{"id":"W3083633640","doi":"10.1007/s00145-021-09384-1","title":"A Cryptographic Analysis of the TLS 1.3 Handshake Protocol","year":2021,"lang":"en","type":"article","venue":"Journal of Cryptology","topic":"Advanced Authentication Protocols Security","field":"Computer Science","cited_by":83,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"Engineering and Physical Sciences Research Council; Natural Sciences and Engineering Research Council of Canada; Bundesministerium für Bildung und Forschung; Technische Universität Darmstadt; Deutsche Forschungsgemeinschaft; National Science Foundation","keywords":"Handshake; Authenticated Key Exchange; Computer science; Key exchange; Transport Layer Security; Cryptographic protocol; Key (lock); Oakley protocol; Session key; Computer security; Ephemeral key; Computer network; Cryptography; Authentication (law); Protocol (science); Session (web analytics); Replay attack; Public-key cryptography; Encryption; Universal composability; Asynchronous communication; World Wide Web","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0004211881,0.00009426383,0.0004212551,0.0003240308,0.00006803164,0.00003417554,0.001041814,0.00007205967,0.0001064533],"category_scores_gemma":[0.0003253015,0.00006283171,0.0004453621,0.002500864,0.0001395917,0.0002566118,0.0002283134,0.0002449577,0.000001939339],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00002039212,"about_ca_system_score_gemma":0.0002709537,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":7.045976e-7,"about_ca_topic_score_gemma":0.0000122534,"domain_scores_codex":[0.998278,0.0003060583,0.0007183248,0.0001668048,0.0003625103,0.0001682816],"domain_scores_gemma":[0.9972086,0.0001671666,0.001104787,0.0006423688,0.0008116348,0.00006542275],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"theoretical_or_conceptual","study_design_scores_codex":[0.00005004078,0.0006660363,0.03613712,0.00007852881,0.001369926,0.00006061616,0.001342716,0.001384631,0.01496793,0.9342083,0.0001679316,0.009566247],"study_design_scores_gemma":[0.00294554,0.0004270735,0.2076638,0.0001294221,0.0007070976,0.0006436644,0.0001045047,0.008900929,0.08732393,0.6704205,0.02040966,0.0003238035],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":"theoretical_or_conceptual","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.009425473,0.00003146799,0.9746634,0.001901294,0.0001636419,0.0135112,0.00000162604,0.00001127575,0.0002906131],"genre_scores_gemma":[0.8757864,0.000004660198,0.1069953,0.0007043838,0.00007102879,0.01638546,4.135179e-7,0.00001154612,0.0000408567],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.8676682,"threshold_uncertainty_score":0.2562203,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01229057274611682,"score_gpt":0.3103689383372021,"score_spread":0.2980783655910853,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}