{"id":"W3083633640","doi":"10.1007/s00145-021-09384-1","title":"A Cryptographic Analysis of the TLS 1.3 Handshake Protocol","year":2021,"lang":"en","type":"article","venue":"Journal of Cryptology","topic":"Advanced Authentication Protocols Security","field":"Computer Science","cited_by":83,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"Engineering and Physical Sciences Research Council; Natural Sciences and Engineering Research Council of Canada; Bundesministerium für Bildung und Forschung; Technische Universität Darmstadt; Deutsche Forschungsgemeinschaft; National Science Foundation","keywords":"Handshake; Authenticated Key Exchange; Computer science; Key exchange; Transport Layer Security; Cryptographic protocol; Key (lock); Oakley protocol; Session key; Computer security; Ephemeral key; Computer network; Cryptography; Authentication (law); Protocol (science); Session (web analytics); Replay attack; Public-key cryptography; Encryption; Universal composability; Asynchronous communication; World Wide Web","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001520817,0.0005903589,0.0004351099,0.00136949,0.0009748967,0.001541723,0.0008979818,0.0008945769,0.00466439],"category_scores_gemma":[0.004185447,0.0003133941,0.00154814,0.0008064904,0.002423854,0.002884628,0.001414824,0.001920618,0.00111484],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001696964,"about_ca_system_score_gemma":0.001834862,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001054594,"about_ca_topic_score_gemma":0.0004212662,"domain_scores_codex":[0.9978861,0.0004030603,0.00009503024,0.0001560051,0.001150751,0.0003089404],"domain_scores_gemma":[0.9973207,0.001263433,0.0003705435,0.000539689,0.0004442025,0.00006139463],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"theoretical_or_conceptual","study_design_scores_codex":[0.0001461779,0.00006269874,0.000567197,0.0001067092,0.00003272398,0.0003745834,0.0002983383,0.05228444,0.008299261,0.9242904,0.001673966,0.01186353],"study_design_scores_gemma":[0.00006065127,0.0002043287,0.0009214708,0.00006966207,0.00007901106,0.0007454242,0.0001552578,0.4862266,0.01520054,0.4760108,0.02025545,0.00007077455],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":"theoretical_or_conceptual","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1651262,0.0007247327,0.7649461,0.001843745,0.0002133311,0.0005741714,0.0003827217,0.0007675858,0.0654214],"genre_scores_gemma":[0.9397221,0.0004808397,0.04856947,0.0003059308,0.0001576976,0.0002555608,0.0002597074,0.0001073116,0.01014124],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.00466439,"threshold_uncertainty_score":0.01560396,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01229057274611682,"score_gpt":0.3103689383372021,"score_spread":0.2980783655910853,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}