PKC 2017: Kenny Paterson accepting bets on breaking TLS 1.3
http://bristolcrypto.blogspot.com/2017/03/pkc-2017-kenny-paterson-accepting-bets.html [bristolcrypto.blogspot.com]
2017-03-30 02:30
The core part of TLS is the handshake protocol, which establishes the choice of ciphers and the session key. Kenny highlighted the high complexity stemming from the many choices (e.g., using a dedicated key exchange protocol or not) and the possible interaction with other protocols in TLS. Together with further weaknesses of the specification, this created the space for the many attacks we have seen.
PKC 2017: https://www.iacr.org/workshops/pkc2017/