The paper introduces a systematic, executable taxonomy of security properties to bridge the gap between theoretical security definitions and their practical implementation in formal verification tools…

This paper introduces witness complexity, a measure for the minimum running time of a string's near-shortest description on a universal Turing machine.

The paper introduces formal patterns to enhance and compose security components (lingos and dialects) for network protocols, providing generic, verifiable methods for hardening distributed systems.

This paper establishes a complexity hierarchy for shuffle operations used in card-based cryptography, classifying them by implementation difficulty and proving separations between these levels.

This paper provides a focused, preparatory introduction to sheaves and topoi, establishing the necessary structural background to understand the advanced sheaf-theoretic framework used in cryptographi…

The paper introduces a comprehensive security framework, AgentRFC, to systematically analyze and test the security conformance of various AI agent protocols, identifying critical design gaps, especial…

This paper constructs and proves the security of 3-pass Authenticated Key Exchange (AKE) protocols for both KA-based and KEM-based primitives within the commitment-based model, improving upon previous…

The paper introduces SecGoal, a benchmark dataset and framework, demonstrating that fine-tuning smaller LLMs on this dataset significantly improves the precision of extracting formalizable security go…

This study empirically demonstrates that even highly technical students struggle significantly with the long-term usability and security understanding of Mutual TLS (mTLS) client authentication, sugge…

This paper introduces ShannonProver, an agentic framework that automates cryptographic proofs in EasyCrypt, allowing for scalable proof verification.

This survey analyzed 132 web application security tutorials, finding that most lack concrete implementation details and recommending that the presence of runnable code and links to official resources…

This paper evaluates the Crypto Agility Maturity Model (CAMM) and finds that it suffers from ambiguities, lack of operationalization, and structural flaws, proposing concrete improvements for reliable…

The paper proposes 'Explainable PQC,' a layered interpretive framework designed to structure and clarify how post-quantum cryptographic security assumptions are represented and communicated, particula…

The paper introduces PLM-NIDS, a novel intrusion detection system that models network flows as a language based solely on L3/L4 metadata, successfully detecting attacks by identifying deviations from…

The paper introduces PLM-NIDS, a novel intrusion detection system that models network flows as a language based solely on L3/L4 metadata, successfully detecting attacks by identifying deviations from…

The paper introduces a multi-surface evidence framework to provide comprehensive observability for post-quantum TLS migration, enabling robust measurement of session behavior and endpoint capabilities…

This paper addresses the operational challenge of adopting Post-Quantum Cryptography (PQC) in complex financial TLS environments by presenting a methodology to automatically profile and normalize cryp…

This paper proposes HCP, a Handle-Capability Protocol runtime for MCP-style agent systems, which implements eight execution-control invariants to enhance security while preserving MCP-like workflows.

This paper evaluates the performance overhead of implementing ChaCha20-Poly1305 encryption on low-cost edge devices, demonstrating that the added latency remains well within the strict requirements of…