Felix Günther

Latest

• Justifying Standard Parameters in the TLS 1.3 Handshake
• Separate Your Domains: NIST PQC KEMs, Oracle Cloning and Read-Only Indifferentiability
• Tighter Proofs for the SIGMA and TLS 1.3 Key Exchange Protocols