Balloon: A Forward-Secure Append-Only Persistent Authenticated Data Structure
Open accessThe claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cites
A Digital Signature Scheme Secure Against Adaptive Chosen-Message Attacks
Goldwasser, S., Micali, S. M., & Rivest, R. L. (1988) · SIAM Journal on Computing · doi:10.1137/0217017 · Cited by 2,803 · see citing works
A Digital Signature Based on a Conventional Encryption Function
Merkle, R. C. (1988) · Lecture Notes in Computer Science · doi:10.1007/3-540-48184-2_32 · Cited by 1,998 · see citing works
Merkle, R. C. (2007) · Springer eBooks · doi:10.1007/0-387-34805-0_21 · Cited by 1,706 · see citing works
Keying Hash Functions for Message Authentication
Mihir Bellare, Y., Canetti, R., & Krawczyk, H. (1996) · Lecture notes in computer science · doi:10.1007/3-540-68697-5_1 · Cited by 1,601 · see citing works
Rogaway, P., & Shrimpton, T. (2004) · Lecture Notes in Computer Science · doi:10.1007/978-3-540-25937-4_24 · Cited by 614 · see citing works
Key agreement protocols and their security analysis
Blake-Wilson⋆⋆, S., Johnson, D. B., & Menezes, A. (1997) · Lecture notes in computer science · doi:10.1007/bfb0024447 · Cited by 595 · see citing works
High-speed high-security signatures
Bernstein, D. J., Duif, N., Lange, T., Schwabe, P., & Yang, B. (2012) · Journal of Cryptographic Engineering · doi:10.1007/s13389-012-0027-1 · Cited by 568 · see citing works
Certificate revocation and certificate update
Naor, M., & Kobbi Nissim, B. (2000) · IEEE Journal on Selected Areas in Communications · doi:10.1109/49.839932 · Cited by 495 · see citing works
Planar point location using persistent search trees
Sarnak, N., & Tarjan, R. E. (1986) · Communications of the ACM · doi:10.1145/6138.6151 · Cited by 482 · see citing works
Secure audit logs to support computer forensics
Schneier, B., & Kelsey, J. (1999) · ACM Transactions on Information and System Security · doi:10.1145/317087.317089 · Cited by 443 · see citing works
Forward-Security in Private-Key Cryptography
Mihir Bellare, Y., & Yee, B. (2003) · Lecture notes in computer science · doi:10.1007/3-540-36563-x_1 · Cited by 280 · see citing works
A General Model for Authenticated Data Structures
Martel, C. U., Nuckolls, G., Dévanbu, P., Gertz, M., Kwong, A., & Stubblebine, S. G. (2004) · Algorithmica · doi:10.1007/s00453-003-1076-8 · Cited by 209 · see citing works
Checking the correctness of memories
Blum, M., Evans, W., Gemmell, P. S., Kannan, S., & Naor, M. (1994) · Algorithmica · doi:10.1007/bf01185212 · Cited by 201 · see citing works
Tamassia, R. (2003) · Lecture notes in computer science · doi:10.1007/978-3-540-39658-1_2 · Cited by 197 · see citing works
Aragon, C., & Seidel, R. (1989) · Annual Symposium on Foundations of Computer Science · doi:10.1109/sfcs.1989.63531 · Cited by 155 · see citing works
Optimal Verification of Operations on Dynamic Sets
Papamanthou, C., Tamassia, R., & Triandopoulos, N. (2011) · Lecture notes in computer science · doi:10.1007/978-3-642-22792-9_6 · Cited by 143 · see citing works
Efficient data structures for tamper-evident logging
Crosby, S. A., & Wallach, D. S. (2009) · Cited by 139 · see citing works
Enhanced Certificate Transparency and End-to-End Encrypted Mail
Ryan, M. D. (2014) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2014.23379 · Cited by 139 · see citing works
Accountable key infrastructure (AKI)
Kim, T. H., Huang, L.-S., Perrig, A., Jackson, C., & Gligor, V. D. (2013) · International World Wide Web Conference (WWW) · doi:10.1145/2488388.2488448 · Cited by 131 · see citing works
Persistent Authenticated Dictionaries and Their Applications
Anagnostopoulos, A., Goodrich, M. T., & Tamassia, R. (2001) · Lecture notes in computer science · doi:10.1007/3-540-45439-x_26 · Cited by 115 · see citing works
Basin, D., Cremers, C. J. F., Kim, T. H., Perrig, A., Sasse, R., & Szałachowski, P. (2014) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/2660267.2660298 · Cited by 114 · see citing works
Extended Abstract: Forward-Secure Sequential Aggregate Authentication
Ma, D., & Tsudik, G. (2007) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp.2007.18 · Cited by 102 · see citing works
Authenticated data structures, generically
Miller, A. E., Hicks, M., Katz, J. I., & Shi, E. (2014) · ACM SIGPLAN-SIGACT Symposium on Principles of Programming Languages (POPL) · doi:10.1145/2535838.2535851 · Cited by 63 · see citing works
DTKI: A New Formalized PKI with Verifiable Trusted Parties
Yu, J., Cheval, V., & Ryan, M. D. (2016) · The Computer Journal · doi:10.1093/comjnl/bxw039 · Cited by 57 · see citing works
Authenticated data structures, generically
Miller, A. E., Hicks, M., Katz, J. I., & Shi, E. (2014) · ACM SIGPLAN Notices · doi:10.1145/2578855.2535851 · Cited by 39 · see citing works
Distributed privacy-preserving transparency logging
Pulls, T., Peeters, R., & Wouters, K. (2013) · ACM Workshop on Privacy in the Electronic Society (WPES) · doi:10.1145/2517840.2517847 · Cited by 38 · see citing works
Self-citationCrosby, S. A., & Wallach, D. S. (2011) · ACM Transactions on Information and System Security · doi:10.1145/2019599.2019602 · Cited by 36 · see citing works
Yavuz, A. A., Ning, P., & Reiter, M. K. (2012) · ACM Transactions on Information and System Security · doi:10.1145/2240276.2240280 · Cited by 35 · see citing works
Super-Efficient Aggregating History-Independent Persistent Authenticated Dictionaries
Crosby, S. A., & Wallach, D. S. (2009) · Lecture notes in computer science · doi:10.1007/978-3-642-04444-1_41 · Cited by 18 · see citing works
CONIKS: A Privacy-Preserving Consistent Key Service for Secure End-to-End Communication.
Melara, M. S., Blankstein, A., Bonneau, J., Freedman, M. J., & Felten, E. W. (2014) · Cited by 16 · see citing works
Primary-Secondary-Resolver Membership Proof Systems
Naor, M., & Ziv, A. (2015) · Lecture notes in computer science · doi:10.1007/978-3-662-46497-7_8 · Cited by 14 · see citing works
Efficient tamper-evident data structures for untrusted servers
Wallach, D. S., & Crosby, S. A. (2010) · Cited by 12 · see citing works
Hardware Strengthening a Distributed Logging Scheme
Vliegen, J., Wouters, K., Grahn, C., & Pulls, T. (2012) · Euromicro Conference on Digital System Design (DSD) · doi:10.1109/dsd.2012.69 · Cited by 5 · see citing works
Self-citation
Flagged first, then by citations
1 of the 34 references couldn’t be matched to a known paper.
Research works printed but not linked: 1
- Basin, D.A., Cremers, C.J.F., Kim, T.H., Perrig, A., Sasse, R., Szalachowski, P.: ARPKI: attack resilient public-key infrastructure. In: CCS. ACM (2014)
Cited by
Sorted by citations
Xu, J. F., Wei, L., Zhang, Y., Andi, W., Zhou, F., & Gao, C.-Z. (2018) · Journal of Network and Computer Applications · doi:10.1016/j.jnca.2018.01.014 · Cited by 156 · see citing works
Systematizing Decentralization and Privacy: Lessons from 15 Years of Research and Deployments
Troncoso, C., Isaakidis, M., Danezis, G., & Halpin, H. (2017) · Proceedings on Privacy Enhancing Technologies · doi:10.1515/popets-2017-0056 · Cited by 88 · see citing works
Custos: Practical Tamper-Evident Auditing of Operating Systems Using Trusted Execution
Paccagnella, R., Datta, P., Hassan, W. U., Bates, A., Fletcher, C. W., Miller, A. K., & Tian, D. J. (2020) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2020.24065 · Cited by 76 · see citing works
Dahlberg, R., Pulls, T., & Peeters, R. (2016) · Lecture notes in computer science · doi:10.1007/978-3-319-47560-8_13 · Cited by 61 · see citing works
Self-citationCertificate Transparency with Privacy
Eskandarian, S., Messeri, E., Bonneau, J., & Boneh, D. (2017) · Proceedings on Privacy Enhancing Technologies · doi:10.1515/popets-2017-0052 · Cited by 50 · see citing works
Logging to the Danger Zone: Race Condition Attacks and Defenses on System Audit Frameworks
Paccagnella, R., Liao, K., Tian, D. J., & Bates, A. (2020) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3372297.3417862 · Cited by 51 · see citing works
BCALS: Blockchain‐based secure log management system for cloud computing
Ali, A., Khan, A., Ahmed, M., & Jeon, G. (2021) · Transactions on Emerging Telecommunications Technologies · doi:10.1002/ett.4272 · Cited by 48 · see citing works
HARDLOG: Practical Tamper-Proof System Auditing Using a Novel Audit Device
Ahmad, A. M., Lee, S., & Peinado, M. (2022) · IEEE Symposium on Security and Privacy (S&P) · doi:10.1109/sp46214.2022.9833745 · Cited by 37 · see citing works
SealFS: Storage-based tamper-evident logging
Soriano, E., & Guardiola-Múzquiz, G. (2021) · Computers & Security · doi:10.1016/j.cose.2021.102325 · Cited by 31 · see citing works
Transparent Logging with Hyperledger Fabric
Schaefer, C., & Edman, C. (2019) · IEEE International Conference on Blockchain and Cryptocurrency (ICBC) · doi:10.1109/bloc.2019.8751339 · Cited by 21 · see citing works
Validating the Integrity of Audit Logs Against Execution Repartitioning Attacks
Yagemann, C., Noureddine, M. A., Hassan, W. U., Chung, S. P. H., Bates, A., & Lee, W. (2021) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/3460120.3484551 · Cited by 20 · see citing works
SealFSv2: combining storage-based and ratcheting for tamper-evident logging
Guardiola-Múzquiz, G., & Soriano, E. (2022) · International Journal of Information Security · doi:10.1007/s10207-022-00643-1 · Cited by 22 · see citing works
SCM: Secure and accountable TLS certificate management
Khan, S., Zhang, Z., Zhu, L., Rahim, M. A., Ahmad, S., & Chen, R. (2020) · International Journal of Communication Systems · doi:10.1002/dac.4503 · Cited by 13 · see citing works
Transparency Dictionaries with Succinct Proofs of Correct Operation
Tzialla, I., Kothapalli, A., Parno, B. J., & Setty, S. (2022) · Network and Distributed System Security Symposium · doi:10.14722/ndss.2022.23143 · Cited by 13 · see citing works
Insynd: Improved Privacy-Preserving Transparency Logging
Peeters, R., & Pulls, T. (2016) · Lecture notes in computer science · doi:10.1007/978-3-319-45741-3_7 · Cited by 12 · see citing works
Self-citationAudit Logs Management and Security - A Survey
Ali, A., Ahmed, M., & Khan, A. (2021) · Kuwait Journal of Science · doi:10.48129/kjs.v48i3.10624 · Cited by 11 · see citing works
Secure provenance using an authenticated data structure approach
Jamil, F., Khan, A., Anjum, A., Ahmed, M., Jabeen, F., & Javaid, N. (2017) · Computers & Security · doi:10.1016/j.cose.2017.10.005 · Cited by 10 · see citing works
Attack-Resilient TLS Certificate Transparency
Khan, S., Zhu, L., Zhang, Z., Rahim, M. A., Khan, K., & Li, M. (2020) · IEEE Access · doi:10.1109/access.2020.2996997 · Cited by 9 · see citing works
Think Global, Act Local: Gossip and Client Audits in Verifiable Data StructuresPreprint
Meiklejohn, S., Kalinnikov, P., Lin, C. S., Hutchinson, M., Belvin, G., Raykova, M., & Cutter, A. (2020) · arXiv (Cornell University) · doi:10.48550/arxiv.2011.04551 · Cited by 9 · see citing works
Efficient tamper-evident logging of distributed systems via concurrent authenticated tree
Ning, F., Wen, Y., Shi, G., & Meng, D. (2017) · IEEE International Performance, Computing, and Communications Conference · doi:10.1109/pccc.2017.8280476 · Cited by 6 · see citing works
Append-only Authenticated Data Sets based on RSA accumulators for transparent log system
Tong, Q., Yin, L., Liu, Y., & Xu, J. F. (2025) · Computer Standards & Interfaces · doi:10.1016/j.csi.2025.103978 · Cited by 4 · see citing works
Security and Privacy Preservation of Evidence in Cloud Accountability Audits
Rübsamen, T., Pulls, T., & Reich, C. (2016) · Communications in computer and information science · doi:10.1007/978-3-319-29582-4_6 · Cited by 3 · see citing works
Self-citationPreserving Privacy in Transparency Logging
Pulls, T. (2015) · KTH Publication Database DiVA (KTH Royal Institute of Technology) · Cited by 2 · see citing works
Self-citationSparse Merkle Trees: Definitions and Space-Time Trade-Offs with Applications for Balloon
Östersjö, R. (2016) · KTH Publication Database DiVA (KTH Royal Institute of Technology) · Cited by 2 · see citing works
Insynd: Privacy-Preserving Secure One-Way Messaging Using Balloons.Preprint
Pulls, T., & Peeters, R. (2015) · IACR Cryptology ePrint Archive · Cited by 2 · see citing works
Self-citationInsynd : Privacy-Preserving Transparency Logging Using Balloons
Pulls, T., & Peeters, R. (2015) · Cited by 1 · see citing works
Self-citationKratzke, N. (2018) · International Conference on Cloud Computing and Services Science · doi:10.5220/0006735604650472 · Cited by 1 · see citing works
Log refusion: adversarial attacks against the integrity of application logs and defense methods
Changhua, C. H. E. N., Hai, W. A. N., & Xibin, Z. H. A. O. (2024) · Scientia Sinica Informationis · doi:10.1360/ssi-2024-0042 · Cited by 1 · see citing works
Yagiz, M. A., Horasan, F., & Yurttakal, A. H. (2026) · arXiv · doi:10.48550/arxiv.2605.00065
“Pulls and Peeters (2015) introduced Balloon, an append-only authenticated structure with forward security.”
DPTracer: Integrating Log-Driven Accountability into Data Provision Networks
Lee, J. (2024) · Applied Sciences · doi:10.3390/app14188503
PubSubChk: Verifiable Message Delivery for Publish-Subscribe Systems
Andreotti, D., Veith, A. D. S., Theeten, B., & Hoste, L. (2026) · Lecture notes in computer science · doi:10.1007/978-3-032-38708-0_26
- Authors
- Pulls, T., & Peeters, R.
- Affiliations
- Karlstad University (SE)
- iMinds (BE)
- Corresponding author
- Pulls, Tobias
- Venue
- Lecture Notes in Computer Science
- Publisher
- Springer International Publishing
- Published
- 2015
- Pages
- 622-641
- ISSN
- 0302-9743 (ISSN-L)
- 1611-3349
- OpenAlex
- W2252980215
- Cited by
- 30
- References
- 34
- Citations by year
- 2026: 1 · 2025: 1 · 2024: 2 · 2022: 3 · 2021: 4 · 2020: 5 · 2019: 1 · 2018: 2 · 2017: 4 · 2016: 4 · 2015: 3
- FWCI
- 2.44
- Type
- conference paper
- Language
- en
- Open access
- green
- lirias.kuleuven.be
- Licence
- Locations
- Lecture notes in computer science (publishedVersion)
- Lirias (KU Leuven) (submittedVersion, other-oa)
- Funders
- KU Leuven
- Topics
- Physical Sciences › Computer Science › Artificial Intelligence › Cryptography and Data Security
- Physical Sciences › Computer Science › Information Systems › Cloud Data Security Solutions
- Physical Sciences › Computer Science › Computer Networks and Communications › Advanced Authentication Protocols Security
- Keywords
- forward security, authenticated data structures, membership proofs, snapshots, untrusted server, public verifiability, data integrity, formal security proofs
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review