Course Schedule

No.	Date	Topic	Readings
1	September 30, 2024	Security Fundamentals	None
2	October 2, 2024	Encryption	The Double Ratchet Algorithm. Moxie Marlinspike. A Cryptographic File System for Unix. Matt Blaze. CCS 1993.
	October 3, 2024		Paper presentation sign-ups are due at 11:59 PM (see Piazza for instructions).
3	October 7, 2024	Integrity	SiRiUS: Secure Remote Untrusted Storage. Eu-Jin Goh, Hovav Shacham, Nagendra Madadugu, and Dan Boneh. NDSS 2003. Secure Untrusted Data Repository (SUNDR). Jinyuan Li, Maxwell Krohn, David Mazières, and Dennis Shasha. OSDI 2004.
4	October 9, 2024	Transparency Logs	Certificate Transparency. Ben Laurie. CACM Vol. 57, No. 10. CONIKS: Bringing Key Transparency to End Users. Marcela S. Melara, Aaron Blankstein, Joseph Bonneau, Edward W. Felten, and Michael J. Freedman. USENIX Security 2015.
5	October 14, 2024	Anonymous Messaging	Tor: The Second-Generation Onion Router. Roger Dingledine, Nick Mathewson, and Paul Syverson. USENIX Security 2004. Dissent: Accountable Anonymous Group Messaging. Henry Corrigan-Gibbs and Bryan Ford. CCS 2010.
6	October 16, 2024	Computing on Encrypted Data	Class is held on Zoom (see Piazza for link). CryptDB: Protecting Confidentiality with Encrypted Query Processing. Raluca Ada Popa, Catherine M. S. Redfield, Nickolai Zeldovich, and Hari Balakrishnan. SOSP 2011.
7	October 21, 2024	Trusted Execution Environments	Shielding Applications from an Untrusted Cloud with Haven. Andrew Baumann, Marcus Peinado, and Galen Hunt. OSDI 2014. EnclaveDB: A Secure Database using SGX. Christian Priebe, Kapil Vaswani, and Manuel Costa. S&P 2018.
8	October 23, 2024	Metadata Leakage	Opaque: An Oblivious and Encrypted Distributed Analytics Platform. Wenting Zheng, Ankur Dave, Jethro G. Beekman, Raluca Ada Popa, Joseph E. Gonzalez, and Ion Stoica. NSDI 2017.
9	October 28, 2024	Oblivious RAM 1	Final project proposal is due before class. Path ORAM: An Extremely Simple Oblivious RAM Protocol. Emil Stefanov, Marten van Dijk, Elaine Shi, Christopher Fletcher, Ling Ren, Xiangyao Yu, and Srinivas Devadas. CCS 2013 ObliviStore: High Performance Oblivious Cloud Storage. Emil Stefanov and Elaine Shi. S&P 2013.
10	October 30, 2024	Oblivious RAM 2	Obladi: Oblivious Serializable Transactions in the Cloud. Natacha Crooks, Matthew Burke, Ethan Cecchetti, Sitar Harel, Rachit Agarwal, and Lorenzo Alvisi. OSDI 2018.
11	November 4, 2024	Private Information Retrieval	One Server for the Price of Two: Simple and Fast Single-Server Private Information Retrieval. Alexandra Henzinger, Matthew M. Hong, Henry Corrigan-Gibbs, Sarah Meiklejohn, and Vinod Vaikuntanathan. USENIX Security 2023. Coeus: A System for Oblivious Document Ranking and Retrieval. Ishtiyaque Ahmad, Laboni Sarker, Divyakant Agrawal, Amr El Abbadi, and Trinabh Gupta. SOSP 2021.
12	November 6, 2024	Cryptographic Anonymous Messaging	Unobservable Communication over Fully Untrusted Infrastructure. Sebastian Angel and Srinath Setty. OSDI 2016.
	November 11, 2024		No class today (Veterans Day).
13	November 13, 2024	Differential Privacy	Privacy Accounting and Quality Control in the Sage Differentially Private ML Platform. Mathias Lécuyer, Riley Spahn, Kiran Vodrahalli, Roxana Geambasu, and Daniel Hsu. S&P 2019.
14	November 18, 2024	Secure Multi-Party Computation (SMPC)	A Gentle Introduction to Yao's Garbled Circuits. Sophia Yakoubov. What is SPDZ? Part 1, Part 2, and Part 3. Bristol Cryptography Blog. [SECTION 6.6 ONLY] A Pragmatic Introduction to Secure Multi-Party Computation. David Evans, Vladimir Kolesnikov, and Mike Rosulek.
15	November 20, 2024	Systems Aspects of SMPC	Conclave: secure multi-party computation on big data. Nikolaj Volgushev, Malte Schwarzkopf, Ben Getchell, Mayank Varia, Andrei Lapets, and Azer Bestavros. EuroSys 2019.
16	November 25, 2024	Specialized SMPC and Distributed Trust	SecureML: A System for Scalable Privacy-Preserving Machine Learning. Payman Mohassel and Yupeng Zhang. S&P 2017.
17	November 27, 2024	Zero-Knowledge Proofs	Zero-Knowledge Middleboxes. Paul Grubbs, Arasu Arun, Ye Zhang, Joseph Bonneau, and Michael Walfish. USENIX Security 2022. Combining Machine Learning and Homomorphic Encryption in the Apple Ecosystem. Apple Machine Learning Research. Technology preview: Private contact discovery for Signal. Moxie Marlinspike. Building the next generation of digital advertising with MPC. James Reyes. RWC 2022. [OPTIONAL] On Deploying Secure Computing: Private Intersection-Sum-with-Cardinality. Mihaela Ion, Ben Kreuter, Ahmet Erhan Nergiz, Sarvar Patel, Shobhit Saxena, Karn Seth, Mariana Raykova, David Shanahan, and Moti Yung. EuroS&P 2020.
18	December 2, 2024	Project Presentations 1 and Course Conclusion	None
19	December 4, 2024	Project Presentations 2	None
	December 11, 2024		Final project is due at 11:59 PM.