Hugo Krawczyk

Hugo Mario Krawczyk is an Argentine-Israeli cryptographer best known for co-inventing the HMAC message authentication algorithm and contributing in fundamental ways to the cryptographic architecture of central Internet standards, including IPsec, IKE, and SSL/TLS. In particular, both IKEv2 and TLS 1.3 use Krawczyk's SIGMA protocol^[1] as the cryptographic core of their key exchange procedures. He has also contributed foundational work in the areas of threshold and proactive cryptosystems and searchable symmetric encryption, among others.

Krawczyk acquired a Bachelor of Arts in mathematics from the University of Haifa. Later he received his Master of Science and Ph.D. in computer science from Technion - Israel Institute of Technology with Oded Goldreich as doctoral thesis advisor.

Hugo Krawczyk is a senior principal scientist at Amazon Web Services (AWS). Between 2019 and 2023 he was a Principal Researcher at the Algorand Foundation and part of its founding team. Prior to that, he was an IBM Fellow and Distinguished Research Staff Member at the IBM T.J. Watson Research Center in New York as a member of the Cryptography Research group from 1992 to 1997, and again from 2004 to 2019. He was an associate professor at the Department of Electrical Engineering at the Technion in Israel from 1997 until 2004.

Krawczyk has published over 100 papers with more than 35,000 citations, and is an inventor in 30 issued patents.

His research includes both theoretical and applied elements of cryptography, with a focus on internet security, privacy, and authentication. His most recent projects in the area include: TLS 1.3, the new-generation SSL/TLS; HKDF, the standard for key derivation embraced by TLS 1.3, Signal, WhatsApp, Facebook Messenger, and others; and OPAQUE, a password authentication protocol being standardized by the IRTF and recently deployed by Facebook in its implementation of end-to-end encrypted chat backups for WhatsApp.^[2]

Krawczyk es autor de muchos otros algoritmos y protocolos criptográficos, entre ellos el protocolo de intercambio de claves HMQV , el algoritmo de hash Toeplitz basado en LFSR , el esquema de cifrado Shrinking Generator , el código de autenticación de mensajes UMAC y el esquema de hash aleatorio para fortalecer las firmas digitales.

Otros trabajos influyentes incluyen criptosistemas de umbral y proactivos (incluida la generación distribuida de claves ), cifrado simétrico con capacidad de búsqueda y contribuciones teóricas a las comunicaciones criptográficas seguras, protocolos de contraseñas, conocimiento cero y pseudoaleatoriedad.

Krawczyk, miembro de la Asociación Internacional de Investigación Criptológica (IACR) y miembro de IBM en 2017 , ha ganado el Premio de la Conferencia RSA a la Excelencia en Matemáticas en 2015, el Premio Levchin ^{[ 3 ]} por Contribuciones a la Criptografía del Mundo Real en 2018, el Premio ACM Paris Kanellakis de Teoría y Práctica en 2025, ^{[ 4 ]} y dos premios corporativos de IBM (2005 y 2008). Es receptor de dos premios Test-of-Time: En 2019 por su artículo de NDSS de 1996, ^{[ 5 ]} “SKEME: Un mecanismo versátil de intercambio seguro de claves para Internet”, un precursor de los protocolos de intercambio de claves basados ​​en KEM, fundamental para el desarrollo de estándares de intercambio de claves post-cuánticos, y en 2025 por su artículo de CRYPTO 2010 “Extracción criptográfica y derivación de claves: El esquema HKDF” “por formalizar la derivación de claves e introducir HKDF, un esquema de extracción y expansión ampliamente adoptado y estandarizado”. ^{[ 6 ]}

• Google scholar
• DBLP
• Research Gate