{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T16:24:42Z","timestamp":1783614282421,"version":"3.55.0"},"publisher-location":"Singapore","reference-count":34,"publisher":"Springer Nature Singapore","isbn-type":[{"value":"9789819609345","type":"print"},{"value":"9789819609352","type":"electronic"}],"license":[{"start":{"date-parts":[[2024,12,9]],"date-time":"2024-12-09T00:00:00Z","timestamp":1733702400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,12,9]],"date-time":"2024-12-09T00:00:00Z","timestamp":1733702400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-981-96-0935-2_4","type":"book-chapter","created":{"date-parts":[[2024,12,8]],"date-time":"2024-12-08T18:01:40Z","timestamp":1733680900000},"page":"101-133","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":7,"title":["Key Exchange in\u00a0the\u00a0Post-snowden Era: Universally Composable Subversion-Resilient PAKE"],"prefix":"10.1007","author":[{"given":"Suvradip","family":"Chakraborty","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lorenzo","family":"Magliocco","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bernardo","family":"Magri","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Daniele","family":"Venturi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,12,9]]},"reference":[{"key":"4_CR1","doi-asserted-by":"crossref","unstructured":"Michel Abdalla, Bj\u00f6rn Haase, and Julia Hesse. Security analysis of CPace. In Mehdi Tibouchi and Huaxiong Wang, editors, ASIACRYPT\u00a02021, Part\u00a0IV, volume 13093 of LNCS, pages 711\u2013741. Springer, Cham, December 2021.","DOI":"10.1007\/978-3-030-92068-5_24"},{"key":"4_CR2","doi-asserted-by":"crossref","unstructured":"Behzad Abdolmaleki, Karim Baghery, Helger Lipmaa, and Michal Zajac. A subversion-resistant SNARK. In Tsuyoshi Takagi and Thomas Peyrin, editors, ASIACRYPT\u00a02017, Part\u00a0III, volume 10626 of LNCS, pages 3\u201333. Springer, Cham, December 2017.","DOI":"10.1007\/978-3-319-70700-6_1"},{"key":"4_CR3","doi-asserted-by":"crossref","unstructured":"Behzad Abdolmaleki, Helger Lipmaa, Janno Siim, and Michal Zajac. On QA-NIZK in the BPK model. In Aggelos Kiayias, Markulf Kohlweiss, Petros Wallden, and Vassilis Zikas, editors, PKC\u00a02020, Part\u00a0I, volume 12110 of LNCS, pages 590\u2013620. Springer, Cham, May 2020.","DOI":"10.1007\/978-3-030-45374-9_20"},{"key":"4_CR4","unstructured":"Paula Arnold, Sebastian Berndt, J\u00f6rn M\u00fcller-Quade, and Astrid Ottenhues. Protection against subversion corruptions via reverse firewalls in the plain universal composability framework. Cryptology ePrint Archive, Report 2023\/1951, 2023."},{"key":"4_CR5","doi-asserted-by":"crossref","unstructured":"Giuseppe Ateniese, Danilo Francati, Bernardo Magri, and Daniele Venturi. Public immunization against complete subversion without random oracles. In Robert\u00a0H. Deng, Val\u00e9rie Gauthier-Uma\u00f1a, Mart\u00edn Ochoa, and Moti Yung, editors, ACNS 19International Conference on Applied Cryptography and Network Security, volume 11464 of LNCS, pages 465\u2013485. Springer, Cham, June 2019.","DOI":"10.1007\/978-3-030-21568-2_23"},{"key":"4_CR6","doi-asserted-by":"crossref","unstructured":"Giuseppe Ateniese, Bernardo Magri, and Daniele Venturi. Subversion-resilient signature schemes. In Indrajit Ray, Ninghui Li, and Christopher Kruegel, editors, ACM CCS 2015, pages 364\u2013375. ACM Press, October 2015.","DOI":"10.1145\/2810103.2813635"},{"key":"4_CR7","doi-asserted-by":"crossref","unstructured":"Boaz Barak, Ran Canetti, Yehuda Lindell, Rafael Pass, and Tal Rabin. Secure computation without authentication. In Victor Shoup, editor, CRYPTO\u00a02005, volume 3621 of LNCS, pages 361\u2013377. Springer, Berlin, Heidelberg, August 2005.","DOI":"10.1007\/11535218_22"},{"key":"4_CR8","doi-asserted-by":"crossref","unstructured":"Mihir Bellare, Georg Fuchsbauer, and Alessandra Scafuro. NIZKs with an untrusted CRS: Security in the face of parameter subversion. In Jung\u00a0Hee Cheon and Tsuyoshi Takagi, editors, ASIACRYPT\u00a02016, Part\u00a0II, volume 10032 of LNCS, pages 777\u2013804. Springer, Berlin, Heidelberg, December 2016.","DOI":"10.1007\/978-3-662-53890-6_26"},{"key":"4_CR9","doi-asserted-by":"crossref","unstructured":"Mihir Bellare, Kenneth\u00a0G. Paterson, and Phillip Rogaway. Security of symmetric encryption against mass surveillance. In Juan\u00a0A. Garay and Rosario Gennaro, editors, CRYPTO\u00a02014, Part\u00a0I, volume 8616 of LNCS, pages 1\u201319. Springer, Berlin, Heidelberg, August 2014.","DOI":"10.1007\/978-3-662-44371-2_1"},{"key":"4_CR10","doi-asserted-by":"crossref","unstructured":"Dan Boneh, Ben Lynn, and Hovav Shacham. Short signatures from the Weil pairing. In Colin Boyd, editor, ASIACRYPT\u00a02001, volume 2248 of LNCS, pages 514\u2013532. Springer, Berlin, Heidelberg, December 2001.","DOI":"10.1007\/3-540-45682-1_30"},{"key":"4_CR11","doi-asserted-by":"crossref","unstructured":"Ran Canetti. Universally composable security: A new paradigm for cryptographic protocols. In 42nd FOCS, pages 136\u2013145. IEEE Computer Society Press, October 2001.","DOI":"10.1109\/SFCS.2001.959888"},{"key":"4_CR12","doi-asserted-by":"crossref","unstructured":"Ran Canetti, Dana Dachman-Soled, Vinod Vaikuntanathan, and Hoeteck Wee. Efficient password authenticated key exchange via oblivious transfer. In Marc Fischlin, Johannes Buchmann, and Mark Manulis, editors, PKC\u00a02012, volume 7293 of LNCS, pages 449\u2013466. Springer, Berlin, Heidelberg, May 2012","DOI":"10.1007\/978-3-642-30057-8_27"},{"key":"4_CR13","doi-asserted-by":"crossref","unstructured":"Ran Canetti, Shai Halevi, Jonathan Katz, Yehuda Lindell, and Philip\u00a0D. MacKenzie. Universally composable password-based key exchange. In Ronald Cramer, editor, EUROCRYPT\u00a02005, volume 3494 of LNCS, pages 404\u2013421. Springer, Berlin, Heidelberg, May 2005.","DOI":"10.1007\/11426639_24"},{"key":"4_CR14","doi-asserted-by":"crossref","unstructured":"Ran Canetti, Eyal Kushilevitz, and Yehuda Lindell. On the limitations of universally composable two-party computation without set-up assumptions. In Eli Biham, editor, EUROCRYPT\u00a02003, volume 2656 of LNCS, pages 68\u201386. Springer, Berlin, Heidelberg, May 2003.","DOI":"10.1007\/3-540-39200-9_5"},{"key":"4_CR15","doi-asserted-by":"crossref","unstructured":"Ran Canetti, Yehuda Lindell, Rafail Ostrovsky, and Amit Sahai. Universally composable two-party and multi-party secure computation. In 34th ACM STOC, pages 494\u2013503. ACM Press, May 2002.","DOI":"10.1145\/509907.509980"},{"key":"4_CR16","doi-asserted-by":"crossref","unstructured":"Suvradip Chakraborty, Stefan Dziembowski, and Jesper\u00a0Buus Nielsen. Reverse firewalls for actively secure MPCs. In Daniele Micciancio and Thomas Ristenpart, editors, CRYPTO\u00a02020, Part\u00a0II, volume 12171 of LNCS, pages 732\u2013762. Springer, Cham, August 2020.","DOI":"10.1007\/978-3-030-56880-1_26"},{"key":"4_CR17","doi-asserted-by":"crossref","unstructured":"Suvradip Chakraborty, Chaya Ganesh, Mahak Pancholi, and Pratik Sarkar. Reverse firewalls for adaptively secure MPC without setup. In Mehdi Tibouchi and Huaxiong Wang, editors, ASIACRYPT\u00a02021, Part\u00a0II, volume 13091 of LNCS, pages 335\u2013364. Springer, Cham, December 2021.","DOI":"10.1007\/978-3-030-92075-3_12"},{"key":"4_CR18","doi-asserted-by":"crossref","unstructured":"Suvradip Chakraborty, Bernardo Magri, Jesper\u00a0Buus Nielsen, and Daniele Venturi. Universally composable subversion-resilient cryptography. In Orr Dunkelman and Stefan Dziembowski, editors, EUROCRYPT\u00a02022, Part\u00a0I, volume 13275 of LNCS, pages 272\u2013302. Springer, Cham, May\u00a0\/\u00a0June 2022.","DOI":"10.1007\/978-3-031-06944-4_10"},{"key":"4_CR19","doi-asserted-by":"crossref","unstructured":"Rongmao Chen, Yi\u00a0Mu, Guomin Yang, Willy Susilo, Fuchun Guo, and Mingwu Zhang. Cryptographic reverse firewall via malleable smooth projective hash functions. In Jung\u00a0Hee Cheon and Tsuyoshi Takagi, editors, ASIACRYPT\u00a02016, Part\u00a0I, volume 10031 of LNCS, pages 844\u2013876. Springer, Berlin, Heidelberg, December 2016.","DOI":"10.1007\/978-3-662-53887-6_31"},{"key":"4_CR20","doi-asserted-by":"crossref","unstructured":"Jean\u00a0Paul Degabriele, Pooya Farshim, and Bertram Poettering. A more cautious approach to security against mass surveillance. In Gregor Leander, editor, FSE\u00a02015, volume 9054 of LNCS, pages 579\u2013598. Springer, Berlin, Heidelberg, March 2015.","DOI":"10.1007\/978-3-662-48116-5_28"},{"key":"4_CR21","doi-asserted-by":"crossref","unstructured":"Yevgeniy Dodis, Ilya Mironov, and Noah Stephens-Davidowitz. Message transmission with reverse firewalls\u2014secure communication on corrupted machines. In Matthew Robshaw and Jonathan Katz, editors, CRYPTO\u00a02016, Part\u00a0I, volume 9814 of LNCS, pages 341\u2013372. Springer, Berlin, Heidelberg, August 2016.","DOI":"10.1007\/978-3-662-53018-4_13"},{"key":"4_CR22","doi-asserted-by":"crossref","unstructured":"Pierre-Alain Dupont, Julia Hesse, David Pointcheval, Leonid Reyzin, and Sophia Yakoubov. Fuzzy password-authenticated key exchange. In Jesper\u00a0Buus Nielsen and Vincent Rijmen, editors, EUROCRYPT\u00a02018, Part\u00a0III, volume 10822 of LNCS, pages 393\u2013424. Springer, Cham, April\u00a0\/\u00a0May 2018.","DOI":"10.1007\/978-3-319-78372-7_13"},{"key":"4_CR23","doi-asserted-by":"crossref","unstructured":"Georg Fuchsbauer. Subversion-zero-knowledge SNARKs. In Michel Abdalla and Ricardo Dahab, editors, PKC\u00a02018, Part\u00a0I, volume 10769 of LNCS, pages 315\u2013347. Springer, Cham, March 2018.","DOI":"10.1007\/978-3-319-76578-5_11"},{"key":"4_CR24","unstructured":"Chaya Ganesh, Bernardo Magri, and Daniele Venturi. Cryptographic reverse firewalls for interactive proof systems. In Artur Czumaj, Anuj Dawar, and Emanuela Merelli, editors, ICALP 2020, volume 168 of LIPIcs, pages 55:1\u201355:16. Schloss Dagstuhl, July 2020."},{"key":"4_CR25","doi-asserted-by":"crossref","unstructured":"Oded Goldreich, Silvio Micali, and Avi Wigderson. How to play any mental game or A completeness theorem for protocols with honest majority. In Alfred Aho, editor, 19th ACM STOC, pages 218\u2013229. ACM Press, May 1987.","DOI":"10.1145\/28395.28420"},{"key":"4_CR26","doi-asserted-by":"crossref","unstructured":"Adam Groce and Jonathan Katz. A new framework for password-based authenticated key exchange. Cryptology ePrint Archive, Report 2010\/147, 2010.","DOI":"10.1145\/1866307.1866365"},{"key":"4_CR27","doi-asserted-by":"crossref","unstructured":"Ilya Mironov and Noah Stephens-Davidowitz. Cryptographic reverse firewalls. In Elisabeth Oswald and Marc Fischlin, editors, EUROCRYPT\u00a02015, Part\u00a0II, volume 9057 of LNCS, pages 657\u2013686. Springer, Berlin, Heidelberg, April 2015.","DOI":"10.1007\/978-3-662-46803-6_22"},{"key":"4_CR28","doi-asserted-by":"crossref","unstructured":"Chris Peikert, Vinod Vaikuntanathan, and Brent Waters. A framework for efficient and composable oblivious transfer. In David Wagner, editor, CRYPTO\u00a02008, volume 5157 of LNCS, pages 554\u2013571. Springer, Berlin, Heidelberg, August 2008.","DOI":"10.1007\/978-3-540-85174-5_31"},{"key":"4_CR29","unstructured":"Magnus Ringerud. Note on subversion-resilient key exchange. Cryptology ePrint Archive, Report 2023\/749, 2023."},{"key":"4_CR30","doi-asserted-by":"crossref","unstructured":"Lawrence Roy and Jiayu Xu. A universally composable PAKE with zero communication cost - (and why it shouldn\u2019t be considered UC-secure). In Alexandra Boldyreva and Vladimir Kolesnikov, editors, PKC\u00a02023, Part\u00a0I, volume 13940 of LNCS, pages 714\u2013743. Springer, Cham, May 2023.","DOI":"10.1007\/978-3-031-31368-4_25"},{"key":"4_CR31","doi-asserted-by":"crossref","unstructured":"Alexander Russell, Qiang Tang, Moti Yung, and Hong-Sheng Zhou. Cliptography: Clipping the power of kleptographic attacks. In Jung\u00a0Hee Cheon and Tsuyoshi Takagi, editors, ASIACRYPT\u00a02016, Part\u00a0II, volume 10032 of LNCS, pages 34\u201364. Springer, Berlin, Heidelberg, December 2016.","DOI":"10.1007\/978-3-662-53890-6_2"},{"key":"4_CR32","doi-asserted-by":"crossref","unstructured":"Alexander Russell, Qiang Tang, Moti Yung, and Hong-Sheng Zhou. Generic semantic security against a kleptographic adversary. In Bhavani\u00a0M. Thuraisingham, David Evans, Tal Malkin, and Dongyan Xu, editors, ACM CCS 2017, pages 907\u2013922. ACM Press, October\u00a0\/\u00a0November 2017.","DOI":"10.1145\/3133956.3133993"},{"key":"4_CR33","doi-asserted-by":"crossref","unstructured":"Gustavus\u00a0J. Simmons. Authentication theory\/coding theory. In G.\u00a0R. Blakley and David Chaum, editors, CRYPTO\u201984, volume 196 of LNCS, pages 411\u2013431. Springer, Berlin, Heidelberg, August 1984.","DOI":"10.1007\/3-540-39568-7_32"},{"key":"4_CR34","doi-asserted-by":"crossref","unstructured":"Gustavus\u00a0J. Simmons. A secure subliminal channel (?). In Hugh\u00a0C. Williams, editor, CRYPTO\u201985, volume 218 of LNCS, pages 33\u201341. Springer, Berlin, Heidelberg, August 1986.","DOI":"10.1007\/3-540-39799-X_5"}],"container-title":["Lecture Notes in Computer Science","Advances in Cryptology \u2013 ASIACRYPT 2024"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-981-96-0935-2_4","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,12,8]],"date-time":"2024-12-08T18:02:12Z","timestamp":1733680932000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-981-96-0935-2_4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,12,9]]},"ISBN":["9789819609345","9789819609352"],"references-count":34,"URL":"https:\/\/doi.org\/10.1007\/978-981-96-0935-2_4","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,12,9]]},"assertion":[{"value":"9 December 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ASIACRYPT","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on the Theory and Application of Cryptology and Information Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Kolkata","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"India","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"10 December 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"14 December 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"30","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"asiacrypt2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/asiacrypt.iacr.org\/2024\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}