Future graduate students

While truly functional quantum computers are still in development as a future technology, this does not mean that researchers cannot take advantage of quantum properties in the nearer term.

Monday, July 22, 2024 10:30 am - 2:00 pm EDT (GMT -04:00)

Lessons on secure deployment of cryptographic primitives

Elena Bakos Lang and Kevin Henry, NCC Group

QNC building, 200 University Ave. Room 1201, Waterloo 

The security of cryptographic primitives and protocols is inextricably tied to that of the implementations deployed in the real world. Ensuring that these implementations are as secure as possible is thus a problem at the heart of cryptographic security.

This workshop will introduce common classes of cryptographic vulnerabilities, including improper randomness generation, side-channel attacks, flaws in primitives or protocols, and others, and discuss secure coding practices that can help mitigate them, based on our experiences auditing cryptographic code. This discussion will be complemented by a set of practical exercises to provide experience in spotting insecure constructions. Additionally, as implementation quality is often tied to the quality of the source material, we will present a case study on a recent widely implemented threshold signing protocol where ambiguous or unclear presentation in the academic source material has led to multiple critical implementation vulnerabilities.

This workshop is presented by NCC Group Cryptography Services practice in Waterloo, Ontario.

To attend this program please email us at cryptoworks21@uwaterloo.ca by July 17, 2024.

Wednesday, July 17, 2024 2:00 pm - 4:00 pm EDT (GMT -04:00)

An introduction to analyzing cryptographic protocols using Taramin prover

Douglas Stebila, University of Waterloo

QNC building, 200 University Ave. Room 1201, Waterloo 

This workshop will provide an introduction to the Tamarin prover, which is a security protocol verification tool that analyzes cryptographic protocols in a symbolic model and can automatically identify attacks or conclude that certain classes of attacks do not exist. The workshop will include a hands-on exercise using the Tamarin prover.

To attend this program please email us at cryptoworks21@uwaterloo.ca by July 16, 2024.