{"id":"W3172830517","doi":"10.46586/tosc.v2021.i2.389-422","title":"Algorithm Substitution Attacks: State Reset Detection and Asymmetric Modifications","year":2021,"lang":"en","type":"article","venue":"IACR Transactions on Symmetric Cryptology","topic":"Cryptographic Implementations and Security","field":"Computer Science","cited_by":7,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"","keywords":"Stateful firewall; Computer science; Substitution (logic); Semantic security; Scheme (mathematics); Symmetric-key algorithm; Cryptography; State (computer science); Computer security; Adversary; Encryption; Simple (philosophy); Theoretical computer science; Cryptographic protocol; Reset (finance); Algorithm; Public-key cryptography; Mathematics; Programming language; Philosophy; Attribute-based encryption","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0003560439,0.0002246096,0.0002722645,0.001998079,0.0007245706,0.0002128935,0.0002966498,0.0001463495,0.0000522114],"category_scores_gemma":[0.0000812665,0.0002449526,0.0001359529,0.007659176,0.0001371527,0.0004944963,0.0000217775,0.0003816517,0.00004832079],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001169005,"about_ca_system_score_gemma":0.0001324831,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001145387,"about_ca_topic_score_gemma":0.0002430495,"domain_scores_codex":[0.9977339,0.0002623458,0.0004753983,0.0007393861,0.0003514415,0.0004375165],"domain_scores_gemma":[0.9981937,0.0004729911,0.0001267385,0.0006748102,0.0003521264,0.000179597],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.000009549132,0.0003543041,0.0000803766,0.00001232989,0.0000793009,0.00002964491,0.0002713425,0.0002232716,0.0004558596,0.08630538,0.00004525893,0.9121334],"study_design_scores_gemma":[0.01042819,0.002181876,0.08022983,0.00007767061,0.0004906396,0.00352161,0.00194349,0.4236964,0.07628138,0.2796554,0.118066,0.003427549],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.01282394,0.0005267157,0.9839904,0.0009453606,0.000696943,0.0002501328,0.00008245033,0.0002137893,0.0004703046],"genre_scores_gemma":[0.8701263,0.0008930851,0.1285641,0.0002046693,0.00002945723,0.000109391,0.00002365778,0.00001449356,0.00003480602],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.9087058,"threshold_uncertainty_score":0.9988878,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02404941094490313,"score_gpt":0.285916197675827,"score_spread":0.2618667867309238,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}