The Fiat-Shamir Zoo: Relating the Security of Different Signature Variants. - Matilda Backendal; Mihir Bellare; Jessica Sorrell; Jiahao Sun (IACR Cryptol. ePrint Arch., 2018)

Puncturable Key Wrapping and Its Applications. - Matilda Backendal; Felix Günther 001; Kenneth G. Paterson (IACR Cryptol. ePrint Arch., 2022)

MEGA: Malleable Encryption Goes Awry. - Matilda Backendal; Miro Haller; Kenneth G. Paterson (IACR Cryptol. ePrint Arch., 2022)

When Messages are Keys: Is HMAC a dual-PRF? - Matilda Backendal; Mihir Bellare; Felix Günther 001; Matteo Scarlata (IACR Cryptol. ePrint Arch., 2023)

Share with Care: Breaking E2EE in Nextcloud. - Martin R. Albrecht; Matilda Backendal; Daniele Coppola; Kenneth G. Paterson (IACR Cryptol. ePrint Arch., 2024)

A Formal Treatment of End-to-End Encrypted Cloud Storage. - Matilda Backendal; Hannah Davis; Felix Günther 001; Miro Haller; Kenneth G. Paterson (IACR Cryptol. ePrint Arch., 2024)

MFKDF: Multiple Factors Knocked Down Flat. - Matteo Scarlata; Matilda Backendal; Miro Haller (IACR Cryptol. ePrint Arch., 2024)

End-to-End Encrypted Cloud Storage. - Matilda Backendal; Miro Haller; Kenny Paterson (IEEE Secur. Priv., 2024)

Group Key Progression: Strong Security for Shared Persistent Data. - Matilda Backendal; David Balbás; Miro Haller (IACR Cryptol. ePrint Arch., 2025)

Key Derivation Functions Without a Grain of Salt. - Matilda Backendal; Sebastian Clermont; Marc Fischlin; Felix Günther 001 (IACR Cryptol. ePrint Arch., 2025)