Berlin Crypto Meetup

Anonymous credentials are a strongly secure and privacy-preserving solution to user authentication but require users to securely manage cryptographic keys and credentials. In terms of usability, Single Sign-On (SSO) solutions, where the authentication is outsourced to a central identity provider, are significantly more convenient for end users. However, privacy is a major problem in SSO, as the identity provider can track all the user's online authentication attempts. In this talk, we will discuss how techniques from anonymous credentials and OPRFs can improve the privacy of Single Sign-On protocols such as OIDC, while maintaining its usability advantages - as users still don't have to manage any keys or credentials.

We have conducted a field study on post-quantum DNSSEC, involving RIPE ATLAS measurements with around 10,000 probes. Using implementations of PQC signing schemes (Falcon, Dilithium, SPHINCS+, XMSS) in both BIND and PowerDNS, DNS response success and failure rates depending on the signing scheme and other parameters were investigated.

In addition to the above algorithms, we present results on a novel class of DNSSEC signatures, using Merkle trees for optimizing signature sizes. Besides measurement results, we'll provide context on our implementation approach.

Get a drink, and get chatting