Virendra Kumar
College of Computing
Georgia Institute of
Technology
266 Ferst Drive, # 2124
Atlanta, GA 30332
virendra[AT]cc[DOT]gatech[DOT]edu
About me
I am a 2nd year PhD student at
College of Computing, Georgia Tech. My research interests are
in cryptography and information security. My advisor is Prof. Alexandra
Boldyreva. I
also work with Prof. Yael Tauman
Kalai. I am
a member of Theory at
Georgia Tech.
I am visiting Symantec Research Labs, Mountain View
during Summer '08. At Symantec, I am working with Zulfikar
Ramzan and Sanjay Sawhney. David
Cash, Adam O'Neill,
and Akshay Wadia
are my academic brothers. Vipul Goyal, Abhishek Jain,
and Omkant Pandey are
friends from my undergraduate institution, also working in
cryptography. Before coming to Georgia
Tech., I
finished my undergraduate studies in electrical engineering from IT-BHU in 2006.
Publications
- Crypto
Analysis of Symantec's Norton Confidential.
In
Symantec
Technical Report 2008, Symantec-SRL/MV-2008-2.
This is Symantec's confidential technical report
and has a very restricted access.
- Identity-based Encryption with Efficient
Revocation. With Alexandra
Boldyreva and Vipul Goyal.
To appear in
Proc.
ACM Conference on Computer and Communications Security 2008
(CCS '08).
In Proc. 2007
IEEE Symposium on Security and Privacy (Oakland '07), pp.
92-97.
We analyze the
encryption
schemes used in Kerberos. Although, most of the options suggested in
the current version
are sound for which we provide security proofs under standard
assumptions, we point out flaws in the so called “General
Profile” and suggest easy to implement modifications to
provably fix them. For a widely deployed protocol like
Kerberos, such provable security guarantees can go a long way in the
standardization process.
In Computers
& Security,
vol. 25, no. 2, pp. 114-120, 2006.
In this paper, we
propose an
authentication protocol which is easy to implement without any
infrastructural changes and yet prevents online dictionary attacks. Our
protocol uses only one way hash functions and eliminates online
dictionary attacks by implementing a challenge-response system. The
protocol is perfectly stateless and thus less vulnerable to denial of
service (DoS) attacks.
In Proc.
International Conference on Information Technology: Coding and Computing
(ITCC '05), pp. 739-744.
This is the conference
version of the paper "A New Protocol to Counter Online Dictionary
Attacks".