[1]IACR logo IACR Newsletter The newsletter of the [2]International Association for Cryptologic Research. Vol. 23, No. 2, Winter 2006. Contents * [3]2006 elections * [4]New website for IACR organizational discussions * [5]Visas for IACR events * [6]Nominations for IACR Fellow deadline * [7]Calendar of events in cryptology * [8]Top Downloads from the Cryptology ePrint Archive * [9]Meeting minutes for the Board of Directors * [10]Open Positions in Cryptology 2006 elections are complete The 2006 election is now complete. There were two items on the ballot, a vote on the creation of an anonymity policy, and the normal election of directors. The issue of anonymity for the review process has been approved by the membership with a 216 to 83 majority (with 25 choosing not to vote on this issue). The exact wording of the policy is: Submissions to all IACR conferences (Asiacrypt, Crypto, and Eurocrypt) should normally be anonymous to program committee members throughout the reviewing process. Authorship should only be disclosed by the program chair in rare instances involving conflicts or other special circumstances. The following directors have been elected to a three year term, January 2007 through December 2009. * Tom Berson * Arjen Lenstra * Serge Vaudenay There was a strong ballot vying for the three open seats. Congratulations to the electees, and our thanks to all eight qualified candidates for participating. There were 324 ballots that arrived before the December 1 deadline. All were counted and none were spoiled. The web page for the election is [11]here and the sample ballot is [12]here. The detailed results are [13]here. New website for IACR organizational discussions [14]A new wiki website has now been set up to serve as a stage for discussions on IACR-related topics. The IACR does not formally maintain this site or endorse the opinions on it. This site is maintained by Shai Halevi and the opinions on it belong to the respective contributors. Current discussion topics: * [15]Should the IACR switch to an electronic voting system? * [16]IACR electronic publishing Anyone is encouraged to contribute to the discussions on this site. The only request is that contributions be related to the discussion topics. Shai Halevi, Dec 22, 2006 Visas for IACR events The issue of Visas to attend IACR events continues to be significant. Information on the US visas can be found [17]here, The time to obtain a US visa is variable, and may involve a visit to the Consulate for an interview. This has taken over 3 months for some individuals in the past. It is advisable to submit Visa applications as soon as possible to avoid last minute problems. For all IACR conferences and workshops, please check the relevant web page for visa information or contact that conference's General Chair. Nominations for IACR Fellow We hope that you will consider devoting some of your time and effort to nominating or endorsing an IACR-Fellow candidate. IACR members can nominate or endorse other IACR members for this prestigious position. Nominations and endorsements are due on December 31, 2006. More information can be found [18]here. Calendar of IACR events [19]IACR Conferences * [20]Eurocrypt 2007, May 20-24, 2007, Barcelona, Spain. * [21]Crypto 2007, August 19-23, 2007, Santa Barbara, California, USA. * [22]Asiacrypt 2007, December 2-6, 2007 Kuching, Sarawak, MALAYSIA. [23]IACR Workshops * [24]The fourth Theory of Cryptography Conference (TCC'07), February 21-24, 2007, Amsterdam, The Netherlands. * [25]FSE 2007, March 26-28, Luxemburg, Luxemburg. * [26]International Workshop on Practice and Theory in Public Key Cryptography (PKC 2007), April 16-20, Beijing, P.R.China. * [27]Workshop on Cryptographic Hardware and Embedded Systems (CHES 2007), September 10-13, 2007, Vienna, Austria. Events In Cooperation with IACR * [28]2007 IEEE Symposium on Security and Privacy, May 20-23, 2007, Oakland, California, USA [29]Complete Calendar of Events in Cryptology Top downloads from the Cryptology ePrint Archive The top papers downloaded from August through December of 2006 are listed below. * [30]On the Power of Simple Branch Prediction Analysis, Onur Aciicmez and Cetin Kaya Koc and Jean-Pierre Seifert This paper describes and concludes that a Simple Branch Prediction Attacks are much more dangerous than previously anticipated as they empower an unprivileged process to successfully attack other processes running in parallel on the same processor. * [31]Collisions for Hash Functions MD4, MD5, HAVAL-128 and RIPEMD, X. Wang, D. Feng, X. Lai and H. Yu This is the paper for a series of collisions in the hash functions MD4, MD5, HAVAL-128 and RIPEMD that were announced at CRYPTO 2004 Rump Session by Ms. X. Wang. * [32]A Technical Comparison of IPSec and SSL, AbdelNasir Alshamsi and Takamichi Saito Not finding any papers comparing IPSec and SSL in terms of characteristic and functionality, the authors created this paper focused on presenting an analysis of security and performance properties for IPSec and SSL. * [33]How to Cheat at Chess: A Security Analysis of the Internet Chess Club, J. Black, M. Cochran and R. Gardner The Internet Chess Club (ICC) is a popular online chess server with more than 30,000 members. While the security protocol used between client and server claims sufficient security for sensitive information to be transmitted, this paper shows that this is not true. * [34]How to Build a Low-Cost, Extended-Range RFID Skimmer, Ilan Kirschenbaum and Avishai Wool Describes how to build a device that can skim widely adopted RFID tags from a distance that does not require the attacker to touch the victim. The device can also be the leech part of a relay-attack system by which an attacker can make purchases using a victim's RFID-enhanced credit card--despite any cryptographic protocols that may be used. * [35]The Misuse of RC4 in Microsoft Word and Excel, H. Wu Reports a flaw in Microsoft Word and Excel's use of the stream cipher RC4. When an encrypted document gets modified and saved, the initialization vector remains the same allowing information to be recovered. [36]Complete list of recent papers in the IACR ePrint Archive Meeting minutes for the Board of Directors The past minutes of the meetings [37]here. Additions to the list this year include: Date Board meeting Crypto 2006 [38]Agenda [39]Minutes Eurocrypt 2006 [40]Agenda [41]Minutes Open positions in Cryptology Current announcements on the IACR Website for [42]Open Positions in Cryptology. * Eindhoven University of Technology * Microsoft Research * Stevens Institute of Technology * University College London * National Mathematics cluster DIAMANT * Eindhoven University of Technology * Horst Goertz Institute for IT Security (HGI) * Groupe des Écoles des Télécommunications * Palo Alto Research Center (PARC) __________________________________________________________________ You may opt out of the newsletter either by editing your contact information and preferences [43]here or by sending an email to the newsletter editor at newsletter (at) iacr.org. Contributions, announcements, book announcements or reviews, calls for papers ... are most welcome! Please include a URL and/or e-mail address for any item submitted (if possible). For things that are not on the Web, please submit a one-page ASCII version. Send your contributions to newsletter (at) iacr.org. [44]IACR contact information __________________________________________________________________ [ [45]IACR home page | [46]IACR Newsletter page and archive ] [47]Copyright IACR References 1. http://www.iacr.org/ 2. http://www.iacr.org/ 3. http://www.iacr.org/newsletter/v23n2/index.html#elections 4. http://www.iacr.org/newsletter/v23n2/index.html#wetpaint 5. http://www.iacr.org/newsletter/v23n2/index.html#visas 6. http://www.iacr.org/newsletter/v23n2/index.html#fellow 7. http://www.iacr.org/newsletter/v23n2/index.html#Calendar 8. http://www.iacr.org/newsletter/v23n2/index.html#eprint 9. http://www.iacr.org/newsletter/v23n2/index.html#Minutes 10. http://www.iacr.org/newsletter/v23n2/index.html#positions 11. http://www.iacr.org/elections/2006/index.html 12. http://www.iacr.org/elections/2006/2006Ballot.pdf 13. http://www.iacr.org/elections/2006/details.html 14. http://iacr-discussions.wetpaint.com/ 15. http://iacr-discussions.wetpaint.com/page/Should+IACR+hold+electronic+elections%3F 16. http://iacr-discussions.wetpaint.com/page/IACR+electronic+publishing 17. http://www.unitedstatesvisas.gov/whatis/ 18. http://www.iacr.org/fellows/index.html 19. http://www.iacr.org/conferences/ 20. http://www.iacr.org/conferences/eurocrypt2007/ 21. http://www.iacr.org/conferences/crypto2007/ 22. http://www.swinburne.edu.my/asiacrypt2007/ 23. http://www.iacr.org/workshops/ 24. http://www.cwi.nl/projects/crypto/tcc07/ 25. http://lacs.uni.lu/fse2007/ 26. http://pkc07.cs.tsinghua.edu.cn/ 27. http://islab.oregonstate.edu/ches/ 28. http://www.ieee-security.org/TC/SP2007/oakland07-home.html 29. http://www.iacr.org/events 30. http://eprint.iacr.org/2006/351 31. http://eprint.iacr.org/2004/199 32. http://eprint.iacr.org/2004/314 33. http://eprint.iacr.org/2004/203 34. http://eprint.iacr.org/2006/054 35. http://eprint.iacr.org/2005/007 36. http://eprint.iacr.org/cgi-bin/search.pl?last=182&title=1 37. http://www.iacr.org/docs/minutes.html 38. http://www.iacr.org/bod/agendas/c2006bod.txt 39. http://www.iacr.org/bod/minutes/c2006bod.txt 40. http://www.iacr.org/bod/agendas/ec2006bod.txt 41. http://www.iacr.org/bod/minutes/ec2006bod.txt 42. http://www.iacr.org/jobs/index.html 43. https://s1.iacr.org/iacrmem/update.html 44. http://www.iacr.org/bod.html 45. http://www.iacr.org/index.html 46. http://www.iacr.org/newsletter/index.html 47. http://www.iacr.org/copyright.html