skip to main content
US FlagAn official website of the United States government
dot gov icon
Official websites use .gov
A .gov website belongs to an official government organization in the United States.
https lock icon
Secure .gov websites use HTTPS
A lock ( lock ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Explore Research Products in the PAR
It may take a few hours for recently added research products to appear in PAR search results.


  • Home
  • Search Results
  • Page 1 of 1

Search for: All records

Creators/Authors contains: "Jaeger, Joseph"

Note: When clicking on a Digital Object Identifier (DOI) number, you will be taken to an external site maintained by the publisher. Some full text articles may not yet be available without a charge during the embargo (administrative interval).
What is a DOI Number?

Some links on this page may take you to non-federal websites. Their policies may differ from this site.

  1. ; ; ; (, Advances in Cryptology - EUROCRYPT 2022)
    Dunkelman, Orr; Dziembowski, Stefan (Ed.)
    Full Text Available 
  2. ; (, Theory of Cryptography - 18th International Conference, TCC 2020 (Part III))
    null (Ed.)
    Accepted Manuscript Full Text Available
  3. ; ; (, Advances in Cryptology – CRYPTO 2020)
    Accepted Manuscript Full Text Available
  4. ; (, Advances in Cryptology - EUROCRYPT 2019)
    Accepted Manuscript Full Text Available
  5. ; ; (, CCS '17 Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security)
    The MD transform that underlies the MD and SHA families iterates a compression function h to get a hash function H. The question we ask is, what property X of h guarantees collision resistance (CR) of H? The classical answer is that X itself be CR. We show that weaker conditions X, in particular forms of what we call constrained-CR, suffice. This reduces demands on compression functions, to the benefit of security, and also, forensically, explains why collision-finding attacks on compression functions have not, historically, lead to immediate breaks of the corresponding hash functions. We obtain our results via a definitional framework called RS security, and a parameterized treatment of MD, that also serve to unify prior work and variants of the transform. 
    more » « less
    Full Text Available