Abstract
Web security relies on cryptographic protocols: distributed programs that use encryption and signature to protect sensitive data from the many attacks that adversaries controlling the network can carry out. Despite thirty years of study, theoretical and practical vulnerabilities continue to be discovered in the Web's cryptographic protocols, notably TLS(Transport Layer Security). The speaker described several of these vulnerabilities and showed how formal verification can exclude certain classes of attack on modern protocol implementations such as TLS 1.3 and Signal.
