The Provable Security of Ed25519: Theory and Practice. - Jacqueline Brendel; Cas Cremers; Dennis Jackson; Mang Zhao (IACR Cryptol. ePrint Arch., 2020)

FIDO2, CTAP 2.1, and WebAuthn 2: Provable Security and Post-Quantum Instantiation. - Nina Bindel; Cas Cremers; Mang Zhao (IACR Cryptol. ePrint Arch., 2022)

Provably Post-Quantum Secure Messaging with Strong Compromise Resilience and Immediate Decryption. - Cas Cremers; Mang Zhao (IACR Cryptol. ePrint Arch., 2022)

Automated Analysis of Protocols that use Authenticated Encryption: How Subtle AEAD Differences can impact Protocol Security. - Cas Cremers; Alexander Dax; Charlie Jacomme; Mang Zhao (IACR Cryptol. ePrint Arch., 2023)

Multi-Stage Group Key Distribution and PAKEs: Securing Zoom Groups against Malicious Servers without New Security Elements. - Cas Cremers; Eyal Ronen; Mang Zhao (IACR Cryptol. ePrint Arch., 2023)

Provable security and real-world protocols: theory and practice. - Mang Zhao (2023)

Secure Messaging with Strong Compromise Resilience, Temporal Privacy, and Immediate Decryption. - Cas Cremers; Mang Zhao (SP, 2024)

An Extended Hierarchy of Security Notions for Threshold Signature Schemes and Automated Analysis of Protocols That Use Them. - Cas Cremers; Aleksi Peltonen; Mang Zhao (IACR Cryptol. ePrint Arch., 2024)

ETK: External-Operations TreeKEM and the Security of MLS in RFC 9420. - Cas Cremers; Esra Günsay; Vera Wesselkamp; Mang Zhao (IACR Cryptol. ePrint Arch., 2025)