Person

Martin Vuagnoux

This person is no longer with EPFL

Related publications (12)

SwissCovid in the Perspective of Its Goals

SwissCovid is the Swiss digital contact tracing app, which was deployed to help fighting against the COVID-19 pandemic. After a year of activity, it is high time to evaluate how effective it has been in its mission. At the highest peak, about 22% of the Sw ...

2022

On the Effectiveness of Time Travel to Inject COVID-19 Alerts

Martin Vuagnoux, Serge Vaudenay

Digital contact tracing apps allow to alert people who have been in contact with people who may be contagious. The Google/Apple Exposure Notification (GAEN) system is based on Bluetooth proximity estimation. It has been adopted by many countries around the ...

Springer, Cham2021

Smashing WEP in A Passive Attack

Martin Vuagnoux, Serge Vaudenay, Pouyan Sepehrdad, Petr Susil

In this paper, we report extremely fast and optimised active and passive attacks against the old IEEE 802.11 wireless communication protocol WEP. This was achieved through a huge amount of theoretical and experimental analysis (capturing WiFi packets), ref ...

2013

Statistical Attack on RC4: Distinguishing WPA

Martin Vuagnoux, Serge Vaudenay, Pouyan Sepehrdad

In this paper we construct several tools for manipulating pools of biases in the analysis of RC4. Then, we show that optimized strategies can break WEP based on 4000 packets by assuming that the first bytes of plaintext are known for each packet. We descri ...

Springer2011

Computer Aided Cryptanalysis from Ciphers to Side Channels

Martin Vuagnoux

In this dissertation, we study the security of cryptographic protocols and cryptosystems from the mathematical definition of the primitives, up to their physical implementations in the real world. We propose a representation of the chronological design usi ...

EPFL2010

Discovery and Exploitation of New Biases in RC4

Martin Vuagnoux, Serge Vaudenay, Pouyan Sepehrdad

In this paper, we present several weaknesses in the stream cipher RC4. First, we present a technique to automatically reveal linear correlations in the PRGA of RC4. With this method, 48 new exploitable correlations have been discovered. Then we bind these ...

Springer-Verlag New York, Ms Ingrid Cunningham, 175 Fifth Ave, New York, Ny 10010 Usa2010

Compromising Electromagnetic Emanations of Wired and Wireless Keyboards

Martin Vuagnoux, Sylvain Pasini

Computer keyboards are often used to transmit confidential data such as passwords. Since they contain electronic components, keyboards eventually emit electromagnetic waves. These emanations could reveal sensitive information such as keystrokes. The techni ...

USENIX Association2009

Passive-Only Key Recovery Attacks on RC4

Martin Vuagnoux, Serge Vaudenay

We present several weaknesses in the key scheduling algorithm of RC4 when the secret key contains an initialization vector - a cryptographic scheme typically used by the WEP and WPA protocols to protect IEEE 802.11 wireless communications. First, we show h ...

Springer2007

About Machine-Readable Travel Documents

Martin Vuagnoux, Serge Vaudenay

Passports are documents that help immigration officers to identify people. In order to strongly authenticate their data and to automatically identify people, they are now equipped with RFID chips. These contain private information, biometrics, and a digita ...

2007

About Machine-Readable Travel Documents

Martin Vuagnoux, Serge Vaudenay, Jean Monnerat

Passports are now equipped with RFID chips that contain private information, biometric data, and a digital signature by issuing authorities. We review most of applicable security and privacy issues. We argue that the main privacy issue is not unauthorized ...

Springer2007

About Machine-Readable Travel Documents

Martin Vuagnoux, Serge Vaudenay

Springer2007

Autodafé: an Act of Software Torture

Martin Vuagnoux

Automated vulnerability searching tools have led to a dramatic increase of the rate at which such flaws are discovered. One particular searching technique is fault injection i.e. insertion of random data into input files, buffers or protocol packets, combi ...

Chaos Computer Club2005