TLS Security - Where Do We Stand?
- 11:00 6th February 2013 ( week 4, Hilary Term 2013 )Tony Hoare Room, Robert Hooke Building
TLS is the de facto secure protocol of choice on the Internet. In this talk, I'll give an overview of the state-of-the-art of TLS security, focusing mostly on the TLS Record Protocol which is responsible for providing the basic secure channel functionality in TLS. I'll discuss recent attacks such as BEAST and CRIME, and then focus on a newly-discovered vulnerability in the TLS specification which has the potential to allow full plaintext recovery of TLS-protected traffic. I will reflect on why the deployment of secure cryptography is seemingly so hard, and what the barriers are to adopting better approaches than the current techniques used in TLS. The talk will assume knowledge of basic cryptography and networking, but will be otherwise self-contained.
Speaker bio
Kenny obtained his BSc (Hons) in 1990 from the University of Glasgow and a PhD from the University of London in 1993, both in Mathematics. He was a Royal Society Fellow at the Swiss Federal Institute of Technology, Zurich, from 1993 to 1994, investigating algebraic properties of block ciphers. After that, he was Lloyd's of London Tercentenary Foundation Fellow at the University of London from 1994 to 1996, working on digital signatures. He joined the mathematics group at Hewlett-Packard Laboratories Bristol in November 1996, becoming project manager in 1999. His technical work there involved him in international standards setting, internal consultancy on a wide range of mathematical and cryptographic subjects, and intellectual property generation. In 2001, Kenny re-joined Royal Holloway as a Lecturer, becoming Reader in 2002 and Professor in 2004. In March 2010, Kenny commenced a 5-year research fellowship funded by EPSRC on the topic of "Cryptography: Bridging Theory and Practice". He was Programme Chair for Eurocrypt 2011, serves on the editorial board of the Journal of Cryptology, and continues to consult to industry and government. Kenny's research interests span a wide range of topics in theoretical and applied cryptography, and information security.Share this:
