts Institute of Technology","host_organization_lineage":["https://openalex.org/I63966007"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Association for Computing Machinery","raw_type":"http://purl.org/eprint/type/ConferencePaper"}],"best_oa_location":{"id":"doi:10.1145/3576915.3616629","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3576915.3616629","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3576915.3616629","source":null,"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1526161229","display_name":null,"funder_award_id":"2048563,1913210","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5814132576","display_name":"CAREER: Cryptographic Security at Internet Scale","funder_award_id":"2048563","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4388857906.pdf","grobid_xml":"https://content.openalex.org/works/W4388857906.grobid-xml"},"referenced_works_count":40,"referenced_works":["https://openalex.org/W57082118","https://openalex.org/W197405257","https://openalex.org/W1489183424","https://openalex.org/W1490771242","https://openalex.org/W1494154039","https://openalex.org/W1495447492","https://openalex.org/W1516506771","https://openalex.org/W1558077212","https://openalex.org/W1623551255","https://openalex.org/W1949661937","https://openalex.org/W2001637908","https://openalex.org/W2023385504","https://openalex.org/W2029092135","https://openalex.org/W2066425771","https://openalex.org/W2067706455","https://openalex.org/W2101040389","https://openalex.org/W2116392403","https://openalex.org/W2135705601","https://openalex.org/W2138779530","https://openalex.org/W2141040012","https://openalex.org/W2144862055","https://openalex.org/W2147906334","https://openalex.org/W2156030242","https://openalex.org/W2162653919","https://openalex.org/W2231987179","https://openalex.org/W2253199766","https://openalex.org/W2273298738","https://openalex.org/W2303153142","https://openalex.org/W2554129713","https://openalex.org/W2578094717","https://openalex.org/W2774887369","https://openalex.org/W2790272563","https://openalex.org/W2812883516","https://openalex.org/W2891162082","https://openalex.org/W2915352631","https://openalex.org/W2979371882","https://openalex.org/W3190010441","https://openalex.org/W4210531213","https://openalex.org/W4251062109","https://openalex.org/W4385654471"],"related_works":["https://openalex.org/W2092530219","https://openalex.org/W2388464034","https://openalex.org/W2413467815","https://openalex.org/W2126037447","https://openalex.org/W2888183313","https://openalex.org/W4243688874","https://openalex.org/W4252709806","https://openalex.org/W2081673223","https://openalex.org/W2154930424","https://openalex.org/W1974314423"],"abstract_inverted_index":{"We":[0,61,90],"demonstrate":[1],"that":[2,18,51,63],"a":[3,20,57,87,92],"passive":[4,58],"network":[5,59],"attacker":[6],"can":[7],"opportunistically":[8],"obtain":[9],"private":[10,82],"RSA":[11],"host":[12],"keys":[13,114],"from":[14,118],"an":[15,75],"SSH":[16,39],"server":[17],"experiences":[19],"naturally":[21],"arising":[22],"fault":[23],"during":[24],"signature":[25,43,66,88],"computation.":[26],"In":[27],"prior":[28],"work,":[29],"this":[30,103],"was":[31],"not":[32,53],"believed":[33],"to":[34,56,79,109],"be":[35,54],"possible":[36],"for":[37,64,71],"the":[38,42,47,65,81,96,116],"protocol":[40],"because":[41],"included":[44],"information":[45],"like":[46],"shared":[48],"Diffie-Hellman":[49],"secret":[50],"would":[52],"available":[55],"observer.":[60],"show":[62],"parameters":[67],"commonly":[68],"in":[69,84,102,115],"use":[70,106],"SSH,":[72,97],"there":[73],"is":[74],"efficient":[76],"lattice":[77],"attack":[78,108],"recover":[80],"key":[83],"case":[85],"of":[86,95,112],"fault.":[89],"provide":[91],"security":[93],"analysis":[94],"IKEv1,":[98],"and":[99,105],"IKEv2":[100],"protocols":[101],"scenario,":[104],"our":[107],"discover":[110],"hundreds":[111],"compromised":[113],"wild":[117],"several":[119],"independently":[120],"vulnerable":[121],"implementations.":[122]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":4}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}