{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,12]],"date-time":"2026-08-12T22:10:00Z","timestamp":1786572600182,"version":"build-2736575974"},"publisher-location":"Cham","reference-count":32,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031911002","type":"print"},{"value":"9783031911019","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-031-91101-9_8","type":"book-chapter","created":{"date-parts":[[2025,4,27]],"date-time":"2025-04-27T21:14:25Z","timestamp":1745788465000},"page":"212-241","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["Analysis of\u00a0the\u00a0Telegram Key Exchange"],"prefix":"10.1007","author":[{"given":"Martin R.","family":"Albrecht","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8616-4150","authenticated-orcid":false,"given":"Lenka","family":"Marekov\u00e1","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5145-4489","authenticated-orcid":false,"given":"Kenneth G.","family":"Paterson","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6013-7426","authenticated-orcid":false,"given":"Eyal","family":"Ronen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-3963-5584","authenticated-orcid":false,"given":"Igors","family":"Stepanovs","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,4,28]]},"reference":[{"key":"8_CR1","unstructured":"Albrecht, M.R., Blasco, J., Jensen, R.B., Marekov\u00e1, L.: Collective information security in large-scale urban protests: the case of Hong Kong. In: Bailey, M., Greenstadt, R. (eds.) USENIX Security 2021, pp. 3363\u20133380. USENIX Association (2021)"},{"key":"8_CR2","doi-asserted-by":"publisher","unstructured":"Albrecht, M.R., Marekov\u00e1, L., Paterson, K.G., Stepanovs, I.: Four attacks and a proof for Telegram. In: 2022 IEEE Symposium on Security and Privacy, pp. 87\u2013106. IEEE Computer Society Press (2022). https:\/\/doi.org\/10.1109\/SP46214.2022.9833666","DOI":"10.1109\/SP46214.2022.9833666"},{"key":"8_CR3","unstructured":"Albrecht, M.R., Marekov\u00e1, L., Paterson, K.G., Stepanovs, I.: Four attacks and a proof for telegram. Cryptology ePrint Archive, Report 2023\/469 (2023). https:\/\/eprint.iacr.org\/2023\/469"},{"key":"8_CR4","doi-asserted-by":"publisher","unstructured":"von Arx, T., Paterson, K.G.: On the cryptographic fragility of the telegram ecosystem. In: Liu, J.K., Xiang, Y., Nepal, S., Tsudik, G. (eds.) ASIACCS 2023, pp. 328\u2013341. ACM Press (2023). https:\/\/doi.org\/10.1145\/3579856.3582811","DOI":"10.1145\/3579856.3582811"},{"key":"8_CR5","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"232","DOI":"10.1007\/3-540-48329-2_21","volume-title":"Advances in Cryptology \u2014 CRYPTO\u2019 93","author":"M Bellare","year":"1994","unstructured":"Bellare, M., Rogaway, P.: Entity authentication and key distribution. In: Stinson, D.R. (ed.) CRYPTO 1993. LNCS, vol. 773, pp. 232\u2013249. Springer, Heidelberg (1994). https:\/\/doi.org\/10.1007\/3-540-48329-2_21"},{"key":"8_CR6","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"409","DOI":"10.1007\/11761679_25","volume-title":"Advances in Cryptology - EUROCRYPT 2006","author":"M Bellare","year":"2006","unstructured":"Bellare, M., Rogaway, P.: The security of triple encryption and a framework\u00a0for\u00a0code-based\u00a0game-playing\u00a0proofs. In: Vaudenay, S. (ed.) EUROCRYPT 2006. LNCS, vol. 4004, pp. 409\u2013426. Springer, Heidelberg (2006). https:\/\/doi.org\/10.1007\/11761679_25"},{"key":"8_CR7","doi-asserted-by":"publisher","unstructured":"Brzuska, C., Fischlin, M., Warinschi, B., Williams, S.C.: Composability of Bellare-Rogaway key exchange protocols. In: Chen, Y., Danezis, G., Shmatikov, V. (eds.) ACM CCS 2011, pp. 51\u201362. ACM Press (2011). https:\/\/doi.org\/10.1145\/2046707.2046716","DOI":"10.1145\/2046707.2046716"},{"key":"8_CR8","unstructured":"Calandrino, J.A., Troncoso, C. (eds.): USENIX Security 2023. USENIX Association (2023)"},{"key":"8_CR9","unstructured":"Cheval, V., Cremers, C., Dax, A., Hirschi, L., Jacomme, C., Kremer, S.: Hash gone bad: automated discovery of protocol attacks that exploit hash function weaknesses. In: Calandrino and Troncoso [8], pp. 5899\u20135916"},{"key":"8_CR10","doi-asserted-by":"publisher","unstructured":"Davis, H., Diemert, D., G\u00fcnther, F., Jager, T.: On the concrete security of TLS 1.3 PSK mode. In: Dunkelman, O., Dziembowski, S. (eds.) EUROCRYPT\u00a02022, Part\u00a0II. LNCS, vol. 13276, pp. 876\u2013906. Springer, Cham (2022). https:\/\/doi.org\/10.1007\/978-3-031-07085-3_30","DOI":"10.1007\/978-3-031-07085-3_30"},{"key":"8_CR11","doi-asserted-by":"publisher","unstructured":"Delpech de Saint Guilhem, C., Fischlin, M., Warinschi, B.: Authentication in key-exchange: definitions, relations and composition. In: Jia, L., K\u00fcsters, R. (eds.) CSF 2020 Computer Security Foundations Symposium, pp. 288\u2013303. IEEE Computer Society Press (2020). https:\/\/doi.org\/10.1109\/CSF49147.2020.00028","DOI":"10.1109\/CSF49147.2020.00028"},{"issue":"4","key":"8_CR12","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s00145-021-09384-1","volume":"34","author":"B Dowling","year":"2021","unstructured":"Dowling, B., Fischlin, M., G\u00fcnther, F., Stebila, D.: A cryptographic analysis of the TLS 1.3 handshake protocol. J. Cryptol. 34(4), 1\u201369 (2021). https:\/\/doi.org\/10.1007\/s00145-021-09384-1","journal-title":"J. Cryptol."},{"issue":"3","key":"8_CR13","doi-asserted-by":"publisher","first-page":"151","DOI":"10.1007\/s001459900025","volume":"10","author":"S Even","year":"1997","unstructured":"Even, S., Mansour, Y.: A construction of a cipher from a single pseudorandom permutation. J. Cryptol. 10(3), 151\u2013161 (1997). https:\/\/doi.org\/10.1007\/s001459900025","journal-title":"J. Cryptol."},{"key":"8_CR14","doi-asserted-by":"publisher","unstructured":"Fischlin, M., G\u00fcnther, F.: Multi-stage key exchange and the case of Google\u2019s QUIC protocol. In: Ahn, G.J., Yung, M., Li, N. (eds.) ACM CCS 2014, pp. 1193\u20131204. ACM Press (2014). https:\/\/doi.org\/10.1145\/2660267.2660308","DOI":"10.1145\/2660267.2660308"},{"key":"8_CR15","doi-asserted-by":"publisher","unstructured":"Fischlin, M., G\u00fcnther, F.: Replay attacks on zero round-trip time: the case of the TLS 1.3 handshake candidates. In: 2017 IEEE European Symposium on Security and Privacy, pp. 60\u201375. IEEE Computer Society Press (2017). https:\/\/doi.org\/10.1109\/EuroSP.2017.18","DOI":"10.1109\/EuroSP.2017.18"},{"key":"8_CR16","doi-asserted-by":"publisher","unstructured":"Fischlin, M., G\u00fcnther, F., Schmidt, B., Warinschi, B.: Key confirmation in key exchange: a formal treatment and implications for TLS 1.3. In: 2016 IEEE Symposium on Security and Privacy, pp. 452\u2013469. IEEE Computer Society Press (2016). https:\/\/doi.org\/10.1109\/SP.2016.34","DOI":"10.1109\/SP.2016.34"},{"key":"8_CR17","unstructured":"G\u00fcnther, F.: Modeling advanced security aspects of key exchange and secure channel protocols (2018). https:\/\/www.felixguenther.info\/publications\/phdthesis-felix-guenther.pdf"},{"key":"8_CR18","unstructured":"Hlauschek, C., Gruber, M., Fankhauser, F., Schanes, C.: Prying open Pandora\u2019s box: KCI attacks against TLS. In: Francillon, A., Ptacek, T. (eds.) 9th USENIX Workshop on Offensive Technologies, WOOT 2015, Washington, DC, USA, 10\u201311 August 2015. USENIX Association (2015). https:\/\/www.usenix.org\/conference\/woot15\/workshop-program\/presentation\/hlauschek"},{"key":"8_CR19","doi-asserted-by":"publisher","unstructured":"Jakobsen, J., Orlandi, C.: On the CCA (in)security of MTProto. In: Proceedings of the 6th Workshop on Security and Privacy in Smartphones and Mobile Devices - SPSM 2016 (2016). https:\/\/doi.org\/10.1145\/2994459.2994468","DOI":"10.1145\/2994459.2994468"},{"key":"8_CR20","unstructured":"Kobeissi, N.: Formal verification for real-world cryptographic protocols and implementations. Theses, INRIA Paris; Ecole Normale Sup\u00e9rieure de Paris - ENS Paris (2018). https:\/\/hal.inria.fr\/tel-01950884"},{"key":"8_CR21","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"173","DOI":"10.1007\/978-3-540-24632-9_13","volume-title":"Public Key Cryptography \u2013 PKC 2004","author":"T Koshiba","year":"2004","unstructured":"Koshiba, T., Kurosawa, K.: Short exponent Diffie-Hellman problems. In: Bao, F., Deng, R., Zhou, J. (eds.) PKC 2004. LNCS, vol. 2947, pp. 173\u2013186. Springer, Heidelberg (2004). https:\/\/doi.org\/10.1007\/978-3-540-24632-9_13"},{"key":"8_CR22","doi-asserted-by":"crossref","unstructured":"Miculan, M., Vitacolonna, N.: Automated symbolic verification of Telegram\u2019s MTProto\u00a02.0. In: De\u00a0Capitani\u00a0di Vimercati, S., Samarati, P. (eds.) Proceedings of the 18th International Conference on Security and Cryptography, SECRYPT 2021, pp. 185\u2013197. SciTePress (2021)","DOI":"10.5220\/0010549601850197"},{"key":"8_CR23","unstructured":"Paterson, K.G., Scarlata, M., Truong, K.T.: Three lessons from threema: analysis of a secure messenger. In: Calandrino and Troncoso [8], pp. 1289\u20131306"},{"issue":"4","key":"8_CR24","doi-asserted-by":"publisher","first-page":"223","DOI":"10.1007\/s00145-002-0133-9","volume":"15","author":"V Shoup","year":"2002","unstructured":"Shoup, V.: OAEP Reconsidered. J. Cryptol. 15(4), 223\u2013249 (2002). https:\/\/doi.org\/10.1007\/s00145-002-0133-9","journal-title":"J. Cryptol."},{"key":"8_CR25","doi-asserted-by":"crossref","unstructured":"Su\u0161\u00e1nka, T., Koke\u0161, J.: Security analysis of the Telegram IM. In: Proceedings of the 1st Reversing and Offensive-oriented Trends Symposium, pp.\u00a01\u20138 (2017)","DOI":"10.1145\/3150376.3150382"},{"key":"8_CR26","unstructured":"Telegram: Android \u2013 Handshake.cpp, lines 604-611 (2022). https:\/\/github.com\/DrKLO\/Telegram\/blob\/e9a35cea54c06277c69d41b8e25d94b5d7ede065\/TMessagesProj\/jni\/tgnet\/Handshake.cpp#L604-L611"},{"key":"8_CR27","unstructured":"Telegram: auth.bindTempAuthKey (2022). https:\/\/web.archive.org\/web\/20221027143231\/https:\/\/core.telegram.org\/method\/auth.bindTempAuthKey"},{"key":"8_CR28","unstructured":"Telegram: Creating an authorization key (2022). https:\/\/web.archive.org\/web\/20230913145441\/https:\/\/core.telegram.org\/mtproto\/auth_key"},{"key":"8_CR29","unstructured":"Telegram: Official android client (2022). https:\/\/github.com\/DrKLO\/Telegram\/"},{"key":"8_CR30","unstructured":"Telegram: Official desktop client (2022). https:\/\/github.com\/telegramdesktop\/tdesktop\/"},{"key":"8_CR31","unstructured":"Telegram: Schema (2022). https:\/\/web.archive.org\/web\/20221027161143\/https:\/\/core.telegram.org\/schema"},{"key":"8_CR32","unstructured":"Telegram: Two-factor authentication (2022). https:\/\/web.archive.org\/web\/20221027152821\/https:\/\/core.telegram.org\/api\/srp"}],"container-title":["Lecture Notes in Computer Science","Advances in Cryptology \u2013 EUROCRYPT 2025"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-91101-9_8","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,27]],"date-time":"2025-04-27T21:14:29Z","timestamp":1745788469000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-91101-9_8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"ISBN":["9783031911002","9783031911019"],"references-count":32,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-91101-9_8","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"28 April 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"EUROCRYPT","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Annual International Conference on the Theory and Applications of Cryptographic Techniques","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Madrid","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Spain","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"4 May 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"8 May 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"44","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"eurocrypt2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/eurocrypt.iacr.org\/2025\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}