The 4th BIU Winter School



JANUARY 27-30, 2014



The winter school will study symmetric encryption in theory and in practice. The school will include a study of the theoretical foundations of symmetric encryption on the one hand, and practical constructions and cryptanalysis on the other hand. These two topics will provide a broad basis for all participants. The school will then proceed to study advanced constructions like tweakable block ciphers, format preserving encryption, disk encryption and advanced types of authenticated encryption. Finally, the school will conclude with advanced and recent attacks on symmetric encryption in SSL/TLS, IPsec, SSH and more. The school program includes approximately 24 hours of lectures and a social dinner.

The target audience for the school is graduate students and postdocs in cryptography (we will assume that participants have taken at least one university-level course in cryptography). However, faculty, undergrads and professionals with the necessary background are all welcome. The winter school is open to participants from all over the world; all talks will be in English.


Click here to view photo gallery

Click here to view photo gallery




The entire winter school was filmed and can be viewed here.


Organizers: Yehuda Lindell and Benny PinkasDepartment of Computer ScienceBar Ilan University, Israel

Where: The winter school will take place in the Wohl Centre at Bar Ilan University in the Tel-Aviv area.

When: Monday January 27, 2014 to Thursday January 30, 2014

Registration: Participation is free, but registration is required. Registration includes school participation, lunch and refreshment, a social event, and transportation to and from the school hotel. (Accommodation is not included). Please register by December 15, 2013 by sending email to

Hotel: We have arranged a special rate at the Leonardo Boutique Hotel, in Ramat Hahayal, Tel Aviv. There are restaurants in the area of the hotel, and there will also be transportation to the center of Tel Aviv in the evening. In addition, we provide transportation to and from the Winter School location. The rate is $165 a night for a single room and $185 a night for a double room (with two occupants). The rate includes breakfast.

Support: A small number of stipends of $800 each (for flight and accommodation) will be awarded for overseas students needing support. The deadline for stipend application is December 1, 2013. Please have your advisor send a letter justifying the need for financial support.

Sponsorship: This winter school is graciously sponsored by the European Research Council under the European UnionÍs Seventh Framework Programme (FP/2007-2013) / ERC Grant Agreement n. 239868 (LAST), the European Union Seventh Framework Programme (FP7/2007-2013) under grant agreement n. 609611 (PRACTICE), Bar-Ilan University, and the Check Point Institute for Information Security.



Program Schedule: The detailed schedule for the winter school can be downloaded here.

The entire winter school was filmed and can be viewed here.


Monday, January 27: Theoretical Foundations
Lecturers: Benny Applebaum and Iftach Haitner

  • One-way functions and hard-core predicates (Goldreich-Levin) (slides and video)
  • Pseudorandom generators (definitions and constructions; the hybrid method) (slides and video)
  • Pseudorandom functions and permutations (definitions and constructions) (slides)
  • Symmetric encryption and MACs (definitions and constructions) (slides and video)

Tuesday, January 28: Cryptanalysis
Lecturers: Eli Biham and Orr Dunkelman

  • Generic cryptanalytic techniques (slides and video)
  • Differential cryptanalysis (slidesfigures)
  • Cryptanalysis of hash functions (slides and video)
  • Cryptanalysis of triple modes of operation and related-key attacks (slides and video)

Wednesday, January 29: Encryption Modes and Attacks
Lecturer: Kenny Paterson (slides)

  • Introduction: secure channels, generic composition, basic attacks (video)
  • Symmetric encryption in IPsec and ASP.NET: the perils of unauthenticated encryption (video)
  • Symmetric encryption in TLS and DTLS: BEAST, Lucky13 and RC4 attacks; security proofs for TLS (video)
  • Symmetric encryption in SSH: attacks and new security models for fragmented decryption (video)

Thursday, January 30: Advanced Symmetric Schemes
Lecturer: Thomas Ristenpart (slides)

  • Tweakable PRP ad PRFs, shuffling constructions (video)
  • Format-preserving encryption and special cases: disk sector encryption (video)
  • Authenticated encryption: generic composition (video)
  • Misuse-resistant AE / deterministic AE (video)
Posted by