AES -- Improving Integral Attacks Against Rijndael-256 Up to 9 Rounds -- Implementation of the AES-128 on Virtex-5 FPGAs -- Analysis of RFID Protocols -- Weaknesses in a Recent Ultra-Lightweight RFID Authentication Protocol -- Differential Cryptanalysis of Reduced-Round PRESENT -- Invited Talk -- The Psychology of Security -- Cryptographic Protocols -- An (Almost) Constant-Effort Solution-Verification Proof-of-Work Protocol Based on Merkle Trees -- Robust Threshold Schemes Based on the Chinese Remainder Theorem -- An Authentication Protocol with Encrypted Biometric Data -- Authentication -- Authenticated Encryption Mode for Beyond the Birthday Bound Security -- Cryptanalysis of the TRMS Signature Scheme of PKC’05 -- Public-Key Cryptography -- New Definition of Density on Knapsack Cryptosystems -- Another Generalization of Wiener’s Attack on RSA -- An Adaptation of the NICE Cryptosystem to Real Quadratic Orders -- Pseudorandomness -- A Proof of Security in O(2 n ) for the Benes Scheme -- Analysis of Stream Ciphers -- Yet Another Attack on Vest -- Chosen IV Statistical Analysis for Key Recovery Attacks on Stream Ciphers -- Correlated Keystreams in Moustique -- Stream Ciphers Using a Random Update Function: Study of the Entropy of the Inner State -- Analysis of Grain’s Initialization Algorithm -- Hash Functions -- Password Recovery on Challenge and Response: Impossible Differential Attack on Hash Function -- How (Not) to Efficiently Dither Blockcipher-Based Hash Functions? -- Broadcast Encryption -- Attribute-Based Broadcast Encryption Scheme Made Efficient -- Lower Bounds for Subset Cover Based Broadcast Encryption -- Invited Talk -- A Brief History of Provably-Secure Public-Key Encryption -- Implementation -- On Compressible Pairings and Their Computation -- Twisted Edwards Curves -- Efficient Multiplication in , m???1 and 5???????18.