End-to-End Encrypted Group Chats with MLS: Design, Implementation and Verification

MLS is a new IETF standard that deals with secure, end-to-end encrypted group messaging. In this work, recently awarded the Internet Defense Prize and a Distinguished Paper Award at USENIX, Théophile will describe how the protocol is structured; how it achieves security; and how our formal proof allowed to find flaws and shortcomings in MLS that eventually made it all the way up into the RFC. Our reference implementation, written in F*, is interoperable and can serve as a blueprint for other implementors; we also demonstrated its applicability by prototyping MLS in Skype.

Date:
Speakers:
Théophile Wallez