Nec Corporation

Nec Laboratories Europe Gmbh

Imdea Software Institute

Antonio Faonio

Claudio Soriente

Dario Fiore

Maria Isabel Gonzalez Vasco

Angel Perez Del Pozo

Luca Nizzardo

A computer-implemented method includes receiving an original message from a trusted execution environment. The original message includes an original digital signature authored by the trusted execution environment. The method includes computing a proof of knowledge for the original digital signature and modifying the original message by replacing the original digital signature with the proof of knowledge.

Subversion resilient attestation for trusted execution environments

A method for cryptographic key provisioning includes, via a main authentication server (MAS), generating a first secret key and registering a client by performing a first portion of a first instance of a distributed threshold oblivious pseudo-random function. The first instance of the function results in the client obtaining a root secret key and the MAS obtaining a corresponding root public key. The method includes authenticating the client to the MAS by performing a first portion of a second instance of the distributed threshold oblivious pseudo-random function. The second instance of the function results in the client obtaining the root secret key. Information stored by the client, the first secret key, and a second secret key generated by a support authentication server are inputs to at least one of the first and second instances of the distributed threshold oblivious pseudo-random function.

Password-authenticated public key establishment

Growing community of inventors

Madrid, Spain

Antonio Faonio