Subversion-resilient Key-exchange in the Post-quantum World
Kévin Duverger, Pierre-Alain Fouque, Charlie Jacomme +2 more
Subversion-resilient Authenticated key-exchange (AKE) aims to achieve the guarantees of secure AKE even in the presence of an adversary that has tampered with parts of the protocol's implementation. One way to achieve subversion-resilient AKE is the use of Reverse Firewalls (RFs), an untrusted third-party that can restore security. Recent work[17] highlights the challenges of designing RFs for practical secure channel-establishment.
ACM SIGSAC Conference on Computer and Communications Security (CCS)•Nov 19, 2025•2 citations