{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T06:58:19Z","timestamp":1782975499159,"version":"3.54.5"},"reference-count":141,"publisher":"IEEE","license":[{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,5,18]],"date-time":"2026-05-18T00:00:00Z","timestamp":1779062400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/100000001","name":"NSF","doi-asserted-by":"publisher","award":["CNS-2054869"],"award-info":[{"award-number":["CNS-2054869"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2026,5,18]]},"DOI":"10.1109\/sp63933.2026.00149","type":"proceedings-article","created":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T19:34:20Z","timestamp":1782934460000},"page":"2307-2326","source":"Crossref","is-referenced-by-count":0,"title":["CHORUS: Secret Recovery with Ephemeral Client Committees"],"prefix":"10.1109","author":[{"given":"Deevashwer","family":"Rathee","sequence":"first","affiliation":[{"name":"UC Berkeley,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Emma","family":"Dauterman","sequence":"additional","affiliation":[{"name":"Stanford University,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Allison","family":"Li","sequence":"additional","affiliation":[{"name":"Okta,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Raluca Ada","family":"Popa","sequence":"additional","affiliation":[{"name":"UC Berkeley,USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","volume-title":"Lastpass"},{"key":"ref2","volume-title":"Protonmail"},{"key":"ref3","volume-title":"Signal"},{"key":"ref4","volume-title":"Telegram"},{"key":"ref5","volume-title":"Whatsapp"},{"key":"ref6","volume-title":"World id"},{"key":"ref7","volume-title":"Zoom"},{"key":"ref8","volume-title":"1Password"},{"key":"ref9","article-title":"Bingo: Adaptively secure packed asynchronous verifiable secret sharing and asynchronous distributed key generation","author":"Abraham","year":"2022","journal-title":"IACR Cryptol. ePrint Arch."},{"key":"ref10","doi-asserted-by":"crossref","volume-title":"How to recover a cryptographic secret from the cloud","author":"Adei","DOI":"10.1145\/3719027.3765127"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243839"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-64331-0_25"},{"key":"ref13","volume-title":"Amazon CloudFront"},{"key":"ref14","volume-title":"Android keystore system"},{"key":"ref15","volume-title":"Devicecheck"},{"key":"ref16","volume-title":"Protecting keys with the secure enclave"},{"key":"ref17","volume-title":"icloud keychain security overview","year":"2021"},{"key":"ref18","volume-title":"arkworks-rs","year":"2024"},{"key":"ref19","article-title":"Passwordprotected secret sharing","volume-title":"ACM CCS","author":"Bagherzandi","year":"2011"},{"key":"ref20","article-title":"Correlationresistant storage via keyword-searchable encryption","author":"Ballard","year":"2005","journal-title":"IACR ePrint"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-032-01913-4_9"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1145\/168588.168596"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-64375-1_10"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3559397"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3460120.3484574"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-022-09424-4"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132769"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-36288-6_3"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-44647-8_13"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45682-1_30"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-023-09459-1"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00050"},{"key":"ref33","article-title":"Halo: Recursive proof composition without a trusted setup","author":"Bowe","year":"2019","journal-title":"IACR ePrint"},{"key":"ref34","article-title":"Foreshadow: Extracting the keys to the intel SGX kingdom with transient out-of-order execution","author":"Bulck","year":"2018","journal-title":"USENIX Security"},{"key":"ref35","article-title":"LVI: hijacking transient execution through microarchitectural load value injection","author":"Bulck","year":"2020","journal-title":"IEEE S&P"},{"key":"ref36","article-title":"Proofcarrying data without succinct arguments","author":"B\u00fcnz","year":"2021","journal-title":"CRYPTO"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-64378-2_1"},{"key":"ref38","volume-title":"Why we need wide adoption of social recovery wallets","author":"Buterin"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-44381-1_15"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-48618-0_2"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP53844.2022.00045"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-58740-5_8"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-22963-3_22"},{"key":"ref44","article-title":"vetkeys: How a blockchain can keep many secrets","author":"Cerulli","year":"2023","journal-title":"IACR ePrint"},{"key":"ref45","article-title":"Acsesor: A new framework for auditable custodial secret storage and recovery","author":"Chase","year":"2022","journal-title":"IACR ePrint"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-48071-4_7"},{"key":"ref47","article-title":"End-to-same-end encryption: Modularly augmenting an app with an efficient, portable, and blind cloud storage","author":"Chen","year":"2022","journal-title":"USENIX Security"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.62056\/ak2isgvtw"},{"key":"ref49","volume-title":"Key Transparency Auditor"},{"key":"ref50","volume-title":"Why messaging app signal is surging in popularity right now","year":"2021"},{"key":"ref51","article-title":"Secret key recovery in a global-scale end-to-end encryption system","author":"Connell","year":"2024","journal-title":"OSDI"},{"key":"ref52","article-title":"Drac: An architecture for anonymous low-volume communications","author":"Danezis","year":"2010","journal-title":"PETS"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1145\/3488932.3517389"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-91098-2_12"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/SP61157.2025.00046"},{"key":"ref56","article-title":"SafetyPin: Encrypted Backups with Human-Memorable Secrets","author":"Dauterman","year":"2020","journal-title":"OSDI"},{"key":"ref57","article-title":"The pythia PRF service","author":"Everspaugh","year":"2015","journal-title":"USENIX Security"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1109\/SP54263.2024.00082"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3690358"},{"key":"ref60","doi-asserted-by":"publisher","DOI":"10.1109\/SFCS.1987.4"},{"key":"ref61","volume-title":"Pgp web of trust: Delegated trust and keyservers"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1145\/586110.586137"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-006-0347-3"},{"key":"ref64","doi-asserted-by":"crossref","DOI":"10.1007\/978-3-030-84245-1_3","article-title":"YOSO: You Only Speak Once","volume-title":"CRYPTO","author":"Gentry","year":"2021"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-06944-4_16"},{"key":"ref66","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-90456-2_2"},{"key":"ref67","doi-asserted-by":"publisher","DOI":"10.1145\/3132747.3132757"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-58737-5_6"},{"key":"ref69","author":"G\u00f6bel","year":"2024","journal-title":"Proton key transparency whitepaper"},{"key":"ref70","doi-asserted-by":"publisher","DOI":"10.17487\/rfc9381"},{"key":"ref71","doi-asserted-by":"publisher","DOI":"10.1145\/28395.28420"},{"key":"ref72","volume-title":"Google cloud key vault service","year":"2018"},{"key":"ref73","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-97121-2_10"},{"key":"ref74","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-49896-5_11"},{"key":"ref75","article-title":"Non-interactive distributed key generation and key resharing","year":"2021","journal-title":"IACR ePrint"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-95-5096-8_16"},{"key":"ref77","article-title":"US Secure Hash Algorithms (SHA and SHA-based HMAC and HKDF)","author":"Hansen","journal-title":"RFC 6234"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1145\/3488932.3523256"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-65411-5_13"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-61204-1_3"},{"key":"ref81","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-78372-7_15"},{"key":"ref82","article-title":"Lotto: Secure participant selection against adversarial servers in federated learning","author":"Jiang","year":"2024","journal-title":"USENIX Security"},{"key":"ref83","doi-asserted-by":"publisher","DOI":"10.17487\/RFC8032"},{"key":"ref84","article-title":"sfopa: One-shot private aggregation with single client interaction and its applications to federated learning","volume-title":"CRYPTO","author":"Karthikeyan","year":"2025"},{"key":"ref85","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-15317-4_27"},{"key":"ref86","doi-asserted-by":"publisher","DOI":"10.1145\/3658644.3670312"},{"key":"ref87","article-title":"ANARKey: A new approach to (socially) recover keys","author":"Kate","year":"2025","journal-title":"Cryptology ePrint Archive"},{"key":"ref88","article-title":"Flock: A framework for deploying on-demand distributed trust","volume-title":"OSDI","author":"Kaviani","year":"2024"},{"key":"ref89","article-title":"Your keybase account","volume-title":"Keybase"},{"key":"ref90","article-title":"Nova: Recursive zeroknowledge arguments from folding schemes","volume-title":"CRYPTO","author":"Kothapalli","year":"2022"},{"key":"ref91","volume-title":"Zerowallet","author":"Ladia"},{"key":"ref92","article-title":"Simple password-hardened encryption services","author":"Lai","year":"2018","journal-title":"USENIX Security"},{"key":"ref93","volume-title":"Deploying key transparency at whatsapp","author":"Lawlor","year":"2023"},{"key":"ref94","volume-title":"How ledger device generates 24 -word recovery phrase","year":"2023"},{"key":"ref95","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-54414-0"},{"key":"ref96","article-title":"OPTIKS: an optimized key transparency system","volume-title":"USENIX Security Symposium","author":"Len"},{"key":"ref97","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-99-8721-4_10"},{"key":"ref98","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-57048-8_6"},{"key":"ref99","article-title":"Secure account recovery for a privacy-preserving web service","author":"Little","year":"2024","journal-title":"USENIX Security"},{"key":"ref100","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179434"},{"key":"ref101","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2023.24545"},{"key":"ref102","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00038"},{"key":"ref103","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363203"},{"key":"ref104","volume-title":"Setup Ceremonies","author":"Matlala"},{"key":"ref105","article-title":"The galois\/counter mode of operation (gcm)","author":"McGrew","year":"2004","journal-title":"submission to NIST Modes of Operation Process"},{"key":"ref106","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2020.2990495"},{"key":"ref107","doi-asserted-by":"publisher","DOI":"10.1145\/1180405.1180409"},{"key":"ref108","article-title":"Certificate revocation and certificate update","author":"Nissim","year":"1998","journal-title":"USENIX Security"},{"key":"ref109","article-title":"zk-snarks: A gentle introduction","author":"Nitulescu","year":"2020","journal-title":"Ecole Normale Superieure"},{"key":"ref110","year":"2024","journal-title":"AAMVA mobile driver license implementation guidelines, release 1.3"},{"key":"ref111","doi-asserted-by":"publisher","DOI":"10.1145\/112600.112605"},{"key":"ref112","author":"Palatinus","year":"2013","journal-title":"Bip39: Mnemonic code for generating deterministic keys"},{"key":"ref113","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-85538-5_23"},{"key":"ref114","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-46766-1_9"},{"key":"ref115","volume-title":"Preveil: Encrypted email and file sharing"},{"key":"ref116","article-title":"Chorus: Secret Recovery with Ephemeral Client Committees","author":"Rathee","year":"2026","journal-title":"IACR ePrint"},{"key":"ref117","article-title":"A usability study of five two-factor authentication methods","author":"Reese","year":"2019","journal-title":"SOUPS @ USENIX Security"},{"key":"ref118","doi-asserted-by":"publisher","DOI":"10.1109\/SP46215.2023.10179430"},{"key":"ref119","doi-asserted-by":"publisher","DOI":"10.1145\/3477132.3483585"},{"key":"ref120","doi-asserted-by":"publisher","DOI":"10.1145\/3341301.3359660"},{"key":"ref121","article-title":"Orchard: Differentially private analytics at scale","author":"Roth","year":"2020","journal-title":"OSDI"},{"key":"ref122","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354252"},{"key":"ref123","doi-asserted-by":"publisher","DOI":"10.1145\/359168.359176"},{"key":"ref124","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833647"},{"key":"ref125","article-title":"P5: A protocol for scalable anonymous communication","author":"Sherwood","year":"2002","journal-title":"IEEE S&P"},{"key":"ref126","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-024-09505-6"},{"key":"ref128","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-39658-1_2"},{"key":"ref129","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-63A-4.2pd"},{"key":"ref130","volume-title":"Key to simplicity: Squeezing the hassle out of encryption key recovery","author":"Trapp","year":"2024"},{"key":"ref131","doi-asserted-by":"publisher","DOI":"10.1145\/3548606.3560605"},{"key":"ref132","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00087"},{"key":"ref133","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00064"},{"key":"ref134","doi-asserted-by":"publisher","DOI":"10.1109\/SP46214.2022.9833658"},{"key":"ref135","volume-title":"Security of end-to-end encrypted backups","year":"2021"},{"key":"ref136","volume-title":"About government requests for user data","year":"2024"},{"key":"ref137","volume-title":"Privacy is priceless, but signal is expensive","author":"Whittaker","year":"2023"},{"key":"ref138","article-title":"Why johnny can\u2019t encrypt: A usability evaluation of PGP 5.0","author":"Whitten","year":"1999","journal-title":"USENIX Security"},{"key":"ref139","doi-asserted-by":"publisher","DOI":"10.1109\/SFCS.1986.25"},{"key":"ref140","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2022.23120"},{"key":"ref141","article-title":"Long live the honey badger: Robust asynchronous DPSS and its applications","author":"Yurek","year":"2023","journal-title":"USENIX Security"},{"key":"ref142","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-24582-7_14"}],"event":{"name":"2026 IEEE Symposium on Security and Privacy (SP)","location":"San Francisco, CA, USA","start":{"date-parts":[[2026,5,18]]},"end":{"date-parts":[[2026,5,21]]}},"container-title":["2026 IEEE Symposium on Security and Privacy (SP)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/11573355\/11573356\/11573522.pdf?arnumber=11573522","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T05:25:55Z","timestamp":1782969955000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11573522\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,5,18]]},"references-count":141,"URL":"https:\/\/doi.org\/10.1109\/sp63933.2026.00149","relation":{},"subject":[],"published":{"date-parts":[[2026,5,18]]}}}