Abstract
The security of the Web relies on cryptographic protocols, i.e. distributed programs that use cryptography to protect sensitive data against subtle attacks from powerful adversaries that fully control the network. However, despite decades of careful study, theoretical and practical attacks continue to be found in real-world cryptographic protocols like Transport Layer Security (TLS). In this seminar, we will look at what goes wrong in these protocols, and we will discuss how formal verification can be used to eliminate certain classes of attacks against implementations of modern protocols like TLS 1.3 and Signal.
