News
08.02.2019

Doodle Poll for Exam DatesHere's the doodle vote for the preferred days of the oral exams. Please only mark with no if you really do not have time on a certain day (i.e. not if it is just a bit inconvenient for you) 
04.02.2019

Last Q&A Session on Friday 08.02We will have a final Q&A Session Friday art 8:30 
31.01.2019

Q&A Session on FridayThe results from the doodle poll are in. We will meet tomorrow at 12:30 in the usual place. 
30.01.2019

Alternative Timeslot for Q&A Session on FridayHey everyone, I'm terribly sorry but there's yet another clash of appointments this Friday at our usual timeslot. However, I'd like to do the Q&A session anyway this Friday. Please indicate in the doodle below which timeslots would suit you. Majority... Read more Hey everyone, I'm terribly sorry but there's yet another clash of appointments this Friday at our usual timeslot. However, I'd like to do the Q&A session anyway this Friday. Please indicate in the doodle below which timeslots would suit you. Majority wins. https://doodle.com/poll/svymrkdd4yqh2va3

28.01.2019

Q&A Session Friday 8:30Usual place, usual time 
24.01.2019

Exercise tomorrowHey everyone, tomorrow 8:30 exercises. We'll discuss exercise sheet 2. 
17.01.2019

Another typo on exercise sheet 02In exercise 4 DEC outputs either m or \bot (not 1 or 0). Thx to Bohdan 
17.01.2019

No exercises tomorrow 18.01.19Due to a clash of appointments the exercises are postponed to 25.01.19 
14.01.2019

Another update of exercise sheet 2 In Exercise 2 we require the group G to be of prime order (in fact, any composite order with large factors would do)  In Exercise 3 we require that the field F has size 2^\secparam (instead of \secparam)

11.01.2019

Exercise Sheet 2 updatedFixed some unclarities: In exercise 2 added the condition m_0 \neq m_1 to the binding property, in exercise 4 a \gamma was missing in the description of DEC. Thanks to Florian and Jesko 
10.01.2019

No Exercise this weekThe next exercise/tutorial will be on the 18.01.2019 
17.12.2018

New Exercise Sheet outIt is due the 18.01.19 
17.12.2018

No Exercises on Friday 21.12.18On Friday 21.12.2018 there will be no exercises. Happy Hollidays! 
02.12.2018

Exercise Sheet SubmissionPlease submit you exercise sheets here 
19.11.2018

Another typo in Exercise Sheet 01 fixed... we're getting there :) 
17.11.2018

Exercise Sheet 01 UpdatedTypos in the exercise sheet have been fixed. Also, due to a suggestion I've added an extra exercise (1b) which shows why we can assume without loss of generality that adversaries are deterministic. 
11.11.2018

Exercise Sheet outThe first exercise sheet is out. It is due Friday 07.12.18 
10.11.2018

No Lecture on Monday 12.11.18Due to some unforeseen issues there will be no lecture on Monday 12.11. The next lecture will be on Monday the 19.11 
05.11.2018

Chosen Ciphertext security of modified ElGamalThe result I referenced today can be found here 
05.11.2018

ExercisesExercises will be Friday 8:30 / 8:45 at CISPA 0.06. First time Friday 09.11.18. 
05.11.2018

Doodle Poll for Exercises 
10.10.2018

First LectureDue to a collision with an introduction event on Monday 15.10.18, the first lecture will take place Monday 22.10.18. 
Advanced Public Key Cryptography
Overview
In the past three decades cryptography has taken on tasks above and beyond the basic task of securing pointtopoint communication channels: Maintaining the privacy of individuals in databases, secure computation on large datasets and anonymous transactions in blockchainsbased currencies to name just a few.
This course will cover the stateoftheart in public key encryption and discuss some of the guiding challenges and frontierproblems of today.
The following topics will be covered:
 Modelling Security for public key encryption
 Proving security of public key encryption schemes
 Tools for building public key encryption schemes
 Notions of public key encryption with enhanced functionality:
Homomorphic Encryption
IdentityBased Encryption
AttributeBased Encryption
Functional Encryption
Questions? Don't hesitate to write a mail to "doettling at cispa.saarland"
Prerequisites
Some familiarity with the basics of cryptography is expected, e.g. as provided in the summerterm course "Cryptography".
When and Where
Monday 10:00  11:30 in building E9 1 (CISPA), room 0.05 (lecture hall ground floor). First lecture on 22.10.18.
Materials
Lecture Slides
 Lecture 01 Slides
 Lecture 02 Slides  Annotated
 Lecture 03 Slides  Annotated
 Lecture 04 Slides  Annotated
 Lecture 05 same slides as lecture 04  Annotated
 Lecture 05 Slides  Annotated
 Lecture 06 Slides  Annotated  Update Annotated
 Lecture 07 Slides  Annotated
Exercise Slides
 Exercise 01: Introduction to ZK Proofs
 Exercise Notes 02
 Exercise Notes 03
Exercise Sheets
 Exercise Sheet 01 due on Friday 07.12.18
 Exercise Sheet 02 due on Friday 18.01.19