Stanford Security Lab
The Applied Crypto Group is a part of the Security Lab in the Computer Science Department at Stanford University. Research projects in the group focus on various aspects of network and computer security. In particular, the group focuses on applications of cryptography to real-world security problems.
Cryptography for real-world security problems.
The looming threat of a large-scale quantum computer necessitates the move away from factoring and discrete-log based cryptosystems. We have been working on several types of post-quantum systems, including ones based on hard problems in lattices, isogenies, and based purely on hash functions. We have also been using lattices for proofs of security and attacks.
Suppose a computationally weak device asks a powerful server to perform a computation on its behalf. How can the weak device trust the result? The beautiful field of succinct proof systems, also called SNARKs, gives a practical solution. We build new SNARK systems, such as Bulletproofs, Hyperplonk, LatticeFold, and Mangrove, and are also exploring applications of these proof systems for proving media provenance, proving knowledge of a Lean proof, distributed proving, and blockchains.
Can multi-user services operate without sending all user data to the cloud in the clear? Some examples include private location-based services, private computation of aggregate statistics, private recommendation systems, private queries to a database, and anonymous messaging.
We are developing cryptographic tools with applications to blockchains. We are also teaching a course on the topic, CS251.
Cryptographic pairings have numerous applications to cryptography, including everything from identity-based encryption and short digital signatures to broadcast encryption and search-friendly encryption.
Computer security research explores architectures that improve software security and enhances our understanding of attack strategies. Our research covers SSL and TLS, Web security, and areas of operating systems security.
The US Government regulates the physical export or transmission of cryptographic source and corresponding object code outside the borders of the US and within the US when the recipient is an embassy or an affiliate of a foreign government. Posting encrypted code to the internet and making it publicly available is considered an export and may entail US government notification requirements. Please see Stanford's Export Control Encryption Page if you have a need to take, transfer or transmit Stanford-generated encryption code outside of the US or to share it with US-based representatives of foreign governments.