publications
Note: All this material is presented to ensure timely dissemination of scholarly and technical work. Copyright and all rights therein are retained by authors or by other copyright holders. All persons copying this information are expected to adhere to the terms and constraints invoked by each author's copyright. In most cases these works may not be reposted without the explicit permission of the copyright holder.
2012
- Improved (and Practical) Public-key Authentication for UHF RFID Tags (CARDIS, 2012)
- Sanitizable Signatures with Several Signers and Sanitizers (Africacrypt, 2012)
- On Area, Time, and the Right Trade-Off (ACISP, 2012)
- On the Implementation of a Pairing-based Cryptographic Protocol in a Constrained Device (Pairing, 2012)
- Plaintext-Checkable Encryption (CT-RSA, 2012)
2011
- On Related-Key Attacks and KASUMI: The Case of A5/3 (INDOCRYPT, 2011)
- Multi-show Anonymous Credentials with Encrypted Attributes in the Standard Model (CANS, 2011)
- Improving the Security of an Efficient Unidirectional Proxy Re-Encryption Scheme (ProvSec, 2011)
- Anonymous Credentials from (Indexed) Aggregate Signatures (DIM, 2011)
- The LED Block Cipher (CHES, 2011)
- Achieving Optimal Anonymity in Transferable E-cash with a Judge (Africacrypt, 2011)
- Binary Huff Curves (CT-RSA, 2011)
2010
- Group Signatures are Suitable for Constrained Devices (ICISC, 2010)
- One Time Anonymous Certificate: X.509 Supporting Anonymity (CANS, 2010)
- Untraceability and Profiling Are Not Mutually Exclusive (TrustBus, 2010)
- PRINTcipher: A Block Cipher for IC-Printing (CHES, 2010)
- On Unbiased Linear Approximations (ACISP, 2010)
- Batch Groth-Sahai (ACNS, 2010)
- On Extended Sanitizable Signature Schemes (CT-RSA, 2010)
- A Domain Extender for the Ideal Cipher (TCC, 2010)
- The Case for Dynamic RFID Tag Authentication (RFIDsec ASIA, 2010)
- Lightweight Privacy Preserving Authentication for RFID Using a Stream Cipher (FSE, 2010)
- Lighten Encryption Schemes for Secure and Private RFID Systems (WLC, 2010)
- Multiple Denominations in E-cash with Compact Transaction Data (Financial Cryptography, 2010)
2009
- S. Canard's HDR thesis: "La Cryptographie au Service de la Protection de la Vie Privée" (, 2009)
- Two Attacks against the Ff RFID Protocol (INDOCRYPT, 2009)
- Lightweight Cryptography and RFID: Tackling the Hidden Overheads (ICICS, 2009)
- The Intel AES Instructions Set and the SHA-3 Candidates (ASIACRYPT, 2009)
- Cryptanalysis of the Square Cryptosystems (ASIACRYPT, 2009)
- An Efficient Forward-Private RFID Protocol (ACM CCS, 2009)
- Fair E-cash: Be Compact, Spend Faster (ISC, 2009)
- Traitors Collaborating in Public: Pirates 2.0 (EUROCRYPT, 2009)
2008
- Group Key Management: From a Non-hierarchical to a Hierarchical Structure (INDOCRYPT, 2008)
- Identity federation and privacy: one step beyond. (DIM, 2008)
- Building Secure Block Ciphers on Generic Attacks Assumptions (SAC, 2008)
- Improved Cryptanalysis of Reduced-Round SMS4 (SAC, 2008)
- Algebraic and Correlation Attacks against Linearly Filtered Non Linear Feedback Shift Registers (SAC, 2008)
- Efficient Traitor Tracing from Collusion Secure Codes (ICITS, 2008)
- The Random Oracle Model and The Ideal Cipher Model are Equivalent. (CRYPTO, 2008)
- Dynamic Threshold Public-Key Encryption (CRYPTO, 2008)
- Hash Functions and RFID Tags: Mind the Gap. (CHES, 2008)
- H. Gilbert's HDR thesis: "Cryptologie Symétrique" (, 2008)
- How to Encrypt with the LPN Problem. (ICALP, 2008)
- Analysis, Improvement, and Simplification of Prêt à Voter with Paillier Encryption. (EVT, 2008)
- Looking Back at a New Hash Function. (ACISP, 2008)
- Correlated Keystreams in Moustique. (AFRICACRYPT, 2008)
- Trapdoor Sanitizable Signatures and their Application to Content Protection (ACNS, 2008)
- Anonymity in Transferable E-cash (ACNS, 2008)
- Key Recovery on Hidden Monomial Multivariate Schemes. (EUROCRYPT, 2008)
- HB#: Improving the Security and Efficiency of HB+. (EUROCRYPT, 2008)
- Total Break of the l-IC Signature Scheme. (PKC, 2008)
- Collisions on SHA-0 in one Hour. (FSE, 2008)
- Good Variants of HB+ are Hard to Find. (Financial Cryptography, 2008)
- Improvement of Efficiency in (Unconditional) Anonymous Transferable E-Cash. (Financial Cryptography, 2008)
2007
- Cryptanalysis of Grindahl. (ASIACRYPT, 2007)
- Identity-Based Broadcast Encryption with Constant Size Ciphertexts and Private Keys. (ASIACRYPT, 2007)
- Generic Attacks on Unbalanced Feistel Schemes with Expanding Functions. (ASIACRYPT, 2007)
- Complex Zero-Knowledge Proofs of Knowledge Are Easy to Use. (ProvSec, 2007)
- Threat Analysis of a Practical Voting Scheme with Receipts. (VOTE-ID, 2007)
- Traitor Tracing with Optimal Transmission Rate. (ISC, 2007)
- DRM to counter side-channel attacks? (DRM, 2007)
- PRESENT: An Ultra-Lightweight Block Cipher. (CHES, 2007)
- Biometric Fuzzy Extractors Made Practical: A Proposal Based on FingerCodes. (ICB, 2007)
- Hash Functions and the (Amplified) Boomerang Attack. (CRYPTO, 2007)
- Fully Collusion Secure Dynamic Broadcast Encryption with Constant-Size Ciphertexts or Decryption Keys. (Pairing, 2007)
- Fair Blind Signatures Revisited. (Pairing, 2007)
- On Building Hash Functions from Multivariate Quadratic Equations. (ACISP, 2007)
- Divisible E-Cash Systems Can Be Truly Anonymous. (EUROCRYPT, 2007)
- Identity-Based Traitor Tracing. (PKC, 2007)
- On the Security of IV Dependent Stream Ciphers. (FSE, 2007)
- Cryptanalysis of FORK-256. (FSE, 2007)
- Security Analysis of Constructions Combining FIL Random Oracles. (FSE, 2007)
- Compact FPGA implementations of QUAD. (ASIACCS, 2007)
- Public Key Cryptography and RFID Tags. (CT-RSA, 2007)
2006
- Non-randomness in eSTREAM Candidates Salsa20 and TSC-4. (INDOCRYPT, 2006)
- Generic Attacks on Unbalanced Feistel Schemes with Contracting Functions. (ASIACRYPT, 2006)
- Combining Compression Functions and Block Cipher-Based Hash Functions. (ASIACRYPT, 2006)
- Cryptanalysis of T-Function-Based Hash Functions. (ICISC, 2006)
- Searching for Compact Algorithms: CGEN. (VietCrypt, 2006)
- Probabilistic Multivariate Cryptography. (VietCrypt, 2006)
- Dynamic Fully Anonymous Short Group Signatures. (VietCrypt, 2006)
- Cryptanalysis of Rainbow. (SCN, 2006)
- Efficient Implementations of Multivariate Quadratic Systems. (SAC, 2006)
- Cryptanalysis of Pomaranch. (IEE Proceedings - Information Security, 2006)
- A Handy Multi-coupon System. (ACNS, 2006)
- QUAD: A Practical Stream Cipher with Provable Security. (EUROCRYPT, 2006)
- How to Strengthen Pseudo-random Generators by Using Compression. (EUROCRYPT, 2006)
- Low-Cost Cryptography for Privacy in RFID Systems. (CARDIS, 2006)
- Cryptanalysis of Grain. (FSE, 2006)
- List signature schemes. (Discrete Applied Mathematics, 2006)
- Entity authentication schemes using braid word reduction. (Discrete Applied Mathematics, 2006)
- Defeating Malicious Servers in a Blind Signatures Based Voting System. (Financial Cryptography, 2006)
- On the Fly Authentication and Signature Schemes Based on Groups of Unknown Order. (Journal of Cryptology, 2006)
- A survey of algebraic properties used in cryptographic protocols. (Journal of Computer Security, 2006)
2005
- Short Undeniable Signatures Without Random Oracles: The Missing Link. (INDOCRYPT, 2005)
- An Algebraic Framework for Cipher Embeddings. (Cryptography and Coding, 2005)
- Server-Aided Verification: Theory and Practice. (ASIACRYPT, 2005)
- Universally Convertible Directed Signatures. (ASIACRYPT, 2005)
- Active attack against HB+: a provably secure lightweight authentication protocol. (IEE Electronic Letters, 2005)
- A New Baby-Step Giant-Step Algorithm and Some Applications to Cryptanalysis. (CHES, 2005)
- Analysis of the Bit-Search Generator and Sequence Compression Techniques. (FSE, 2005)
- Small Scale Variants of the AES. (FSE, 2005)
- Time-Selective Convertible Undeniable Signatures. (CT-RSA, 2005)
- Resistance of SNOW 2.0 Against Algebraic Attacks. (CT-RSA, 2005)
2004
- Universal forgery on Sekhar's signature scheme with message recovery. (Int. J. Comput. Math., 2004)
- Multi-designated Verifiers Signatures. (ICICS, 2004)
- Designated Verifier Signatures: Anonymity and Efficient Construction from Any Bilinear Map. (SCN, 2004)
- Cryptanalysis of a White Box AES Implementation. (SAC, 2004)
- Public Key Authentication with One (Online) Single Addition. (CHES, 2004)
- Anonymous Services using Smart Cards and Cryptography. (CARDIS, 2004)
- The Cryptanalysis of the AES - A Brief Survey. (AES, 2004)
2003
- A Traceable Block Cipher. (ASIACRYPT, 2003)
- Security Analysis of SHA-256 and Sisters. (SAC, 2003)
- On Fair E-cash Systems Based on Group Signature Schemes. (ACISP, 2003)
- The Security of "One-Block-to-Many" Modes of Operation. (FSE, 2003)
- On the Anonymity of Fair Offline E-cash Systems. (Financial Cryptography, 2003)
2002
- Implementing Group Signature Schemes with Smart Cards. (CARDIS, 2002)
- Cryptanalysis of SFLASH. (EUROCRYPT, 2002)
2001
- A fair and efficient solution to the socialist millionaires' problem. (Discrete Applied Mathematics, 2001)
- The RIPEMD and RIPEMD Improved Variants of MD4 Are Not Collision Free. (FSE, 2001)
- New Results on the Pseudorandomness of Some Blockcipher Constructions. (FSE, 2001)
2000
- Low-Size Coupons for Low-Cost IC Cards. (CARDIS, 2000)
- Partial revelation of certified identity. (CARDIS, 2000)
- An Online Public Auction Protocol Protecting Bidder Privacy. (ACISP, 2000)
- Efficient Proofs that a Committed Number Lies in an Interval. (EUROCRYPT, 2000)
- Cryptanalysis of Countermeasures Proposed for Repairing ISO 9796-1. (EUROCRYPT, 2000)
- Stochastic Cryptanalysis of Crypton. (FSE, 2000)
- A Statistical Attack on RC6. (FSE, 2000)
- A Collision Attack on 7 Rounds of Rijndael. (aes, 2000)
1999
1998
- How (not) to Design RSA Signature Schemes. (PKC, 1998)
1997
- A Multiplicative Attack Using LLL Algorithm on RSA Signatures with Redundancy. (CRYPTO, 1997)
- Selective Forgery of RSA Signatures Using Redundancy. (EUROCRYPT, 1997)