Operational Semantics of Security Protocols. - Cas Cremers; Sjouke Mauw (Scenarios: Models, Transformations and Tools, 2003)

Checking Secrecy by Means of Partial Order Reduction. - Cas J. F. Cremers; Sjouke Mauw (SAM, 2004)

Compositionality of Security Protocols: A Research Agenda. - Cas Cremers (VODCA@FOSAD, 2004)

A Syntactic Criterion for Injectivity of Authentication Protocols. - Cas J. F. Cremers; Sjouke Mauw; Erik P. de Vink (ARSPA@ICALP, 2005)

Preface. - Sjouke Mauw; Valérie Issarny; Cas Cremers (STM, 2005)

Feasibility of Multi-Protocol Attacks. - Cas Cremers (ARES, 2006)

Injective synchronisation: An extension of the authentication hierarchy. - Cas J. F. Cremers; Sjouke Mauw; Erik P. de Vink (Theor. Comput. Sci., 2006)

Complete Characterization of Security Protocols by Pattern Refinement. - Cas Cremers (Formal Protocol Verification Applied, 2007)

The Scyther Tool: Verification, Falsification, and Analysis of Security Protocols. - Cas J. F. Cremers (CAV, 2008)

On the protocol composition logic PCL. - Cas Cremers (AsiaCCS, 2008)

Unbounded verification, falsification, and characterization of security protocols by pattern refinement. - Cas J. F. Cremers (CCS, 2008)

Session-state Reveal is stronger than Ephemeral Key Reveal: Attacking the NAXOS Authenticated Key Exchange protocol. - Cas J. F. Cremers (IACR Cryptol. ePrint Arch., 2008)

A framework for compositional verification of security protocols. - Suzana Andova; Cas Cremers; Kristian Gjøsteen; Sjouke Mauw; Stig Fr. Mjølsnes; Sasa Radomirovic (Inf. Comput., 2008)

Comparing State Spaces in Automatic Security Protocol Analysis. - Cas J. F. Cremers; Pascal Lafourcade 001; Philippe Nadeau (Formal to Practical Security, 2009)

From Dolev-Yao to Strong Adaptive Corruption: Analyzing Security in the Presence of Compromising Adversaries. - David A. Basin; Cas Cremers (IACR Cryptol. ePrint Arch., 2009)

Formally and Practically Relating the CK, CK-HMQV, and eCK Security Models for Authenticated Key Exchange. - Cas J. F. Cremers (IACR Cryptol. ePrint Arch., 2009)

Keeping data secret under full compromise using porter devices. - Christina Pöpper; David A. Basin; Srdjan Capkun; Cas Cremers (ACSAC, 2010)

Strong Invariants for the Efficient Construction of Machine-Checked Protocol Security Proofs. - Simon Meier; Cas Cremers; David A. Basin (CSF, 2010)

Degrees of Security: Protocol Guarantees in the Face of Compromising Adversaries. - David A. Basin; Cas Cremers (CSL, 2010)

Modeling and Analyzing Security in the Presence of Compromising Adversaries. - David A. Basin; Cas Cremers (ESORICS, 2010)

Session-StateReveal is stronger than eCKs EphemeralKeyReveal: using automatic analysis to attack the NAXOS protocol. - Cas J. F. Cremers (Int. J. Appl. Cryptogr., 2010)

Examining indistinguishability-based security models for key exchange protocols: the case of CK, CK-HMQV, and eCK. - Cas Cremers (AsiaCCS, 2011)

Key Exchange in IPsec Revisited: Formal Analysis of IKEv1 and IKEv2. - Cas Cremers (ESORICS, 2011)

One-round Strongly Secure Key Exchange with Perfect Forward Secrecy and Deniability. - Cas Cremers; Michèle Feltz (IACR Cryptol. ePrint Arch., 2011)

Distance Hijacking Attacks on Distance Bounding Protocols. - Cas Cremers; Kasper Bonne Rasmussen; Srdjan Capkun (IACR Cryptol. ePrint Arch., 2011)

Operational Semantics and Verification of Security Protocols - Cas Cremers; Sjouke Mauw (Springer, 2012)

Automated Analysis of Diffie-Hellman Protocols and Advanced Security Properties. - Benedikt Schmidt 002; Simon Meier; Cas Cremers; David A. Basin (CSF, 2012)

Distance Hijacking Attacks on Distance Bounding Protocols. - Cas Cremers; Kasper Bonne Rasmussen; Benedikt Schmidt 002; Srdjan Capkun (IEEE Symposium on Security and Privacy, 2012)

The TAMARIN Prover for the Symbolic Analysis of Security Protocols. - Simon Meier; Benedikt Schmidt 002; Cas Cremers; David A. Basin (CAV, 2013)

ASICS: Authenticated Key Exchange Security Incorporating Certification Systems. - Colin Boyd; Cas Cremers; Michèle Feltz; Kenneth G. Paterson; Bertram Poettering; Douglas Stebila (IACR Cryptol. ePrint Arch., 2013)

Provably repairing the ISO/IEC 9798 standard for entity authentication. - David A. Basin; Cas Cremers; Simon Meier (J. Comput. Secur., 2013)

Efficient construction of machine-checked symbolic protocol security proofs. - Simon Meier; Cas Cremers; David A. Basin (J. Comput. Secur., 2013)

ARPKI: Attack Resilient Public-Key Infrastructure. - David A. Basin; Cas Cremers; Tiffany Hyun-Jin Kim; Adrian Perrig; Ralf Sasse; Pawel Szalachowski (CCS, 2014)

Actor Key Compromise: Consequences and Countermeasures. - David A. Basin; Cas Cremers; Marko Horvat 002 (CSF, 2014)

Automated Verification of Group Key Agreement Protocols. - Benedikt Schmidt 002; Ralf Sasse; Cas Cremers; David A. Basin (IEEE Symposium on Security and Privacy, 2014)

On the Limits of Authenticated Key Exchange Security with an Application to Bad Randomness. - Michèle Feltz; Cas Cremers (IACR Cryptol. ePrint Arch., 2014)

Know Your Enemy: Compromising Adversaries in Protocol Analysis. - David A. Basin; Cas Cremers (ACM Trans. Inf. Syst. Secur., 2014)

Experiences in Developing and Delivering a Programme of Part-Time Education in Software and Systems Security. - Andrew C. Simpson; Andrew P. Martin; Cas Cremers; Ivan Flechais; Ivan Martinovic; Kasper Bonne Rasmussen (ICSE (2), 2015)

Beyond eCK: perfect forward secrecy under actor compromise and ephemeral-key reveal. - Cas Cremers; Michèle Feltz (Des. Codes Cryptogr., 2015)

How to detect unauthorised usage of a key. - Jiangshan Yu; Mark Ryan 001; Cas Cremers (IACR Cryptol. ePrint Arch., 2015)

Improving the Security of Cryptographic Protocol Standards. - David A. Basin; Cas Cremers; Kunihiko Miyazaki; Sasa Radomirovic; Dai Watanabe (IEEE Secur. Priv., 2015)

On Bitcoin Security in the Presence of Broken Cryptographic Primitives. - Ilias Giechaskiel; Cas Cremers; Kasper Bonne Rasmussen (ESORICS (2), 2016)

Symmetric polynomial & CRT based algorithms for multiple frequency determination from undersampled waveforms. - Hanshen Xiao; Cas Cremers; Hari Krishna Garg (GlobalSIP, 2016)

Automated Analysis and Verification of TLS 1.3: 0-RTT, Resumption and Delayed Authentication. - Cas Cremers; Marko Horvat 002; Sam Scott; Thyla van der Merwe (IEEE Symposium on Security and Privacy, 2016)

On Post-Compromise Security. - Katriel Cohn-Gordon; Cas Cremers; Luke Garratt (IACR Cryptol. ePrint Arch., 2016)

On Bitcoin Security in the Presence of Broken Crypto Primitives. - Ilias Giechaskiel; Cas Cremers; Kasper Bonne Rasmussen (IACR Cryptol. ePrint Arch., 2016)

Improving the ISO/IEC 11770 standard for key management techniques. - Cas Cremers; Marko Horvat 002 (Int. J. Inf. Sec., 2016)

A Comprehensive Symbolic Analysis of TLS 1.3. - Cas Cremers; Marko Horvat 002; Jonathan Hoyland; Sam Scott; Thyla van der Merwe (CCS, 2017)

Symbolic security analysis using the Tamarin prover. - Cas Cremers (FMCAD, 2017)

Improving Automated Symbolic Analysis for E-voting Protocols: A Method Based on Sufficient Conditions for Ballot Secrecy. - Cas Cremers; Lucca Hirschi (CoRR, 2017)

Mind the Gap: Where Provable Security and Real-World Messaging Don't Quite Meet. - Katriel Cohn-Gordon; Cas Cremers (IACR Cryptol. ePrint Arch., 2017)

On Ends-to-Ends Encryption: Asynchronous Group Messaging with Strong Security Guarantees. - Katriel Cohn-Gordon; Cas Cremers; Luke Garratt; Jon Millican; Kevin Milner (IACR Cryptol. ePrint Arch., 2017)

Automatically Detecting the Misuse of Secrets: Foundations, Design Principles, and Applications. - Kevin Milner; Cas Cremers; Jiangshan Yu; Mark Ryan 001 (IACR Cryptol. ePrint Arch., 2017)

Symbolically analyzing security protocols using tamarin. - David A. Basin; Cas Cremers; Jannik Dreier; Ralf Sasse (ACM SIGLOG News, 2017)

Strengthening the security of authenticated key exchange against bad randomness. - Michèle Feltz; Cas Cremers (Des. Codes Cryptogr., 2018)

Security Analysis for Randomness Improvements for Security Protocols. - Liliya R. Akhmetzyanova; Cas Cremers; Luke Garratt; Stanislav V. Smyshlyaev (IACR Cryptol. ePrint Arch., 2018)

When the Crypto in Cryptocurrencies Breaks: Bitcoin Security under Broken Primitives. - Ilias Giechaskiel; Cas Cremers; Kasper Bonne Rasmussen (IEEE Secur. Priv., 2018)

Abstractions for security protocol verification. - Thanh Binh Nguyen 003; Christoph Sprenger 001; Cas Cremers (J. Comput. Secur., 2018)

Design, Analysis, and Implementation of ARPKI: An Attack-Resilient Public-Key Infrastructure. - David A. Basin; Cas Cremers; Tiffany Hyun-Jin Kim; Adrian Perrig; Ralf Sasse; Pawel Szalachowski (IEEE Trans. Dependable Secur. Comput., 2018)

DECIM: Detecting Endpoint Compromise In Messaging. - Jiangshan Yu; Mark Ryan 001; Cas Cremers (IEEE Trans. Inf. Forensics Secur., 2018)

Model Checking Security Protocols. - David A. Basin; Cas Cremers; Catherine Meadows 001 (Handbook of Model Checking, 2018)

Highly Efficient Key Exchange Protocols with Optimal Tightness. - Katriel Cohn-Gordon; Cas Cremers; Kristian Gjøsteen; Håkon Jacobsen; Tibor Jager (CRYPTO (3), 2019)

Improving Automated Symbolic Analysis of Ballot Secrecy for E-Voting Protocols: A Method Based on Sufficient Conditions. - Lucca Hirschi; Cas Cremers (EuroS&P, 2019)

Component-Based Formal Analysis of 5G-AKA: Channel Assumptions and Session Confusion. - Cas Cremers; Martin Dehnel-Wild (NDSS, 2019)

SoK: Computer-Aided Cryptography. - Manuel Barbosa; Gilles Barthe; Karthikeyan Bhargavan; Bruno Blanchet; Cas Cremers; Kevin Liao; Bryan Parno (IACR Cryptol. ePrint Arch., 2019)

Highly Efficient Key Exchange Protocols with Optimal Tightness - Enabling real-world deployments with theoretically sound parameters. - Katriel Cohn-Gordon; Cas Cremers; Kristian Gjøsteen; Håkon Jacobsen; Tibor Jager (IACR Cryptol. ePrint Arch., 2019)

Revisiting Post-Compromise Security Guarantees in Group Messaging. - Cas Cremers; Britta Hale; Konrad Kohbrok (IACR Cryptol. ePrint Arch., 2019)

Prime, Order Please! Revisiting Small Subgroup and Invalid Curve Attacks on Protocols using Diffie-Hellman. - Cas Cremers; Dennis Jackson (IACR Cryptol. ePrint Arch., 2019)

Seems Legit: Automated Analysis of Subtle Attacks on Protocols that Use Signatures. - Dennis Jackson; Cas Cremers; Katriel Cohn-Gordon; Ralf Sasse (IACR Cryptol. ePrint Arch., 2019)

Secure authentication in the grid: A formal analysis of DNP3 SAv5. - Cas Cremers; Martin Dehnel-Wild; Kevin Milner (J. Comput. Secur., 2019)

Clone Detection in Secure Messaging: Improving Post-Compromise Security in Practice. - Cas Cremers; Jaiden Fairoze; Benjamin Kiesl; Aurora Naska (CCS, 2020)

Limiting the impact of unreliable randomness in deployed security protocols. - Liliya R. Akhmetzyanova; Cas Cremers; Luke Garratt; Stanislav Smyshlyaev; Nick Sullivan (CSF, 2020)

A Formal Analysis of IEEE 802.11's WPA2: Countering the Kracks Caused by Cracking the Counters. - Cas Cremers; Benjamin Kiesl; Niklas Medinger (USENIX Security Symposium, 2020)

Decentralized Privacy-Preserving Proximity Tracing. - Carmela Troncoso; Mathias Payer; Jean-Pierre Hubaux; Marcel Salathé; James R. Larus; Edouard Bugnion; Wouter Lueks; Theresa Stadler; Apostolos Pyrgelis; Daniele Antonioli; Ludovic Barman; Sylvain Chatel; et al. (CoRR, 2020)

Decentralized Privacy-Preserving Proximity Tracing. - Carmela Troncoso; Mathias Payer; Jean-Pierre Hubaux; Marcel Salathé; James R. Larus; Wouter Lueks; Theresa Stadler; Apostolos Pyrgelis; Daniele Antonioli; Ludovic Barman; Sylvain Chatel; Kenneth G. Paterson; et al. (IEEE Data Eng. Bull., 2020)

The Provable Security of Ed25519: Theory and Practice. - Jacqueline Brendel; Cas Cremers; Dennis Jackson; Mang Zhao (IACR Cryptol. ePrint Arch., 2020)

BUFFing signature schemes beyond unforgeability and the case of post-quantum signatures. - Cas Cremers; Samed Düzlü; Rune Fiedler; Marc Fischlin; Christian Janson (IACR Cryptol. ePrint Arch., 2020)

A Formal Security Analysis of the Signal Messaging Protocol. - Katriel Cohn-Gordon; Cas Cremers; Benjamin Dowling; Luke Garratt; Douglas Stebila (J. Cryptol., 2020)

Randomness Improvements for Security Protocols. - Cas Cremers; Luke Garratt; Stanislav Smyshlyaev; Nick Sullivan; Christopher A. Wood (RFC, 2020)

The Complexities of Healing in Secure Group Messaging: Why Cross-Group Effects Matter. - Cas Cremers; Britta Hale; Konrad Kohbrok (USENIX Security Symposium, 2021)

CHIP and CRISP: Protecting All Parties Against Compromise Through Identity-Binding PAKEs. - Cas Cremers; Moni Naor; Shahar Paz; Eyal Ronen (CRYPTO (2), 2022)

Deploying decentralized, privacy-preserving proximity tracing. - Carmela Troncoso; Dan Bogdanov; Edouard Bugnion; Sylvain Chatel; Cas Cremers; Seda F. Gürses; Jean-Pierre Hubaux; Dennis Jackson; James R. Larus; Wouter Lueks; Rui Oliveira 001; Mathias Payer; et al. (Commun. ACM, 2022)

FIDO2, CTAP 2.1, and WebAuthn 2: Provable Security and Post-Quantum Instantiation. - Nina Bindel; Cas Cremers; Mang Zhao (IACR Cryptol. ePrint Arch., 2022)

Hash Gone Bad: Automated discovery of protocol attacks that exploit hash function weaknesses. - Vincent Cheval; Cas Cremers; Alexander Dax; Lucca Hirschi; Charlie Jacomme; Steve Kremer (IACR Cryptol. ePrint Arch., 2022)

Formal Analysis of SPDM: Security Protocol and Data Model version 1.2. - Cas Cremers; Alexander Dax; Aurora Naska (IACR Cryptol. ePrint Arch., 2022)

A Logic and an Interactive Prover for the Computational Post-Quantum Security of Protocols. - Cas Cremers; Caroline Fontaine; Charlie Jacomme (IACR Cryptol. ePrint Arch., 2022)

Subterm-based proof techniques for improving the automation and scope of security protocol analysis. - Cas Cremers; Charlie Jacomme; Philip Lukert (IACR Cryptol. ePrint Arch., 2022)

Formal Analysis of Session-Handling in Secure Messaging: Lifting Security from Sessions to Conversations. - Cas Cremers; Charlie Jacomme; Aurora Naska (IACR Cryptol. ePrint Arch., 2022)

TokenWeaver: Privacy Preserving and Post-Compromise Secure Attestation. - Cas Cremers; Charlie Jacomme; Eyal Ronen (IACR Cryptol. ePrint Arch., 2022)

Provably Post-Quantum Secure Messaging with Strong Compromise Resilience and Immediate Decryption. - Cas Cremers; Mang Zhao (IACR Cryptol. ePrint Arch., 2022)

Tamarin: Verification of Large-Scale, Real-World, Cryptographic Protocols. - David A. Basin; Cas Cremers; Jannik Dreier; Ralf Sasse (IEEE Secur. Priv., 2022)

Automated Analysis of Protocols that use Authenticated Encryption: How Subtle AEAD Differences can impact Protocol Security. - Cas Cremers; Alexander Dax; Charlie Jacomme; Mang Zhao (IACR Cryptol. ePrint Arch., 2023)

Keeping Up with the KEMs: Stronger Security Notions for KEMs. - Cas Cremers; Alexander Dax; Niklas Medinger (IACR Cryptol. ePrint Arch., 2023)

A Holistic Security Analysis of Monero Transactions. - Cas Cremers; Julian Loss; Benedikt Wagner (IACR Cryptol. ePrint Arch., 2023)

Multi-Stage Group Key Distribution and PAKEs: Securing Zoom Groups against Malicious Servers without New Security Elements. - Cas Cremers; Eyal Ronen; Mang Zhao (IACR Cryptol. ePrint Arch., 2023)

Tamarin Prover 1.8.0. - David A. Basin; Cas Cremers; Jannik Dreier; Simon Meier; Sasse Sasse; Benedikt Schmidt 002 (Zenodo, 2023)

Keeping Up with the KEMs: Stronger Security Notions for KEMs and Automated Analysis of KEM-based Protocols. - Cas Cremers; Alexander Dax; Niklas Medinger (CCS, 2024)

Secure Messaging with Strong Compromise Resilience, Temporal Privacy, and Immediate Decryption. - Cas Cremers; Mang Zhao (SP, 2024)

Falsifiability, Composability, and Comparability of Game-based Security Models for Key Exchange Protocols. - Chris Brzuska; Cas Cremers; Håkon Jacobsen; Douglas Stebila; Bogdan Warinschi (IACR Cryptol. ePrint Arch., 2024)

Breaking and Provably Restoring Authentication: A Formal Analysis of SPDM 1.2 including Cross-Protocol Attacks. - Cas Cremers; Alexander Dax; Aurora Naska (IACR Cryptol. ePrint Arch., 2024)

Impossibility Results for Post-Compromise Security in Real-World Communication Systems. - Cas Cremers; Niklas Medinger; Aurora Naska (IACR Cryptol. ePrint Arch., 2024)

An Extended Hierarchy of Security Notions for Threshold Signature Schemes and Automated Analysis of Protocols That Use Them. - Cas Cremers; Aleksi Peltonen; Mang Zhao (IACR Cryptol. ePrint Arch., 2024)

A Spectral Analysis of Noise: A Comprehensive, Automated, Formal Analysis of Diffie-Hellman Protocols. - Guillaume Girol; Lucca Hirschi; Ralf Sasse; Dennis Jackson; Cas Cremers; David A. Basin (IACR Cryptol. ePrint Arch., 2024)

Tamarin Prover. - David A. Basin; Cas Cremers; Jannik Dreier; Simon Meier; Ralf Sasse; Benedikt Schmidt 002 (Zenodo, 2024)

Token Weaver: Privacy Preserving and Post-Compromise Secure Attestation. - Cas Cremers; Gal Horowitz; Charlie Jacomme; Eyal Ronen (SP, 2025)

ETK: External-Operations TreeKEM and the Security of MLS in RFC 9420. - Cas Cremers; Esra Günsay; Vera Wesselkamp; Mang Zhao (IACR Cryptol. ePrint Arch., 2025)

Modeling and Analyzing Security Protocols with Tamarin - A Comprehensive Guide - David A. Basin; Cas Cremers; Jannik Dreier; Ralf Sasse (Springer, 2026)