Virendra

Virendra Kumar

College of Computing
Georgia Institute of Technology
266 Ferst Drive, # 2124
Atlanta, GA 30332

virendra[AT]cc[DOT]gatech[DOT]edu

About me


I am a 2nd year PhD student at College of Computing, Georgia Tech. My research interests are in cryptography and information security. My advisor is Prof. Alexandra Boldyreva. I also work with Prof. Yael Tauman Kalai. I am a member of Theory at Georgia Tech. I am visiting Symantec Research Labs, Mountain View during Summer '08. At Symantec, I am working with Zulfikar Ramzan and Sanjay Sawhney. David Cash, Adam O'Neill, and Akshay Wadia are my academic brothers. Vipul Goyal, Abhishek Jain, and Omkant Pandey are friends from my undergraduate institution, also working in cryptography. Before coming to Georgia Tech., I finished my undergraduate studies in electrical engineering from IT-BHU in 2006.

Publications


  • Crypto Analysis of Symantec's Norton Confidential.
          In Symantec Technical Report 2008, Symantec-SRL/MV-2008-2.
          This is Symantec's confidential technical report and has a very restricted access. 
  • Identity-based Encryption with Efficient Revocation. With Alexandra Boldyreva and Vipul Goyal. 
          To appear in Proc.  ACM Conference on Computer and Communications Security 2008 (CCS '08).  
In Proc. 2007 IEEE Symposium on Security and Privacy (Oakland '07), pp. 92-97.
We analyze the encryption schemes used in Kerberos. Although, most of the options suggested in the current version are sound for which we provide security proofs under standard assumptions, we point out flaws in the so called “General Profile” and suggest easy to implement modifications to provably fix them. For a widely deployed protocol like Kerberos, such provable security guarantees can go a long way in the standardization process.
In Computers & Security, vol. 25, no. 2, pp. 114-120, 2006.
In this paper, we propose an authentication protocol which is easy to implement without any infrastructural changes and yet prevents online dictionary attacks. Our protocol uses only one way hash functions and eliminates online dictionary attacks by implementing a challenge-response system. The protocol is perfectly stateless and thus less vulnerable to denial of service (DoS) attacks.
In Proc. International Conference on Information Technology: Coding and Computing (ITCC '05), pp. 739-744.
This is the conference version of the paper "A New Protocol to Counter Online Dictionary Attacks".

Relevant Coursework