{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,9,24]],"date-time":"2025-09-24T09:31:47Z","timestamp":1758706307809,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":35,"publisher":"ACM","license":[{"start":{"date-parts":[[2008,3,18]],"date-time":"2008-03-18T00:00:00Z","timestamp":1205798400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100004965","name":"Sixth Framework Programme","doi-asserted-by":"publisher","award":["IST-2002-507932"],"award-info":[{"award-number":["IST-2002-507932"]}],"id":[{"id":"10.13039\/501100004965","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2008,3,18]]},"DOI":"10.1145\/1368310.1368354","type":"proceedings-article","created":{"date-parts":[[2008,5,15]],"date-time":"2008-05-15T18:35:39Z","timestamp":1210876539000},"page":"300-311","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":17,"title":["Provably secure browser-based user-aware mutual authentication over TLS"],"prefix":"10.1145","author":[{"given":"Sebastian","family":"Gajek","sequence":"first","affiliation":[{"name":"Ruhr University Bochum, Bochum, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Mark","family":"Manulis","sequence":"additional","affiliation":[{"name":"Microelectronics Laboratory, Belgium"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Ahmad-Reza","family":"Sadeghi","sequence":"additional","affiliation":[{"name":"Ruhr University Bochum, Bochum, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"J\u00f6rg","family":"Schwenk","sequence":"additional","affiliation":[{"name":"Ruhr University Bochum, Bochum, Germany"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2008,3,18]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1145\/1128817.1128827"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-30580-4_5"},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-30574-3_14"},{"key":"e_1_3_2_1_4_1","volume-title":"The TLS protocol --- version 1.1. Internet proposed standard RFC 4346","author":"Allen C.","year":"2006","unstructured":"C. Allen and T. Dierks . The TLS protocol --- version 1.1. Internet proposed standard RFC 4346 , 2006 . C. Allen and T. Dierks. The TLS protocol --- version 1.1. Internet proposed standard RFC 4346, 2006."},{"key":"e_1_3_2_1_5_1","series-title":"LNCS","first-page":"531","volume-title":"ASIACRYPT","author":"Bellare M.","year":"2000","unstructured":"M. Bellare and C. Namprempre . Authenticated encryption: Relations among notions and analysis of the generic composition paradigm . In ASIACRYPT , volume 1976 of LNCS , pages 531 -- 545 . Springer , 2000 . M. Bellare and C. Namprempre. Authenticated encryption: Relations among notions and analysis of the generic composition paradigm. In ASIACRYPT, volume 1976 of LNCS, pages 531--545. Springer, 2000."},{"key":"e_1_3_2_1_6_1","series-title":"LNCS","first-page":"139","volume-title":"EUROCRYPT","author":"Bellare M.","year":"2000","unstructured":"M. Bellare , D. Pointcheval , and P. Rogaway . Authenticated key exchange secure against dictionary attacks . In EUROCRYPT , volume 1807 of LNCS , pages 139 -- 155 . Springer , 2000 . M. Bellare, D. Pointcheval, and P. Rogaway. Authenticated key exchange secure against dictionary attacks. In EUROCRYPT, volume 1807 of LNCS, pages 139--155. Springer, 2000."},{"key":"e_1_3_2_1_7_1","series-title":"LNCS","first-page":"232","volume-title":"CRYPTO","author":"Bellare M.","year":"1993","unstructured":"M. Bellare and P. Rogaway . Entity authentication and key distribution . In CRYPTO , volume 773 of LNCS , pages 232 -- 249 . Springer , 1993 . M. Bellare and P. Rogaway. Entity authentication and key distribution. In CRYPTO, volume 773 of LNCS, pages 232--249. Springer, 1993."},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/168588.168596"},{"key":"e_1_3_2_1_9_1","first-page":"1363","volume-title":"The AuthA protocol for password-based authenticated key exchange. contributions to ieee","author":"Bellare M.","year":"2000","unstructured":"M. Bellare and P. Rogaway . The AuthA protocol for password-based authenticated key exchange. contributions to ieee p 1363 , 2000 . http:\/\/grouper.ieee.org\/groups\/1363\/passwdPK\/contributions.html. M. Bellare and P. Rogaway. The AuthA protocol for password-based authenticated key exchange. contributions to ieee p1363, 2000. http:\/\/grouper.ieee.org\/groups\/1363\/passwdPK\/contributions.html."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/168588.168618"},{"key":"e_1_3_2_1_11_1","series-title":"LNCS","first-page":"156","volume-title":"EUROCRYPT","author":"Boyko V.","year":"2000","unstructured":"V. Boyko , P. D. MacKenzie , and S. Patel . Provably secure password-authenticated key exchange using diffie-hellman . In EUROCRYPT , volume 1807 of LNCS , pages 156 -- 171 . Springer , 2000 . V. Boyko, P. D. MacKenzie, and S. Patel. Provably secure password-authenticated key exchange using diffie-hellman. In EUROCRYPT, volume 1807 of LNCS, pages 156--171. Springer, 2000."},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.1145\/948109.948142"},{"key":"e_1_3_2_1_13_1","series-title":"LNCS","first-page":"145","volume-title":"Public Key Cryptography","author":"Bresson E.","year":"2004","unstructured":"E. Bresson , O. Chevassut , and D. Pointcheval . New security results on encrypted key exchange . In Public Key Cryptography , volume 2947 of LNCS , pages 145 -- 158 . Springer , 2004 . E. Bresson, O. Chevassut, and D. Pointcheval. New security results on encrypted key exchange. In Public Key Cryptography, volume 2947 of LNCS, pages 145--158. Springer, 2004."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1007\/11818175_10"},{"key":"e_1_3_2_1_15_1","series-title":"LNCS","first-page":"359","volume-title":"ESORICS","author":"Chiasson S.","year":"2007","unstructured":"S. Chiasson , P. C. van Oorschot , and R. Biddle . Graphical password authentication using cued click points . In ESORICS , volume 4734 of LNCS , pages 359 -- 374 . Springer , 2007 . S. Chiasson, P. C. van Oorschot, and R. Biddle. Graphical password authentication using cued click points. In ESORICS, volume 4734 of LNCS, pages 359--374. Springer, 2007."},{"key":"e_1_3_2_1_16_1","doi-asserted-by":"publisher","DOI":"10.1145\/1073001.1073009"},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1145\/1124772.1124861"},{"key":"e_1_3_2_1_18_1","volume-title":"IETF","author":"Dierks T.","year":"2006","unstructured":"T. Dierks and E. Rescorla . The transport layer security (TLS) protocol, version 1.1. RFC 4346 , IETF , 2006 . Proposed Standard. T. Dierks and E. Rescorla. The transport layer security (TLS) protocol, version 1.1. RFC 4346, IETF, 2006. Proposed Standard."},{"key":"e_1_3_2_1_21_1","volume-title":"Microsoft Moves to Brand, and Nyms. Financial Cryptography","author":"Giang I.","year":"2006","unstructured":"I. Giang . SSL Phishing , Microsoft Moves to Brand, and Nyms. Financial Cryptography , 14 February 2006 . https:\/\/www.financialcryptography.com\/mt\/archives\/000654.html. I. Giang. SSL Phishing, Microsoft Moves to Brand, and Nyms. Financial Cryptography, 14 February 2006. https:\/\/www.financialcryptography.com\/mt\/archives\/000654.html."},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.5555\/956415.956441"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.1007\/11555827_28"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1145\/1103022.1103034"},{"key":"e_1_3_2_1_25_1","volume-title":"Why Johnny can't surf (safely)?","author":"Herzberg A.","year":"2007","unstructured":"A. Herzberg . Why Johnny can't surf (safely)? , 2007 . (Work in Progress) . A. Herzberg. Why Johnny can't surf (safely)?, 2007. (Work in Progress)."},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1145\/1314403.1314407"},{"key":"e_1_3_2_1_27_1","series-title":"LNCS","first-page":"475","volume-title":"EUROCRYPT","author":"Katz J.","year":"2001","unstructured":"J. Katz , R. Ostrovsky , and M. Yung . Efficient password-authenticated key exchange using human-memorable passwords . In EUROCRYPT , volume 2045 of LNCS , pages 475 -- 494 . Springer , 2001 . J. Katz, R. Ostrovsky, and M. Yung. Efficient password-authenticated key exchange using human-memorable passwords. In EUROCRYPT, volume 2045 of LNCS, pages 475--494. Springer, 2001."},{"key":"e_1_3_2_1_28_1","series-title":"LNCS","first-page":"29","volume-title":"SCN","author":"Katz J.","year":"2002","unstructured":"J. Katz , R. Ostrovsky , and M. Yung . Forward secrecy in password-only key exchange protocols . In SCN , volume 2576 of LNCS , pages 29 -- 44 . Springer , 2002 . J. Katz, R. Ostrovsky, and M. Yung. Forward secrecy in password-only key exchange protocols. In SCN, volume 2576 of LNCS, pages 29--44. Springer, 2002."},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1016\/S1389-1286(00)00048-7"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.5555\/882495.884436"},{"key":"e_1_3_2_1_32_1","unstructured":"Proof of Concept Implementation of BBMA 2007. http:\/\/www.demo.nds.rub.de\/bbma.  Proof of Concept Implementation of BBMA 2007. http:\/\/www.demo.nds.rub.de\/bbma."},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-002-0133-9"},{"key":"e_1_3_2_1_35_1","volume-title":"A deceit-augmented man in the middle attack against bank of america's sitekey service","author":"Soghoian C.","year":"2007","unstructured":"C. Soghoian and M. Jakobsson . A deceit-augmented man in the middle attack against bank of america's sitekey service , 2007 . http:\/\/paranoia.dubfire.net\/2007\/04\/deceit-augmented-man-in-middle-attack.html. C. Soghoian and M. Jakobsson. A deceit-augmented man in the middle attack against bank of america's sitekey service, 2007. http:\/\/paranoia.dubfire.net\/2007\/04\/deceit-augmented-man-in-middle-attack.html."},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1145\/501963.501965"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2007.35"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1109\/CSAC.2005.27"},{"key":"e_1_3_2_1_39_1","unstructured":"W3C. Document object model (DOM) 2005. http:\/\/www.w3.org\/DOM.  W3C. Document object model (DOM) 2005. http:\/\/www.w3.org\/DOM."}],"event":{"name":"Asia CCS '08: Asia CCS'08 ACM Symposium on Information, Computer and Communications Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Tokyo Japan","acronym":"Asia CCS '08"},"container-title":["Proceedings of the 2008 ACM symposium on Information, computer and communications security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1368310.1368354","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/1368310.1368354","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T13:57:46Z","timestamp":1750255066000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/1368310.1368354"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2008,3,18]]},"references-count":35,"alternative-id":["10.1145\/1368310.1368354","10.1145\/1368310"],"URL":"https:\/\/doi.org\/10.1145\/1368310.1368354","relation":{},"subject":[],"published":{"date-parts":[[2008,3,18]]},"assertion":[{"value":"2008-03-18","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}