Publications

Subvert KEM to Break DEM: Practical Algorithm-Substitution Attacks on Public-Key Encryption

Motivated by the currently widespread concern about mass surveillance of encrypted communications, Bellare et al. introduced at CRYPTO …
DOI
Subvert KEM to Break DEM: Practical Algorithm-Substitution Attacks on Public-Key Encryption
Hybrid Routing: Balancing Anonymity and Resilience in Anonymous Communication Networks

Anonymous communication networks (ACNs) are intended to protect the metadata privacy during the communication. As typical ACNs, onion …
DOI
Hybrid Routing: Balancing Anonymity and Resilience in Anonymous Communication Networks
APGS: An Efficient Source-Accountable and Metadata-Private Protocol in the Network Layer
Due to the revelations of global-scale pervasive surveillance programs, Internet users have an increasing demand for privacy. However, …
DOI
APGS: An Efficient Source-Accountable and Metadata-Private Protocol in the Network Layer
Message-Locked Searchable Encryption: A New Versatile Tool for Secure Cloud Storage
Message-Locked Encryption (MLE) is a useful tool to enable deduplication over encrypted data in cloud storage. It can significantly …
DOI
Message-Locked Searchable Encryption: A New Versatile Tool for Secure Cloud Storage
Hybrid Routing: Towards Resilient Routing in Anonymous Communication Networks
Anonymous communication networks (ACNs) are intended to protect the metadata during communication. As classic ACNs, onion mix-nets are …
DOI
Hybrid Routing: Towards Resilient Routing in Anonymous Communication Networks
Privacy-enhanced remote data integrity checking with updatable timestamp
Remote data integrity checking (RDIC) enables clients to verify whether the outsourced data is intact without keeping a copy locally or …
DOI
Privacy-enhanced remote data integrity checking with updatable timestamp
Towards Practical Privacy-Preserving Decision Tree Training and Evaluation in the Cloud
Due to the capacity of storing massive data and providing huge computing resources, cloud computing has been a desirable platform for …
DOI
Towards Practical Privacy-Preserving Decision Tree Training and Evaluation in the Cloud
ME-TLS: Middlebox-Enhanced TLS for Internet-of-things Devices
In-network middleboxes are vital for Internet-of-things system security, but the widely adopted Transport Layer Security (TLS) protocol …
DOI
ME-TLS: Middlebox-Enhanced TLS for Internet-of-things Devices
On the Security of LWE Cryptosystem against Subversion Attacks
Subversion of cryptography has received wide attentions especially after the Snowden Revelations in 2013. Most of the currently …
DOI
On the Security of LWE Cryptosystem against Subversion Attacks
Secure and Fast Decision Tree Evaluation on Outsourced Cloud Data
Decision trees are famous machine learning classifiers which have been widely used in many areas, such as healthcare, text …
DOI
Secure and Fast Decision Tree Evaluation on Outsourced Cloud Data
Towards Highly Secure Yet Efficient KNN Classification Scheme on Outsourced Cloud Data
Nowadays, outsourcing data and machine learning tasks, e.g., k􀀀nearest neighbour (KNN) classification, to clouds has become a scalable …
DOI
Towards Highly Secure Yet Efficient KNN Classification Scheme on Outsourced Cloud Data
Strongly leakage resilient authenticated key exchange, revisited
Authenticated Key Exchange (AKE) protocols allow two (or multiple) parties to authenticate each other and agree on a common secret key, …
DOI
Strongly leakage resilient authenticated key exchange, revisited
A Practical Authentication Framework for VANETs
In vehicular ad hoc networks (VANETs), conditional privacy preserving authentication (CPPA) scheme is widely deployed to solve security …
DOI
A Practical Authentication Framework for VANETs
Security of Auditing Protocols Against Subversion Attacks
In 2013, the revelation of Edward Snowden rekindled cryptographic researchers' interest in subversion attacks. Since then, many works …
DOI
Security of Auditing Protocols Against Subversion Attacks
Asymmetric Subversion Attacks on Signature and Identification Schemes
Studies of subversion attack against cryptosystem could be dated to several decades ago, while the Snowden revelation in 2013 has set …
DOI
Asymmetric Subversion Attacks on Signature and Identification Schemes
Privacy-Preserving Biometric-Based Remote User Authentication with Leakage Resilience
Biometric-based remote user authentication is a useful primitive that allows an authorized user to authenticate to a remote server …
DOI
Privacy-Preserving Biometric-Based Remote User Authentication with Leakage Resilience
Identity-based revocation system: Enhanced security model and scalable bounded IBRS construction with short parameters
Identity-based revocation system (IBRS) produces a ciphertext based on the revoked identities such that this ciphertext can only be …
DOI
Identity-based revocation system: Enhanced security model and scalable bounded IBRS construction with short parameters
Privacy-Preserving Mining of Association Rule on Outsourced Cloud Data from Multiple Parties
It has been widely recognized as a challenge to carry out data analysis and meanwhile preserve its privacy in the cloud. In this work, …
DOI
Privacy-Preserving Mining of Association Rule on Outsourced Cloud Data from Multiple Parties
Asymmetric Subversion Attacks on Signature Schemes
Subversion attacks against cryptosystems have already received wide attentions since several decades ago, while the Snowden revelations …
DOI
Asymmetric Subversion Attacks on Signature Schemes
Practical Privacy-Preserving Deep Packet Inspection Outsourcing
Hardware-based middleboxes are ubiquitous in computer networks, which usually incur high deployment and management expenses. A recently …
DOI
Practical Privacy-Preserving Deep Packet Inspection Outsourcing
Efficient $k$-out-of-$n$ Oblivious Transfer Scheme with the Ideal Communication Cost
n this paper, we propose a two-round k-out-of-n oblivious transfer scheme with the minimum communication cost. In our proposed scheme, …
DOI
Efficient $k$-out-of-$n$ Oblivious Transfer Scheme with the Ideal Communication Cost
Optimal Security Reductions for Unique Signatures: Bypassing Impossibilities with a Counterexample

Optimal security reductions for unique signatures (Coron, Eurocrypt 2002) and their generalization, i.e., efficiently re-randomizable …
DOI
Fully Privacy-Preserving ID-Based Broadcast Encryption with Authorization
A revocable ID-based broadcast encryption scheme allows an authorized third party to revoke any receiver (decryptor) from the initial …
DOI
Fully Privacy-Preserving ID-Based Broadcast Encryption with Authorization
PriMal: Cloud-Based Privacy-Preserving Malware Detection
The ongoing threat of malware has raised significant security and privacy concerns. Motivated by these issues, the cloud-based …
DOI
PriMal: Cloud-Based Privacy-Preserving Malware Detection
Iterated Random Oracle: A Universal Approach for Finding Loss in Security Reduction
The indistinguishability security of a public-key cryptosystem can be reduced to a computational hard assumption in the random oracle …
DOI
Iterated Random Oracle: A Universal Approach for Finding Loss in Security Reduction
Cryptographic Reverse Firewall via Malleable Smooth Projective Hash Functions
Motivated by the revelations of Edward Snowden, post- Snowden cryptography has become a prominent research direction in recent years. …
DOI
Cryptographic Reverse Firewall via Malleable Smooth Projective Hash Functions
Strong Authenticated Key Exchange with Auxiliary Inputs
Leakage attacks, including various kinds of side-channel attacks, allow an attacker to learn partial information about the internal …
DOI
Strong Authenticated Key Exchange with Auxiliary Inputs
Secure Channel Free ID-Based Searchable Encryption for Peer-to-Peer Group
Data sharing and searching are important functionalities in cloud storage. In this paper, we show how to securely and flexibly search …
DOI
Secure Channel Free ID-Based Searchable Encryption for Peer-to-Peer Group
Server-Aided Public Key Encryption With Keyword Search
Public key encryption with keyword search (PEKS) is a well-known cryptographic primitive for secure searchable data encryption in cloud …
DOI
Server-Aided Public Key Encryption With Keyword Search
One-Round Strong Oblivious Signature-Based Envelope
Oblivious Signature-Based Envelope (OSBE) has been widely employed for anonymity-orient and privacy-preserving applications. The …
DOI
One-Round Strong Oblivious Signature-Based Envelope
Anonymous Identity-Based Broadcast Encryption with Revocation for File Sharing
Traditionally, a ciphertext from an identity-based broadcast encryption can be distributed to a group of receivers whose identities are …
DOI
Recipient Revocable Identity-Based Broadcast Encryption: How to Revoke Some Recipients in IBBE without Knowledge of the Plaintext
In this paper, we present the notion of recipient-revocable identity-based broadcast encryption scheme. In this notion, a content …
DOI
Recipient Revocable Identity-Based Broadcast Encryption: How to Revoke Some Recipients in IBBE without Knowledge of the Plaintext
Privacy-Preserving Data Search and Sharing Protocol for Social Networks through Wireless Applications
Data search and sharing are two important functionalities in social networks. The social network users can form a peer-to-peer group …
DOI
Privacy-Preserving Data Search and Sharing Protocol for Social Networks through Wireless Applications
One-Round Privacy-Preserving Meeting Location Determination for Smartphone Applications
With the widely adopted GPS technology in mobile devices, users enjoy many types of location services. As a recently proposed …
DOI
One-Round Privacy-Preserving Meeting Location Determination for Smartphone Applications
Strongly Leakage-Resilient Authenticated Key Exchange
Authenticated Key Exchange (AKE) protocols have been widely deployed in many real-world applications for securing communication …
DOI
Strongly Leakage-Resilient Authenticated Key Exchange
Dual-Server Public-Key Encryption With Keyword Search for Secure Cloud Storage
Searchable encryption is of increasing interest for protecting the data privacy in secure searchable cloud storage. In this paper, we …
DOI
Dual-Server Public-Key Encryption With Keyword Search for Secure Cloud Storage
BL-MLE: Block-Level Message-Locked Encryption for Secure Large File Deduplication
Deduplication is a popular technique widely used to save storage spaces in the cloud. To achieve secure deduplication of encrypted …
DOI
BL-MLE: Block-Level Message-Locked Encryption for Secure Large File Deduplication
A New General Framework for Secure Public Key Encryption with Keyword Search
Public Key Encryption with Keyword Search (PEKS), introduced by Boneh et al. in Eurocrypt’04, allows users to search encrypted …
DOI