CINXE.COM

<!DOCTYPE html>   <html class="no-js" lang="en" dir="ltr">  <head> <script type="text/javascript" id="Cookiebot" src="https://consent.cookiebot.com/uc.js" data-cbid="694f6fb4-ca29-459f-a9b6-c1deccf2eaca" async="async"></script> <meta charset="utf-8" /><script type="text/javascript">(window.NREUM||(NREUM={})).init={ajax:{deny_list:["bam.nr-data.net"]}};(window.NREUM||(NREUM={})).loader_config={licenseKey:"d823139095",applicationID:"509444"};;/*! For license information please see nr-loader-rum-1.274.0.min.js.LICENSE.txt */ (()=>{var e,t,r={8122:(e,t,r)=>{"use strict";r.d(t,{a:()=>i});var n=r(944);function i(e,t){try{if(!e||"object"!=typeof e)return(0,n.R)(3);if(!t||"object"!=typeof t)return(0,n.R)(4);const r=Object.create(Object.getPrototypeOf(t),Object.getOwnPropertyDescriptors(t)),o=0===Object.keys(r).length?e:r;for(let a in o)if(void 0!==e[a])try{if(null===e[a]){r[a]=null;continue}Array.isArray(e[a])&&Array.isArray(t[a])?r[a]=Array.from(new Set([...e[a],...t[a]])):"object"==typeof e[a]&&"object"==typeof t[a]?r[a]=i(e[a],t[a]):r[a]=e[a]}catch(e){(0,n.R)(1,e)}return r}catch(e){(0,n.R)(2,e)}}},2555:(e,t,r)=>{"use strict";r.d(t,{Vp:()=>c,fn:()=>s,x1:()=>u});var n=r(384),i=r(8122);const o={beacon:n.NT.beacon,errorBeacon:n.NT.errorBeacon,licenseKey:void 0,applicationID:void 0,sa:void 0,queueTime:void 0,applicationTime:void 0,ttGuid:void 0,user:void 0,account:void 0,product:void 0,extra:void 0,jsAttributes:{},userAttributes:void 0,atts:void 0,transactionName:void 0,tNamePlain:void 0},a={};function s(e){try{const t=c(e);return!!t.licenseKey&&!!t.errorBeacon&&!!t.applicationID}catch(e){return!1}}function c(e){if(!e)throw new Error("All info objects require an agent identifier!");if(!a[e])throw new Error("Info for ".concat(e," was never set"));return a[e]}function u(e,t){if(!e)throw new Error("All info objects require an agent identifier!");a[e]=(0,i.a)(t,o);const r=(0,n.nY)(e);r&&(r.info=a[e])}},9417:(e,t,r)=>{"use strict";r.d(t,{D0:()=>g,gD:()=>h,xN:()=>p});var n=r(993);const i=e=>{if(!e||"string"!=typeof e)return!1;try{document.createDocumentFragment().querySelector(e)}catch{return!1}return!0};var o=r(2614),a=r(944),s=r(384),c=r(8122);const u="[data-nr-mask]",d=()=>{const e={mask_selector:"*",block_selector:"[data-nr-block]",mask_input_options:{color:!1,date:!1,"datetime-local":!1,email:!1,month:!1,number:!1,range:!1,search:!1,tel:!1,text:!1,time:!1,url:!1,week:!1,textarea:!1,select:!1,password:!0}};return{ajax:{deny_list:void 0,block_internal:!0,enabled:!0,harvestTimeSeconds:10,autoStart:!0},distributed_tracing:{enabled:void 0,exclude_newrelic_header:void 0,cors_use_newrelic_header:void 0,cors_use_tracecontext_headers:void 0,allowed_origins:void 0},feature_flags:[],generic_events:{enabled:!0,harvestTimeSeconds:30,autoStart:!0},harvest:{tooManyRequestsDelay:60},jserrors:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},logging:{enabled:!0,harvestTimeSeconds:10,autoStart:!0,level:n.p_.INFO},metrics:{enabled:!0,autoStart:!0},obfuscate:void 0,page_action:{enabled:!0},page_view_event:{enabled:!0,autoStart:!0},page_view_timing:{enabled:!0,harvestTimeSeconds:30,autoStart:!0},performance:{capture_marks:!1,capture_measures:!1},privacy:{cookies_enabled:!0},proxy:{assets:void 0,beacon:void 0},session:{expiresMs:o.wk,inactiveMs:o.BB},session_replay:{autoStart:!0,enabled:!1,harvestTimeSeconds:60,preload:!1,sampling_rate:10,error_sampling_rate:100,collect_fonts:!1,inline_images:!1,fix_stylesheets:!0,mask_all_inputs:!0,get mask_text_selector(){return e.mask_selector},set mask_text_selector(t){i(t)?e.mask_selector="".concat(t,",").concat(u):""===t||null===t?e.mask_selector=u:(0,a.R)(5,t)},get block_class(){return"nr-block"},get ignore_class(){return"nr-ignore"},get mask_text_class(){return"nr-mask"},get block_selector(){return e.block_selector},set block_selector(t){i(t)?e.block_selector+=",".concat(t):""!==t&&(0,a.R)(6,t)},get mask_input_options(){return e.mask_input_options},set mask_input_options(t){t&&"object"==typeof t?e.mask_input_options={...t,password:!0}:(0,a.R)(7,t)}},session_trace:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},soft_navigations:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},spa:{enabled:!0,harvestTimeSeconds:10,autoStart:!0},ssl:void 0,user_actions:{enabled:!0}}},l={},f="All configuration objects require an agent identifier!";function g(e){if(!e)throw new Error(f);if(!l[e])throw new Error("Configuration for ".concat(e," was never set"));return l[e]}function p(e,t){if(!e)throw new Error(f);l[e]=(0,c.a)(t,d());const r=(0,s.nY)(e);r&&(r.init=l[e])}function h(e,t){if(!e)throw new Error(f);var r=g(e);if(r){for(var n=t.split("."),i=0;i<n.length-1;i++)if("object"!=typeof(r=r[n[i]]))return;r=r[n[n.length-1]]}return r}},3371:(e,t,r)=>{"use strict";r.d(t,{V:()=>f,f:()=>l});var n=r(8122),i=r(384),o=r(6154),a=r(9324);let s=0;const c={buildEnv:a.F3,distMethod:a.Xs,version:a.xv,originTime:o.WN},u={customTransaction:void 0,disabled:!1,isolatedBacklog:!1,loaderType:void 0,maxBytes:3e4,onerror:void 0,ptid:void 0,releaseIds:{},appMetadata:{},session:void 0,denyList:void 0,timeKeeper:void 0,obfuscator:void 0},d={};function l(e){if(!e)throw new Error("All runtime objects require an agent identifier!");if(!d[e])throw new Error("Runtime for ".concat(e," was never set"));return d[e]}function f(e,t){if(!e)throw new Error("All runtime objects require an agent identifier!");d[e]={...(0,n.a)(t,u),...c},Object.hasOwnProperty.call(d[e],"harvestCount")||Object.defineProperty(d[e],"harvestCount",{get:()=>++s});const r=(0,i.nY)(e);r&&(r.runtime=d[e])}},9324:(e,t,r)=>{"use strict";r.d(t,{F3:()=>i,Xs:()=>o,xv:()=>n});const n="1.274.0",i="PROD",o="CDN"},6154:(e,t,r)=>{"use strict";r.d(t,{OF:()=>c,RI:()=>i,WN:()=>d,bv:()=>o,gm:()=>a,mw:()=>s,sb:()=>u});var n=r(1863);const i="undefined"!=typeof window&&!!window.document,o="undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self.navigator instanceof WorkerNavigator||"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis.navigator instanceof WorkerNavigator),a=i?window:"undefined"!=typeof WorkerGlobalScope&&("undefined"!=typeof self&&self instanceof WorkerGlobalScope&&self||"undefined"!=typeof globalThis&&globalThis instanceof WorkerGlobalScope&&globalThis),s=Boolean("hidden"===a?.document?.visibilityState),c=/iPad|iPhone|iPod/.test(a.navigator?.userAgent),u=c&&"undefined"==typeof SharedWorker,d=((()=>{const e=a.navigator?.userAgent?.match(/Firefox[/\s](\d+\.\d+)/);Array.isArray(e)&&e.length>=2&&e[1]})(),Date.now()-(0,n.t)())},1687:(e,t,r)=>{"use strict";r.d(t,{Ak:()=>c,Ze:()=>l,x3:()=>u});var n=r(7836),i=r(3606),o=r(860),a=r(2646);const s={};function c(e,t){const r={staged:!1,priority:o.P3[t]||0};d(e),s[e].get(t)||s[e].set(t,r)}function u(e,t){e&&s[e]&&(s[e].get(t)&&s[e].delete(t),g(e,t,!1),s[e].size&&f(e))}function d(e){if(!e)throw new Error("agentIdentifier required");s[e]||(s[e]=new Map)}function l(e="",t="feature",r=!1){if(d(e),!e||!s[e].get(t)||r)return g(e,t);s[e].get(t).staged=!0,f(e)}function f(e){const t=Array.from(s[e]);t.every((([e,t])=>t.staged))&&(t.sort(((e,t)=>e[1].priority-t[1].priority)),t.forEach((([t])=>{s[e].delete(t),g(e,t)})))}function g(e,t,r=!0){const o=e?n.ee.get(e):n.ee,s=i.i.handlers;if(!o.aborted&&o.backlog&&s){if(r){const e=o.backlog[t],r=s[t];if(r){for(let t=0;e&&t<e.length;++t)p(e[t],r);Object.entries(r).forEach((([e,t])=>{Object.values(t||{}).forEach((t=>{t[0]?.on&&t[0]?.context()instanceof a.y&&t[0].on(e,t[1])}))}))}}o.isolatedBacklog||delete s[t],o.backlog[t]=null,o.emit("drain-"+t,[])}}function p(e,t){var r=e[1];Object.values(t[r]||{}).forEach((t=>{var r=e[0];if(t[0]===r){var n=t[1],i=e[3],o=e[2];n.apply(i,o)}}))}},7836:(e,t,r)=>{"use strict";r.d(t,{P:()=>c,ee:()=>u});var n=r(384),i=r(8990),o=r(3371),a=r(2646),s=r(5607);const c="nr@context:".concat(s.W),u=function e(t,r){var n={},s={},d={},l=!1;try{l=16===r.length&&(0,o.f)(r).isolatedBacklog}catch(e){}var f={on:p,addEventListener:p,removeEventListener:function(e,t){var r=n[e];if(!r)return;for(var i=0;i<r.length;i++)r[i]===t&&r.splice(i,1)},emit:function(e,r,n,i,o){!1!==o&&(o=!0);if(u.aborted&&!i)return;t&&o&&t.emit(e,r,n);for(var a=g(n),c=h(e),d=c.length,l=0;l<d;l++)c[l].apply(a,r);var p=m()[s[e]];p&&p.push([f,e,r,a]);return a},get:v,listeners:h,context:g,buffer:function(e,t){const r=m();if(t=t||"feature",f.aborted)return;Object.entries(e||{}).forEach((([e,n])=>{s[n]=t,t in r||(r[t]=[])}))},abort:function(){f._aborted=!0,Object.keys(f.backlog).forEach((e=>{delete f.backlog[e]}))},isBuffering:function(e){return!!m()[s[e]]},debugId:r,backlog:l?{}:t&&"object"==typeof t.backlog?t.backlog:{},isolatedBacklog:l};return Object.defineProperty(f,"aborted",{get:()=>{let e=f._aborted||!1;return e||(t&&(e=t.aborted),e)}}),f;function g(e){return e&&e instanceof a.y?e:e?(0,i.I)(e,c,(()=>new a.y(c))):new a.y(c)}function p(e,t){n[e]=h(e).concat(t)}function h(e){return n[e]||[]}function v(t){return d[t]=d[t]||e(f,t)}function m(){return f.backlog}}(void 0,"globalEE"),d=(0,n.Zm)();d.ee||(d.ee=u)},2646:(e,t,r)=>{"use strict";r.d(t,{y:()=>n});class n{constructor(e){this.contextId=e}}},9908:(e,t,r)=>{"use strict";r.d(t,{d:()=>n,p:()=>i});var n=r(7836).ee.get("handle");function i(e,t,r,i,o){o?(o.buffer([e],i),o.emit(e,t,r)):(n.buffer([e],i),n.emit(e,t,r))}},3606:(e,t,r)=>{"use strict";r.d(t,{i:()=>o});var n=r(9908);o.on=a;var i=o.handlers={};function o(e,t,r,o){a(o||n.d,i,e,t,r)}function a(e,t,r,i,o){o||(o="feature"),e||(e=n.d);var a=t[o]=t[o]||{};(a[r]=a[r]||[]).push([e,i])}},3878:(e,t,r)=>{"use strict";function n(e,t){return{capture:e,passive:!1,signal:t}}function i(e,t,r=!1,i){window.addEventListener(e,t,n(r,i))}function o(e,t,r=!1,i){document.addEventListener(e,t,n(r,i))}r.d(t,{DD:()=>o,jT:()=>n,sp:()=>i})},5607:(e,t,r)=>{"use strict";r.d(t,{W:()=>n});const n=(0,r(9566).bz)()},9566:(e,t,r)=>{"use strict";r.d(t,{LA:()=>s,bz:()=>a});var n=r(6154);const i="xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx";function o(e,t){return e?15&e[t]:16*Math.random()|0}function a(){const e=n.gm?.crypto||n.gm?.msCrypto;let t,r=0;return e&&e.getRandomValues&&(t=e.getRandomValues(new Uint8Array(30))),i.split("").map((e=>"x"===e?o(t,r++).toString(16):"y"===e?(3&o()|8).toString(16):e)).join("")}function s(e){const t=n.gm?.crypto||n.gm?.msCrypto;let r,i=0;t&&t.getRandomValues&&(r=t.getRandomValues(new Uint8Array(e)));const a=[];for(var s=0;s<e;s++)a.push(o(r,i++).toString(16));return a.join("")}},2614:(e,t,r)=>{"use strict";r.d(t,{BB:()=>a,H3:()=>n,g:()=>u,iL:()=>c,tS:()=>s,uh:()=>i,wk:()=>o});const n="NRBA",i="SESSION",o=144e5,a=18e5,s={STARTED:"session-started",PAUSE:"session-pause",RESET:"session-reset",RESUME:"session-resume",UPDATE:"session-update"},c={SAME_TAB:"same-tab",CROSS_TAB:"cross-tab"},u={OFF:0,FULL:1,ERROR:2}},1863:(e,t,r)=>{"use strict";function n(){return Math.floor(performance.now())}r.d(t,{t:()=>n})},944:(e,t,r)=>{"use strict";function n(e,t){"function"==typeof console.debug&&console.debug("New Relic Warning: https://github.com/newrelic/newrelic-browser-agent/blob/main/docs/warning-codes.md#".concat(e),t)}r.d(t,{R:()=>n})},5284:(e,t,r)=>{"use strict";r.d(t,{t:()=>c,B:()=>s});var n=r(7836),i=r(6154);const o="newrelic";const a=new Set,s={};function c(e,t){const r=n.ee.get(t);s[t]??={},e&&"object"==typeof e&&(a.has(t)||(r.emit("rumresp",[e]),s[t]=e,a.add(t),function(e={}){try{i.gm.dispatchEvent(new CustomEvent(o,{detail:e}))}catch(e){}}({loaded:!0})))}},8990:(e,t,r)=>{"use strict";r.d(t,{I:()=>i});var n=Object.prototype.hasOwnProperty;function i(e,t,r){if(n.call(e,t))return e[t];var i=r();if(Object.defineProperty&&Object.keys)try{return Object.defineProperty(e,t,{value:i,writable:!0,enumerable:!1}),i}catch(e){}return e[t]=i,i}},6389:(e,t,r)=>{"use strict";function n(e,t=500,r={}){const n=r?.leading||!1;let i;return(...r)=>{n&&void 0===i&&(e.apply(this,r),i=setTimeout((()=>{i=clearTimeout(i)}),t)),n||(clearTimeout(i),i=setTimeout((()=>{e.apply(this,r)}),t))}}function i(e){let t=!1;return(...r)=>{t||(t=!0,e.apply(this,r))}}r.d(t,{J:()=>i,s:()=>n})},5289:(e,t,r)=>{"use strict";r.d(t,{GG:()=>o,sB:()=>a});var n=r(3878);function i(){return"undefined"==typeof document||"complete"===document.readyState}function o(e,t){if(i())return e();(0,n.sp)("load",e,t)}function a(e){if(i())return e();(0,n.DD)("DOMContentLoaded",e)}},384:(e,t,r)=>{"use strict";r.d(t,{NT:()=>o,US:()=>d,Zm:()=>a,bQ:()=>c,dV:()=>s,nY:()=>u,pV:()=>l});var n=r(6154),i=r(1863);const o={beacon:"bam.nr-data.net",errorBeacon:"bam.nr-data.net"};function a(){return n.gm.NREUM||(n.gm.NREUM={}),void 0===n.gm.newrelic&&(n.gm.newrelic=n.gm.NREUM),n.gm.NREUM}function s(){let e=a();return e.o||(e.o={ST:n.gm.setTimeout,SI:n.gm.setImmediate,CT:n.gm.clearTimeout,XHR:n.gm.XMLHttpRequest,REQ:n.gm.Request,EV:n.gm.Event,PR:n.gm.Promise,MO:n.gm.MutationObserver,FETCH:n.gm.fetch,WS:n.gm.WebSocket}),e}function c(e,t){let r=a();r.initializedAgents??={},t.initializedAt={ms:(0,i.t)(),date:new Date},r.initializedAgents[e]=t}function u(e){let t=a();return t.initializedAgents?.[e]}function d(e,t){a()[e]=t}function l(){return function(){let e=a();const t=e.info||{};e.info={beacon:o.beacon,errorBeacon:o.errorBeacon,...t}}(),function(){let e=a();const t=e.init||{};e.init={...t}}(),s(),function(){let e=a();const t=e.loader_config||{};e.loader_config={...t}}(),a()}},2843:(e,t,r)=>{"use strict";r.d(t,{u:()=>i});var n=r(3878);function i(e,t=!1,r,i){(0,n.DD)("visibilitychange",(function(){if(t)return void("hidden"===document.visibilityState&&e());e(document.visibilityState)}),r,i)}},3434:(e,t,r)=>{"use strict";r.d(t,{YM:()=>c});var n=r(7836),i=r(5607);const o="nr@original:".concat(i.W);var a=Object.prototype.hasOwnProperty,s=!1;function c(e,t){return e||(e=n.ee),r.inPlace=function(e,t,n,i,o){n||(n="");const a="-"===n.charAt(0);for(let s=0;s<t.length;s++){const c=t[s],u=e[c];d(u)||(e[c]=r(u,a?c+n:n,i,c,o))}},r.flag=o,r;function r(t,r,n,s,c){return d(t)?t:(r||(r=""),nrWrapper[o]=t,function(e,t,r){if(Object.defineProperty&&Object.keys)try{return Object.keys(e).forEach((function(r){Object.defineProperty(t,r,{get:function(){return e[r]},set:function(t){return e[r]=t,t}})})),t}catch(e){u([e],r)}for(var n in e)a.call(e,n)&&(t[n]=e[n])}(t,nrWrapper,e),nrWrapper);function nrWrapper(){var o,a,d,l;try{a=this,o=[...arguments],d="function"==typeof n?n(o,a):n||{}}catch(t){u([t,"",[o,a,s],d],e)}i(r+"start",[o,a,s],d,c);try{return l=t.apply(a,o)}catch(e){throw i(r+"err",[o,a,e],d,c),e}finally{i(r+"end",[o,a,l],d,c)}}}function i(r,n,i,o){if(!s||t){var a=s;s=!0;try{e.emit(r,n,i,t,o)}catch(t){u([t,r,n,i],e)}s=a}}}function u(e,t){t||(t=n.ee);try{t.emit("internal-error",e)}catch(e){}}function d(e){return!(e&&"function"==typeof e&&e.apply&&!e[o])}},993:(e,t,r)=>{"use strict";r.d(t,{ET:()=>o,p_:()=>i});var n=r(860);const i={ERROR:"ERROR",WARN:"WARN",INFO:"INFO",DEBUG:"DEBUG",TRACE:"TRACE"},o="log";n.K7.logging},3969:(e,t,r)=>{"use strict";r.d(t,{TZ:()=>n,XG:()=>s,rs:()=>i,xV:()=>a,z_:()=>o});const n=r(860).K7.metrics,i="sm",o="cm",a="storeSupportabilityMetrics",s="storeEventMetrics"},6630:(e,t,r)=>{"use strict";r.d(t,{T:()=>n});const n=r(860).K7.pageViewEvent},782:(e,t,r)=>{"use strict";r.d(t,{T:()=>n});const n=r(860).K7.pageViewTiming},6344:(e,t,r)=>{"use strict";r.d(t,{G4:()=>i});var n=r(2614);r(860).K7.sessionReplay;const i={RECORD:"recordReplay",PAUSE:"pauseReplay",REPLAY_RUNNING:"replayRunning",ERROR_DURING_REPLAY:"errorDuringReplay"};n.g.ERROR,n.g.FULL,n.g.OFF},4234:(e,t,r)=>{"use strict";r.d(t,{W:()=>o});var n=r(7836),i=r(1687);class o{constructor(e,t){this.agentIdentifier=e,this.ee=n.ee.get(e),this.featureName=t,this.blocked=!1}deregisterDrain(){(0,i.x3)(this.agentIdentifier,this.featureName)}}},7603:(e,t,r)=>{"use strict";r.d(t,{j:()=>P});var n=r(860),i=r(2555),o=r(3371),a=r(9908),s=r(7836),c=r(1687),u=r(5289),d=r(6154),l=r(944),f=r(3969),g=r(384),p=r(6344);const h=["setErrorHandler","finished","addToTrace","addRelease","addPageAction","setCurrentRouteName","setPageViewName","setCustomAttribute","interaction","noticeError","setUserId","setApplicationVersion","start",p.G4.RECORD,p.G4.PAUSE,"log","wrapLogger"],v=["setErrorHandler","finished","addToTrace","addRelease"];var m=r(1863),b=r(2614),y=r(993);var w=r(2646),A=r(3434);function R(e,t,r,n){if("object"!=typeof t||!t||"string"!=typeof r||!r||"function"!=typeof t[r])return(0,l.R)(29);const i=function(e){return(e||s.ee).get("logger")}(e),o=(0,A.YM)(i),a=new w.y(s.P);return a.level=n.level,a.customAttributes=n.customAttributes,o.inPlace(t,[r],"wrap-logger-",a),i}function E(){const e=(0,g.pV)();h.forEach((t=>{e[t]=(...r)=>function(t,...r){let n=[];return Object.values(e.initializedAgents).forEach((e=>{e&&e.api?e.exposed&&e.api[t]&&n.push(e.api[t](...r)):(0,l.R)(38,t)})),n.length>1?n:n[0]}(t,...r)}))}const x={};function _(e,t,g=!1){t||(0,c.Ak)(e,"api");const h={};var w=s.ee.get(e),A=w.get("tracer");x[e]=b.g.OFF,w.on(p.G4.REPLAY_RUNNING,(t=>{x[e]=t}));var E="api-",_=E+"ixn-";function N(t,r,n,o){const a=(0,i.Vp)(e);return null===r?delete a.jsAttributes[t]:(0,i.x1)(e,{...a,jsAttributes:{...a.jsAttributes,[t]:r}}),j(E,n,!0,o||null===r?"session":void 0)(t,r)}function T(){}h.log=function(e,{customAttributes:t={},level:r=y.p_.INFO}={}){(0,a.p)(f.xV,["API/log/called"],void 0,n.K7.metrics,w),function(e,t,r={},i=y.p_.INFO){(0,a.p)(f.xV,["API/logging/".concat(i.toLowerCase(),"/called")],void 0,n.K7.metrics,e),(0,a.p)(y.ET,[(0,m.t)(),t,r,i],void 0,n.K7.logging,e)}(w,e,t,r)},h.wrapLogger=(e,t,{customAttributes:r={},level:i=y.p_.INFO}={})=>{(0,a.p)(f.xV,["API/wrapLogger/called"],void 0,n.K7.metrics,w),R(w,e,t,{customAttributes:r,level:i})},v.forEach((e=>{h[e]=j(E,e,!0,"api")})),h.addPageAction=j(E,"addPageAction",!0,n.K7.genericEvents),h.setPageViewName=function(t,r){if("string"==typeof t)return"/"!==t.charAt(0)&&(t="/"+t),(0,o.f)(e).customTransaction=(r||"http://custom.transaction")+t,j(E,"setPageViewName",!0)()},h.setCustomAttribute=function(e,t,r=!1){if("string"==typeof e){if(["string","number","boolean"].includes(typeof t)||null===t)return N(e,t,"setCustomAttribute",r);(0,l.R)(40,typeof t)}else(0,l.R)(39,typeof e)},h.setUserId=function(e){if("string"==typeof e||null===e)return N("enduser.id",e,"setUserId",!0);(0,l.R)(41,typeof e)},h.setApplicationVersion=function(e){if("string"==typeof e||null===e)return N("application.version",e,"setApplicationVersion",!1);(0,l.R)(42,typeof e)},h.start=()=>{try{(0,a.p)(f.xV,["API/start/called"],void 0,n.K7.metrics,w),w.emit("manual-start-all")}catch(e){(0,l.R)(23,e)}},h[p.G4.RECORD]=function(){(0,a.p)(f.xV,["API/recordReplay/called"],void 0,n.K7.metrics,w),(0,a.p)(p.G4.RECORD,[],void 0,n.K7.sessionReplay,w)},h[p.G4.PAUSE]=function(){(0,a.p)(f.xV,["API/pauseReplay/called"],void 0,n.K7.metrics,w),(0,a.p)(p.G4.PAUSE,[],void 0,n.K7.sessionReplay,w)},h.interaction=function(e){return(new T).get("object"==typeof e?e:{})};const S=T.prototype={createTracer:function(e,t){var r={},i=this,o="function"==typeof t;return(0,a.p)(f.xV,["API/createTracer/called"],void 0,n.K7.metrics,w),g||(0,a.p)(_+"tracer",[(0,m.t)(),e,r],i,n.K7.spa,w),function(){if(A.emit((o?"":"no-")+"fn-start",[(0,m.t)(),i,o],r),o)try{return t.apply(this,arguments)}catch(e){const t="string"==typeof e?new Error(e):e;throw A.emit("fn-err",[arguments,this,t],r),t}finally{A.emit("fn-end",[(0,m.t)()],r)}}}};function j(e,t,r,i){return function(){return(0,a.p)(f.xV,["API/"+t+"/called"],void 0,n.K7.metrics,w),i&&(0,a.p)(e+t,[(0,m.t)(),...arguments],r?null:this,i,w),r?void 0:this}}function k(){r.e(296).then(r.bind(r,8778)).then((({setAPI:t})=>{t(e),(0,c.Ze)(e,"api")})).catch((e=>{(0,l.R)(27,e),w.abort()}))}return["actionText","setName","setAttribute","save","ignore","onEnd","getContext","end","get"].forEach((e=>{S[e]=j(_,e,void 0,g?n.K7.softNav:n.K7.spa)})),h.setCurrentRouteName=g?j(_,"routeName",void 0,n.K7.softNav):j(E,"routeName",!0,n.K7.spa),h.noticeError=function(t,r){"string"==typeof t&&(t=new Error(t)),(0,a.p)(f.xV,["API/noticeError/called"],void 0,n.K7.metrics,w),(0,a.p)("err",[t,(0,m.t)(),!1,r,!!x[e]],void 0,n.K7.jserrors,w)},d.RI?(0,u.GG)((()=>k()),!0):k(),h}var N=r(9417),T=r(8122);const S={accountID:void 0,trustKey:void 0,agentID:void 0,licenseKey:void 0,applicationID:void 0,xpid:void 0},j={};var k=r(5284);const I=e=>{const t=e.startsWith("http");e+="/",r.p=t?e:"https://"+e};let O=!1;function P(e,t={},r,n){let{init:a,info:c,loader_config:u,runtime:l={},exposed:f=!0}=t;l.loaderType=r;const p=(0,g.pV)();c||(a=p.init,c=p.info,u=p.loader_config),(0,N.xN)(e.agentIdentifier,a||{}),function(e,t){if(!e)throw new Error("All loader-config objects require an agent identifier!");j[e]=(0,T.a)(t,S);const r=(0,g.nY)(e);r&&(r.loader_config=j[e])}(e.agentIdentifier,u||{}),c.jsAttributes??={},d.bv&&(c.jsAttributes.isWorker=!0),(0,i.x1)(e.agentIdentifier,c);const h=(0,N.D0)(e.agentIdentifier),v=[c.beacon,c.errorBeacon];O||(h.proxy.assets&&(I(h.proxy.assets),v.push(h.proxy.assets)),h.proxy.beacon&&v.push(h.proxy.beacon),E(),(0,g.US)("activatedFeatures",k.B),e.runSoftNavOverSpa&&=!0===h.soft_navigations.enabled&&h.feature_flags.includes("soft_nav")),l.denyList=[...h.ajax.deny_list||[],...h.ajax.block_internal?v:[]],l.ptid=e.agentIdentifier,(0,o.V)(e.agentIdentifier,l),e.ee=s.ee.get(e.agentIdentifier),void 0===e.api&&(e.api=_(e.agentIdentifier,n,e.runSoftNavOverSpa)),void 0===e.exposed&&(e.exposed=f),O=!0}},8374:(e,t,r)=>{r.nc=(()=>{try{return document?.currentScript?.nonce}catch(e){}return""})()},860:(e,t,r)=>{"use strict";r.d(t,{$J:()=>o,K7:()=>n,P3:()=>i});const n={ajax:"ajax",genericEvents:"generic_events",jserrors:"jserrors",logging:"logging",metrics:"metrics",pageAction:"page_action",pageViewEvent:"page_view_event",pageViewTiming:"page_view_timing",sessionReplay:"session_replay",sessionTrace:"session_trace",softNav:"soft_navigations",spa:"spa"},i={[n.pageViewEvent]:1,[n.pageViewTiming]:2,[n.metrics]:3,[n.jserrors]:4,[n.spa]:5,[n.ajax]:6,[n.sessionTrace]:7,[n.softNav]:8,[n.sessionReplay]:9,[n.logging]:10,[n.genericEvents]:11},o={[n.pageViewTiming]:"events",[n.ajax]:"events",[n.spa]:"events",[n.softNav]:"events",[n.metrics]:"jserrors",[n.jserrors]:"jserrors",[n.sessionTrace]:"browser/blobs",[n.sessionReplay]:"browser/blobs",[n.logging]:"browser/logs",[n.genericEvents]:"ins"}}},n={};function i(e){var t=n[e];if(void 0!==t)return t.exports;var o=n[e]={exports:{}};return r[e](o,o.exports,i),o.exports}i.m=r,i.d=(e,t)=>{for(var r in t)i.o(t,r)&&!i.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:t[r]})},i.f={},i.e=e=>Promise.all(Object.keys(i.f).reduce(((t,r)=>(i.f[r](e,t),t)),[])),i.u=e=>"nr-rum-1.274.0.min.js",i.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),e={},t="NRBA-1.274.0.PROD:",i.l=(r,n,o,a)=>{if(e[r])e[r].push(n);else{var s,c;if(void 0!==o)for(var u=document.getElementsByTagName("script"),d=0;d<u.length;d++){var l=u[d];if(l.getAttribute("src")==r||l.getAttribute("data-webpack")==t+o){s=l;break}}if(!s){c=!0;var f={296:"sha512-gkYkZDAwQ9PwaDXs2YM+rNIdRej1Ac1mupWobRJ8eahQcXz6/sunGZCKklrzi5kWxhOGRZr2tn0rEKuLTXzfAA=="};(s=document.createElement("script")).charset="utf-8",s.timeout=120,i.nc&&s.setAttribute("nonce",i.nc),s.setAttribute("data-webpack",t+o),s.src=r,0!==s.src.indexOf(window.location.origin+"/")&&(s.crossOrigin="anonymous"),f[a]&&(s.integrity=f[a])}e[r]=[n];var g=(t,n)=>{s.onerror=s.onload=null,clearTimeout(p);var i=e[r];if(delete e[r],s.parentNode&&s.parentNode.removeChild(s),i&&i.forEach((e=>e(n))),t)return t(n)},p=setTimeout(g.bind(null,void 0,{type:"timeout",target:s}),12e4);s.onerror=g.bind(null,s.onerror),s.onload=g.bind(null,s.onload),c&&document.head.appendChild(s)}},i.r=e=>{"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.p="https://js-agent.newrelic.com/",(()=>{var e={840:0,374:0};i.f.j=(t,r)=>{var n=i.o(e,t)?e[t]:void 0;if(0!==n)if(n)r.push(n[2]);else{var o=new Promise(((r,i)=>n=e[t]=[r,i]));r.push(n[2]=o);var a=i.p+i.u(t),s=new Error;i.l(a,(r=>{if(i.o(e,t)&&(0!==(n=e[t])&&(e[t]=void 0),n)){var o=r&&("load"===r.type?"missing":r.type),a=r&&r.target&&r.target.src;s.message="Loading chunk "+t+" failed.\n("+o+": "+a+")",s.name="ChunkLoadError",s.type=o,s.request=a,n[1](s)}}),"chunk-"+t,t)}};var t=(t,r)=>{var n,o,[a,s,c]=r,u=0;if(a.some((t=>0!==e[t]))){for(n in s)i.o(s,n)&&(i.m[n]=s[n]);if(c)c(i)}for(t&&t(r);u<a.length;u++)o=a[u],i.o(e,o)&&e[o]&&e[o][0](),e[o]=0},r=self["webpackChunk:NRBA-1.274.0.PROD"]=self["webpackChunk:NRBA-1.274.0.PROD"]||[];r.forEach(t.bind(null,0)),r.push=t.bind(null,r.push.bind(r))})(),(()=>{"use strict";i(8374);var e=i(944),t=i(6344),r=i(9566);class n{agentIdentifier;constructor(e=(0,r.LA)(16)){this.agentIdentifier=e}#e(t,...r){if("function"==typeof this.api?.[t])return this.api[t](...r);(0,e.R)(35,t)}addPageAction(e,t){return this.#e("addPageAction",e,t)}setPageViewName(e,t){return this.#e("setPageViewName",e,t)}setCustomAttribute(e,t,r){return this.#e("setCustomAttribute",e,t,r)}noticeError(e,t){return this.#e("noticeError",e,t)}setUserId(e){return this.#e("setUserId",e)}setApplicationVersion(e){return this.#e("setApplicationVersion",e)}setErrorHandler(e){return this.#e("setErrorHandler",e)}addRelease(e,t){return this.#e("addRelease",e,t)}log(e,t){return this.#e("log",e,t)}}class o extends n{#e(t,...r){if("function"==typeof this.api?.[t])return this.api[t](...r);(0,e.R)(35,t)}start(){return this.#e("start")}finished(e){return this.#e("finished",e)}recordReplay(){return this.#e(t.G4.RECORD)}pauseReplay(){return this.#e(t.G4.PAUSE)}addToTrace(e){return this.#e("addToTrace",e)}setCurrentRouteName(e){return this.#e("setCurrentRouteName",e)}interaction(){return this.#e("interaction")}wrapLogger(e,t,r){return this.#e("wrapLogger",e,t,r)}}var a=i(860),s=i(9417);const c=Object.values(a.K7);function u(e){const t={};return c.forEach((r=>{t[r]=function(e,t){return!0===(0,s.gD)(t,"".concat(e,".enabled"))}(r,e)})),t}var d=i(7603);var l=i(1687),f=i(4234),g=i(5289),p=i(6154),h=i(384);const v=e=>p.RI&&!0===(0,s.gD)(e,"privacy.cookies_enabled");function m(e){return!!(0,h.dV)().o.MO&&v(e)&&!0===(0,s.gD)(e,"session_trace.enabled")}var b=i(6389);class y extends f.W{constructor(e,t,r=!0){super(e.agentIdentifier,t),this.auto=r,this.abortHandler=void 0,this.featAggregate=void 0,this.onAggregateImported=void 0,!1===e.init[this.featureName].autoStart&&(this.auto=!1),this.auto?(0,l.Ak)(e.agentIdentifier,t):this.ee.on("manual-start-all",(0,b.J)((()=>{(0,l.Ak)(e.agentIdentifier,this.featureName),this.auto=!0,this.importAggregator(e)})))}importAggregator(t,r={}){if(this.featAggregate||!this.auto)return;let n;this.onAggregateImported=new Promise((e=>{n=e}));const o=async()=>{let o;try{if(v(this.agentIdentifier)){const{setupAgentSession:e}=await i.e(296).then(i.bind(i,3861));o=e(t)}}catch(t){(0,e.R)(20,t),this.ee.emit("internal-error",[t]),this.featureName===a.K7.sessionReplay&&this.abortHandler?.()}try{if(t.sharedAggregator)await t.sharedAggregator;else{t.sharedAggregator=i.e(296).then(i.bind(i,9337));const{EventAggregator:e}=await t.sharedAggregator;t.sharedAggregator=new e}if(!this.#t(this.featureName,o))return(0,l.Ze)(this.agentIdentifier,this.featureName),void n(!1);const{lazyFeatureLoader:e}=await i.e(296).then(i.bind(i,6103)),{Aggregate:a}=await e(this.featureName,"aggregate");this.featAggregate=new a(t,r),n(!0)}catch(t){(0,e.R)(34,t),this.abortHandler?.(),(0,l.Ze)(this.agentIdentifier,this.featureName,!0),n(!1),this.ee&&this.ee.abort()}};p.RI?(0,g.GG)((()=>o()),!0):o()}#t(e,t){switch(e){case a.K7.sessionReplay:return m(this.agentIdentifier)&&!!t;case a.K7.sessionTrace:return!!t;default:return!0}}}var w=i(6630);class A extends y{static featureName=w.T;constructor(e,t=!0){super(e,w.T,t),this.importAggregator(e)}}var R=i(9908),E=i(2843),x=i(3878),_=i(782),N=i(1863);class T extends y{static featureName=_.T;constructor(e,t=!0){super(e,_.T,t),p.RI&&((0,E.u)((()=>(0,R.p)("docHidden",[(0,N.t)()],void 0,_.T,this.ee)),!0),(0,x.sp)("pagehide",(()=>(0,R.p)("winPagehide",[(0,N.t)()],void 0,_.T,this.ee))),this.importAggregator(e))}}var S=i(3969);class j extends y{static featureName=S.TZ;constructor(e,t=!0){super(e,S.TZ,t),this.importAggregator(e)}}new class extends o{constructor(t,r){super(r),p.gm?(this.features={},(0,h.bQ)(this.agentIdentifier,this),this.desiredFeatures=new Set(t.features||[]),this.desiredFeatures.add(A),this.runSoftNavOverSpa=[...this.desiredFeatures].some((e=>e.featureName===a.K7.softNav)),(0,d.j)(this,t,t.loaderType||"agent"),this.run()):(0,e.R)(21)}get config(){return{info:this.info,init:this.init,loader_config:this.loader_config,runtime:this.runtime}}run(){try{const t=u(this.agentIdentifier),r=[...this.desiredFeatures];r.sort(((e,t)=>a.P3[e.featureName]-a.P3[t.featureName])),r.forEach((r=>{if(!t[r.featureName]&&r.featureName!==a.K7.pageViewEvent)return;if(this.runSoftNavOverSpa&&r.featureName===a.K7.spa)return;if(!this.runSoftNavOverSpa&&r.featureName===a.K7.softNav)return;const n=function(e){switch(e){case a.K7.ajax:return[a.K7.jserrors];case a.K7.sessionTrace:return[a.K7.ajax,a.K7.pageViewEvent];case a.K7.sessionReplay:return[a.K7.sessionTrace];case a.K7.pageViewTiming:return[a.K7.pageViewEvent];default:return[]}}(r.featureName).filter((e=>!(e in this.features)));n.length>0&&(0,e.R)(36,{targetFeature:r.featureName,missingDependencies:n}),this.features[r.featureName]=new r(this)}))}catch(t){(0,e.R)(22,t);for(const e in this.features)this.features[e].abortHandler?.();const r=(0,h.Zm)();delete r.initializedAgents[this.agentIdentifier]?.api,delete r.initializedAgents[this.agentIdentifier]?.features,delete this.sharedAggregator;return r.ee.get(this.agentIdentifier).abort(),!1}}}({features:[A,T,j],loaderType:"lite"})})()})();</script> <meta name="citation_title" content="{PURE}: Payments with {UWB} {RElay-protection}" /> <link rel="shortcut icon" href="https://www.usenix.org/sites/default/files/waves_favicon.ico" type="image/vnd.microsoft.icon" /> <meta name="viewport" content="width=device-width, initial-scale=1" /> <meta name="citation_author" content="Daniele Coppola" /> <meta name="citation_author_institution" content="ETH Zurich" /> <meta name="citation_author_email" content="dcoppola@ethz.ch" /> <meta name="citation_author" content="Giovanni Camurati" /> <meta name="citation_author_institution" content="ETH Zurich" /> <meta name="citation_author_email" content="giovanni.camurati@inf.ethz.ch" /> <meta name="citation_author" content="Claudio Anliker" /> <meta name="citation_author_institution" content="ETH Zurich" /> <meta name="citation_author_email" content="claudio.anliker@inf.ethz.ch" /> <meta name="citation_author" content="Xenia Hofmeier" /> <meta name="citation_author_institution" content="ETH Zurich" /> <meta name="citation_author_email" content="xenia.hofmeier@inf.ethz.ch" /> <meta name="citation_author" content="Patrick Schaller" /> <meta name="citation_author_institution" content="ETH Zurich" /> <meta name="citation_author_email" content="patrick.schaller@inf.ethz.ch" /> <meta name="citation_author" content="David Basin" /> <meta name="citation_author_institution" content="ETH Zurich" /> <meta name="citation_author_email" content="basin@inf.ethz.ch" /> <meta name="citation_author" content="Srdjan Capkun" /> <meta name="citation_author_institution" content="ETH Zurich" /> <meta name="citation_author_email" content="srdjan.capkun@inf.ethz.ch" /> <meta name="citation_publication_date" content="2024" /> <meta name="citation_conference_title" content="33rd USENIX Security Symposium (USENIX Security 24)" /> <meta name="citation_firstpage" content="4553" /> <meta name="citation_lastpage" content="4569" /> <meta name="citation_isbn" content="978-1-939133-44-1" /> <meta name="citation_pdf_url" content="https://www.usenix.org/system/files/usenixsecurity24-coppola.pdf" /> <title>PURE: Payments with UWB RElay-protection | USENIX</title> <link type="text/css" rel="stylesheet" href="https://www.usenix.org/sites/default/files/css/css_ywqYrtSodM0qVMzAkOSnqZ_iBnAVpkSeD_yPtUN9tBk.css" media="all" /> <link type="text/css" rel="stylesheet" href="https://www.usenix.org/sites/default/files/css/css_nUFTrBzuSS1e6iNFoYIyAptja28IikBBh8IfX_l3-Jw.css" media="all" /> <link type="text/css" rel="stylesheet" href="https://www.usenix.org/sites/default/files/css/css_KMWXOV-pH6GjOMUFkn6VdZ1T0fURpw9oOC6s4EWTOkg.css" media="all" /> <link type="text/css" rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.4.0/css/font-awesome.min.css" media="all" /> <link type="text/css" rel="stylesheet" href="https://www.usenix.org/sites/default/files/css/css_xvfPXgJIkn_fRBCHdXEH03Hi1SO5kScEAEfgHEMKC10.css" media="all" /> <link type="text/css" rel="stylesheet" href="https://www.usenix.org/sites/default/files/css/css_myR0EBuUMKFMPgSCwcS0LdRsdG6KOL5XbRfMjUloC2I.css" media="all" /> <script type="text/javascript" src="https://www.usenix.org/sites/default/files/js/js_fyV0VVkC6Q3xduxGurKMTFIU2dMmArUrbAdZORL-9WQ.js"></script> <script type="text/javascript" src="https://www.usenix.org/sites/default/files/js/js_s7yA-hwRxnKty__ED6DuqmTMKG39xvpRyrtyCrbWH4M.js"></script> <script type="text/javascript" src="https://www.usenix.org/sites/default/files/js/js_ji3W2YMVDPqfrJn3DRbbC-3pD_gTOz5f4UdYE6j-T9Y.js"></script> <script type="text/javascript" src="https://www.usenix.org/sites/default/files/js/js_lrDK-xYHpeTUDRgYDPOgQlh2ypM6nEyfaJmGxez0fJ8.js"></script> <script type="text/javascript" src="https://js.stripe.com/v3"></script> <script type="text/javascript" src="https://www.usenix.org/sites/default/files/js/js_9WNfBZMllca6UCxx0bNQeMnszVTbr1v8ZQwaaQtR9yE.js"></script> <script type="text/javascript"> <![CDATA[//><!]]> </script> </head> <body class="html not-front not-logged-in no-sidebars page-node page-node- page-node-298223 node-type-paper context-conference context-conference og-context og-context-node og-context-node-285720 scheme-security user-is-non-member" > <noscript aria-hidden="true"><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-WQSPGJT" height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript> <div role="document" class="page"> <header id="site-header" class="site-header"> <div class="usenix-login-bar"> <section class="block block-usenix-login-bar usenix-login-bar-block"> <div class="block-content"> <a href="/" id="site-logo" class="site-logo"><svg id="back-to-usenix" class="back-to-usenix" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 162.57 52.34"><title>usenix_logo_notag_white</title><path class="cls-1" d="M51,5.76h2.15V18.7h-1.5l-.46-1.09A9.63,9.63,0,0,1,46.58,19a4.7,4.7,0,0,1-1.85-.33,3.26,3.26,0,0,1-1.22-.83,3.75,3.75,0,0,1-.69-1.26,6.54,6.54,0,0,1-.34-1.46c0-.46-.07-1-.07-1.59V5.76h2.15v7.88q0,3.39,2.95,3.39A7.67,7.67,0,0,0,51,16Z" transform="translate(-3.49 -4.33)"/><path class="cls-1" d="M68.56,5.51h.52l.47,0,.39,0,.38.05.31.06.33.08.28.07.31.09.29.09L71.3,7.68a11.79,11.79,0,0,0-3.09-.48,5.5,5.5,0,0,0-1.37.16,3,3,0,0,0-.92.38,2,2,0,0,0-.52.52,1.7,1.7,0,0,0-.26.52,1.73,1.73,0,0,0-.06.43,1.19,1.19,0,0,0,.56,1,4.59,4.59,0,0,0,1.39.68q.83.26,1.8.62t1.8.76A3.81,3.81,0,0,1,72,13.33,2.65,2.65,0,0,1,72.57,15a4,4,0,0,1-.14,1,3.47,3.47,0,0,1-.52,1.05,3.69,3.69,0,0,1-1,1,5.5,5.5,0,0,1-1.63.66,9.47,9.47,0,0,1-2.34.26,11.68,11.68,0,0,1-4.4-1l.6-1.62a21.61,21.61,0,0,0,2.21.71,7.12,7.12,0,0,0,1.68.21q3.2,0,3.19-2a1.13,1.13,0,0,0-.31-.79,2.3,2.3,0,0,0-.84-.55c-.35-.14-.74-.29-1.18-.45S67,13.16,66.54,13a8.33,8.33,0,0,1-1.35-.52A7.73,7.73,0,0,1,64,11.81a2.83,2.83,0,0,1-.84-1,3,3,0,0,1-.31-1.39,3.22,3.22,0,0,1,.15-1,3.45,3.45,0,0,1,.56-1,4.28,4.28,0,0,1,1-1,5.38,5.38,0,0,1,1.64-.68A9.19,9.19,0,0,1,68.56,5.51Z" transform="translate(-3.49 -4.33)"/><path class="cls-1" d="M87.43,5.51a5.79,5.79,0,0,1,1.7.23,4.37,4.37,0,0,1,1.25.58,3.19,3.19,0,0,1,.86.92,5.56,5.56,0,0,1,.55,1.1,6.45,6.45,0,0,1,.29,1.28c.07.5.12.93.13,1.3s0,.8,0,1.3v1H83.34a3.35,3.35,0,0,0,.32,1.41,4.2,4.2,0,0,0,2.44,2.23,5.77,5.77,0,0,0,2.1.37,10.37,10.37,0,0,0,2.95-.47l.38,1.47a12.71,12.71,0,0,1-4.14.72,7.83,7.83,0,0,1-2.53-.38,5.19,5.19,0,0,1-1.78-1A5,5,0,0,1,82,16.14a6.46,6.46,0,0,1-.6-1.7,9.39,9.39,0,0,1-.16-1.79A9.42,9.42,0,0,1,81.56,10a6.44,6.44,0,0,1,1-2,6.13,6.13,0,0,1,1.41-1.38,5.66,5.66,0,0,1,1.69-.82A6.53,6.53,0,0,1,87.43,5.51ZM87,7.37A3.18,3.18,0,0,0,85,8a3.67,3.67,0,0,0-1.21,1.58,5.34,5.34,0,0,0-.38,2h6.76Q90.15,7.37,87,7.37Z" transform="translate(-3.49 -4.33)"/><path class="cls-1" d="M101.66,5.76h1.51l.47,1.1a9.71,9.71,0,0,1,4.56-1.36,4.68,4.68,0,0,1,1.85.34,3.2,3.2,0,0,1,1.22.84,3.7,3.7,0,0,1,.69,1.27,6.78,6.78,0,0,1,.33,1.46,15,15,0,0,1,.07,1.58V18.7H110.2V10.84q0-3.4-2.93-3.4a7.66,7.66,0,0,0-3.46,1V18.7h-2.15Z" transform="translate(-3.49 -4.33)"/><path class="cls-1" d="M122.42,5.76h2.15V18.7h-2.15Z" transform="translate(-3.49 -4.33)"/><path class="cls-1" d="M133.14,5.76h2.49l3.65,5.13,3.52-5.13h2.29l-4.77,6.6,4.52,6.34h-2.49l-3.47-4.86-3.3,4.86H133.3l4.53-6.35Z" transform="translate(-3.49 -4.33)"/><path class="cls-2" d="M69.67,37.24c-.15-.39-.29-.77-.42-1.15l-.4-1.15H64.77L64,37.24H62.64q.52-1.43,1-2.64t.89-2.31q.44-1.09.86-2.08t.9-2h1.16q.47,1,.9,2t.86,2.08q.44,1.09.89,2.31t1,2.64ZM68.49,33.9q-.42-1.13-.83-2.19t-.85-2q-.45,1-.86,2t-.81,2.19Z" transform="translate(-3.49 -4.33)"/><path class="cls-2" d="M76.78,36.35q2,0,2-1.35a1.36,1.36,0,0,0-.18-.71,1.72,1.72,0,0,0-.47-.51,3.31,3.31,0,0,0-.68-.37l-.81-.31a8.43,8.43,0,0,1-.94-.38,3.31,3.31,0,0,1-.77-.51,2.13,2.13,0,0,1-.51-.7A2.55,2.55,0,0,1,75,28.69,3.4,3.4,0,0,1,77.24,28a5.86,5.86,0,0,1,1.49.18,3.38,3.38,0,0,1,1,.38l-.4,1a3.57,3.57,0,0,0-.81-.33,4.4,4.4,0,0,0-1.25-.16,2.8,2.8,0,0,0-.68.08,1.74,1.74,0,0,0-.55.23,1.16,1.16,0,0,0-.37.4,1.12,1.12,0,0,0-.14.57,1.2,1.2,0,0,0,.14.61,1.4,1.4,0,0,0,.4.44,3.48,3.48,0,0,0,.6.34q.34.16.76.31.58.23,1.07.47a3.5,3.5,0,0,1,.85.56,2.24,2.24,0,0,1,.55.77,2.71,2.71,0,0,1,.2,1.09,2.12,2.12,0,0,1-.86,1.82,4.05,4.05,0,0,1-2.44.64,6.11,6.11,0,0,1-1-.07,7.26,7.26,0,0,1-.8-.17,4.42,4.42,0,0,1-.6-.21L74,36.8l.38-1a5.45,5.45,0,0,0,.91.38A4.62,4.62,0,0,0,76.78,36.35Z" transform="translate(-3.49 -4.33)"/><path class="cls-2" d="M85.91,36.35q2,0,2-1.35a1.36,1.36,0,0,0-.17-.71,1.73,1.73,0,0,0-.47-.51,3.36,3.36,0,0,0-.68-.37l-.81-.31a8.37,8.37,0,0,1-.94-.38,3.29,3.29,0,0,1-.77-.51,2.14,2.14,0,0,1-.51-.7,2.55,2.55,0,0,1,.62-2.82A3.4,3.4,0,0,1,86.37,28a5.86,5.86,0,0,1,1.49.18,3.36,3.36,0,0,1,1,.38l-.4,1a3.59,3.59,0,0,0-.81-.33,4.41,4.41,0,0,0-1.25-.16,2.79,2.79,0,0,0-.68.08,1.75,1.75,0,0,0-.55.23,1.18,1.18,0,0,0-.37.4,1.13,1.13,0,0,0-.14.57,1.2,1.2,0,0,0,.14.61,1.39,1.39,0,0,0,.4.44,3.47,3.47,0,0,0,.6.34l.76.31q.58.23,1.07.47a3.52,3.52,0,0,1,.84.56,2.22,2.22,0,0,1,.55.77,2.72,2.72,0,0,1,.2,1.09,2.12,2.12,0,0,1-.87,1.82,4.05,4.05,0,0,1-2.44.64,6.1,6.1,0,0,1-1-.07,7.19,7.19,0,0,1-.8-.17,4.47,4.47,0,0,1-.6-.21l-.4-.19.38-1a5.48,5.48,0,0,0,.91.38A4.63,4.63,0,0,0,85.91,36.35Z" transform="translate(-3.49 -4.33)"/><path class="cls-2" d="M92.58,32.73a5.58,5.58,0,0,1,.34-2,4.23,4.23,0,0,1,.94-1.48,3.87,3.87,0,0,1,1.38-.89,4.66,4.66,0,0,1,1.67-.3,4.52,4.52,0,0,1,1.64.3,3.83,3.83,0,0,1,1.36.89,4.29,4.29,0,0,1,.93,1.48,6.25,6.25,0,0,1,0,4.08,4.3,4.3,0,0,1-.93,1.47,3.83,3.83,0,0,1-1.36.89,4.53,4.53,0,0,1-1.64.3,4.66,4.66,0,0,1-1.67-.3,3.87,3.87,0,0,1-1.38-.89,4.24,4.24,0,0,1-.94-1.47A5.58,5.58,0,0,1,92.58,32.73Zm1.33,0a5,5,0,0,0,.21,1.49,3.32,3.32,0,0,0,.59,1.14,2.59,2.59,0,0,0,.94.72,3,3,0,0,0,1.24.25,2.92,2.92,0,0,0,1.24-.25,2.61,2.61,0,0,0,.93-.72,3.36,3.36,0,0,0,.59-1.14,5.43,5.43,0,0,0,0-3A3.34,3.34,0,0,0,99,30.11a2.6,2.6,0,0,0-.93-.72,2.91,2.91,0,0,0-1.24-.25,2.94,2.94,0,0,0-1.24.25,2.57,2.57,0,0,0-.94.72,3.31,3.31,0,0,0-.59,1.14A5,5,0,0,0,93.9,32.73Z" transform="translate(-3.49 -4.33)"/><path class="cls-2" d="M109.14,37.44a4.59,4.59,0,0,1-1.73-.31,3.65,3.65,0,0,1-1.34-.91,4.13,4.13,0,0,1-.86-1.47,6.08,6.08,0,0,1-.3-2,5.47,5.47,0,0,1,.34-2,4.38,4.38,0,0,1,.93-1.48,3.94,3.94,0,0,1,1.37-.91,4.44,4.44,0,0,1,1.66-.31,5.82,5.82,0,0,1,1,.08,6.12,6.12,0,0,1,.78.18,3.76,3.76,0,0,1,.54.21l.29.16-.36,1a2,2,0,0,0-.34-.17l-.5-.18a4.53,4.53,0,0,0-.61-.15,3.82,3.82,0,0,0-.67-.06,3.22,3.22,0,0,0-1.29.25,2.65,2.65,0,0,0-1,.71,3.23,3.23,0,0,0-.62,1.14,4.87,4.87,0,0,0-.21,1.5,5.4,5.4,0,0,0,.19,1.47,3.24,3.24,0,0,0,.57,1.14,2.54,2.54,0,0,0,.94.73,3.13,3.13,0,0,0,1.32.26,4.84,4.84,0,0,0,1.44-.18,6.24,6.24,0,0,0,.86-.32l.33,1a1.81,1.81,0,0,1-.33.16,4.21,4.21,0,0,1-.58.19,7.28,7.28,0,0,1-.82.16A7.45,7.45,0,0,1,109.14,37.44Z" transform="translate(-3.49 -4.33)"/><path class="cls-2" d="M115.54,28.24h1.26v9h-1.26Z" transform="translate(-3.49 -4.33)"/><path class="cls-2" d="M127.26,37.24c-.15-.39-.29-.77-.42-1.15l-.4-1.15h-4.08l-.82,2.3h-1.31q.52-1.43,1-2.64t.89-2.31c.29-.73.58-1.42.86-2.08s.59-1.32.9-2H125q.47,1,.9,2t.87,2.08q.44,1.09.89,2.31t1,2.64Zm-1.18-3.34q-.41-1.13-.83-2.19t-.85-2q-.45,1-.87,2t-.81,2.19Z" transform="translate(-3.49 -4.33)"/><path class="cls-2" d="M137.26,28.24v1.09h-2.83v7.92h-1.26V29.33h-2.83V28.24Z" transform="translate(-3.49 -4.33)"/><path class="cls-2" d="M140.8,28.24h1.26v9H140.8Z" transform="translate(-3.49 -4.33)"/><path class="cls-2" d="M146.14,32.73a5.6,5.6,0,0,1,.34-2,4.21,4.21,0,0,1,.94-1.48,3.86,3.86,0,0,1,1.38-.89,4.66,4.66,0,0,1,1.67-.3,4.53,4.53,0,0,1,1.65.3,3.84,3.84,0,0,1,1.36.89,4.26,4.26,0,0,1,.93,1.48,6.21,6.21,0,0,1,0,4.08,4.27,4.27,0,0,1-.93,1.47,3.85,3.85,0,0,1-1.36.89,4.53,4.53,0,0,1-1.65.3,4.67,4.67,0,0,1-1.67-.3,3.86,3.86,0,0,1-1.38-.89,4.22,4.22,0,0,1-.94-1.47A5.6,5.6,0,0,1,146.14,32.73Zm1.33,0a5,5,0,0,0,.21,1.49,3.37,3.37,0,0,0,.59,1.14,2.62,2.62,0,0,0,.94.72,3,3,0,0,0,1.24.25,2.91,2.91,0,0,0,1.23-.25,2.6,2.6,0,0,0,.93-.72,3.32,3.32,0,0,0,.59-1.14,5.43,5.43,0,0,0,0-3,3.31,3.31,0,0,0-.59-1.14,2.58,2.58,0,0,0-.93-.72,2.9,2.9,0,0,0-1.23-.25,3,3,0,0,0-1.24.25,2.61,2.61,0,0,0-.94.72,3.36,3.36,0,0,0-.59,1.14A5,5,0,0,0,147.47,32.73Z" transform="translate(-3.49 -4.33)"/><path class="cls-2" d="M165,37.24l-.66-1.08q-.37-.6-.8-1.24l-.89-1.31c-.31-.44-.61-.87-.92-1.28s-.6-.8-.88-1.16-.55-.68-.79-1v7h-1.24v-9h1q.61.65,1.31,1.51t1.38,1.78q.68.92,1.29,1.8t1,1.57V28.24h1.24v9Z" transform="translate(-3.49 -4.33)"/><g class="cls-3"><g class="cls-3"><path class="cls-2" d="M13.17,36.8a48.25,48.25,0,0,0,4.95,2.13,32.82,32.82,0,0,1,1.2-4.83c-2.27-1-2.67-1.25-4.88-2.42A35.56,35.56,0,0,0,13.17,36.8ZM32.35,8A29.28,29.28,0,0,0,27,4.33a36.84,36.84,0,0,0-4.35,3A41.79,41.79,0,0,1,28,11,36.51,36.51,0,0,1,32.35,8ZM23.71,15c-.82-.59-1.93-1.36-2.77-1.93A49.91,49.91,0,0,0,17,18L14.4,16.29a43.54,43.54,0,0,1,8.23-9,20.77,20.77,0,0,0-4.54-1.88,42.13,42.13,0,0,0-4,3.79c.58.25,1.33.6,1.89.87a47.94,47.94,0,0,0-3.8,4.74l-1.73-1.08C7.95,17.43.19,30.2,5.07,41.21l0,0h0l.13.23c2.24,3.88,5.84,5.09,9.65,4.82l.32,0a27,27,0,0,1-.1-7.92,38.56,38.56,0,0,1-4.15-2.1,38.28,38.28,0,0,1,1.64-6.54,47,47,0,0,1-4-2.76c.38-1,.93-2.37,1.35-3.38,1.68,1.22,2.08,1.48,4,2.73-.43,1-1,2.38-1.36,3.41,1.56.94,1.85,1.1,4.1,2.3a46.4,46.4,0,0,1,2.93-6.54c-1.67-1-1.89-1.16-4-2.51.56-1,1.34-2.26,1.94-3.21l3.95,2.6a43,43,0,0,1,8.65-9.65c-.62-.53-1.48-1.23-2.12-1.75A45.3,45.3,0,0,0,23.71,15Z" transform="translate(-3.49 -4.33)"/><path class="cls-2" d="M50.57,32.9s-2.4-2.08-9.83-5.94c-2.38-.92-3.08.42-4.47,3.07C29.22,43.56,10.85,54.52,4.06,42.1c.49.88,1.16,2,1.7,2.89a33.94,33.94,0,0,0,4.86,5.07c1,.85,2.45,1.94,3.55,2.71A27.08,27.08,0,0,0,18.31,55c1.17.46,2.75,1,4,1.39,9.72,2,21.13-6.1,28.39-20,.82-2,.21-3.08-.09-3.44" transform="translate(-3.49 -4.33)"/></g></g></svg> </a><div class="item-list"><ul id="usenix-login-bar-links" class="usenix-login-bar-links"><li class="login first"><a href="/user?destination=conference/usenixsecurity24/presentation/coppola">Sign In</a></li> <li class="conference last"><a href="/conferences">Conferences</a></li> </ul></div></div> </section> </div> <div class="usenix-announcement-banner-region"> </div> <div class="outer-wrapper"> <div class="header-col2-wrapper"> </div> <div class="header-col1-wrapper"> <section class="block block-usenix-og-auto-menu usenix-og-auto-header-menu-logo"> <div class="block-content"> <a href="/conference/usenixsecurity24" class="header-menu-logo-link"><img class="header-menu-logo" src="https://www.usenix.org/sites/default/files/styles/neat_conference_menu_logo/public/sec24_wordmark_stacked_white_400x164.png?itok=iZ1avAhI" width="103" height="42" alt="" /></a></div> </section> <section class="block block-usenix-og-auto-menu usenix-og-auto-header-menu"> <div class="block-content"> <div class="tb-megamenu tb-megamenu-menu-og-285720" role="navigation" aria-label="Main navigation"> <button data-target=".nav-collapse" data-toggle="collapse" class="btn btn-navbar tb-megamenu-button" type="button"> <i class="fa fa-reorder"></i> </button> <div class="nav-collapse always-show"> <ul class="tb-megamenu-nav nav level-0 items-5"> <li data-id="45601" data-level="1" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-1 mega dropdown"> <a href="/conference/usenixsecurity24#registration" class="dropdown-toggle"> Attend </a> <div data-class="" data-width="" class="tb-megamenu-submenu dropdown-menu mega-dropdown-menu nav-child"> <div class="mega-dropdown-inner"> <div class="tb-megamenu-row row-fluid"> <div data-class="" data-width="4" data-hidewcol="0" id="tb-megamenu-column-1" class="tb-megamenu-column span4 mega-col-nav"> <div class="tb-megamenu-column-inner mega-inner clearfix"> <ul class="tb-megamenu-subnav mega-nav level-1 items-2"> <li data-id="47040" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="/conference/usenixsecurity24/registration-information" > Registration Information </a> </li> <li data-id="47042" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="/conference/usenixsecurity24/registration-discounts" > Registration Discounts </a> </li> </ul> </div> </div> <div data-class="" data-width="4" data-hidewcol="" id="tb-megamenu-column-2" class="tb-megamenu-column span4 mega-col-nav"> <div class="tb-megamenu-column-inner mega-inner clearfix"> <ul class="tb-megamenu-subnav mega-nav level-1 items-1"> <li data-id="47046" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="/conference/usenixsecurity24/grants" > Grant Opportunities </a> </li> </ul> </div> </div> <div data-class="" data-width="4" data-hidewcol="" id="tb-megamenu-column-3" class="tb-megamenu-column span4 mega-col-nav"> <div class="tb-megamenu-column-inner mega-inner clearfix"> <ul class="tb-megamenu-subnav mega-nav level-1 items-1"> <li data-id="47044" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="/conference/usenixsecurity24/venue-hotel-and-travel" > Venue, Hotel, and Travel </a> </li> </ul> </div> </div> </div> </div> </div> </li> <li data-id="46906" data-level="1" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-1 mega dropdown"> <a href="/conference/usenixsecurity24/glance" class="dropdown-toggle"> Program </a> <div data-class="" data-width="" class="tb-megamenu-submenu dropdown-menu mega-dropdown-menu nav-child"> <div class="mega-dropdown-inner"> <div class="tb-megamenu-row row-fluid"> <div data-class="" data-width="4" data-hidewcol="0" id="tb-megamenu-column-4" class="tb-megamenu-column span4 mega-col-nav"> <div class="tb-megamenu-column-inner mega-inner clearfix"> <ul class="tb-megamenu-subnav mega-nav level-1 items-2"> <li data-id="47096" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="/conference/usenixsecurity24/glance" > Program At A Glance </a> </li> <li data-id="47075" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="/conference/usenixsecurity24/technical-sessions" > Technical Sessions </a> </li> </ul> </div> </div> <div data-class="" data-width="4" data-hidewcol="" id="tb-megamenu-column-5" class="tb-megamenu-column span4 mega-col-nav"> <div class="tb-megamenu-column-inner mega-inner clearfix"> <ul class="tb-megamenu-subnav mega-nav level-1 items-2"> <li data-id="46907" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="/conference/usenixsecurity24/summer-accepted-papers" > Summer Accepted Papers </a> </li> <li data-id="47016" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="/conference/usenixsecurity24/fall-accepted-papers" > Fall Accepted Papers </a> </li> </ul> </div> </div> <div data-class="" data-width="4" data-hidewcol="" id="tb-megamenu-column-6" class="tb-megamenu-column span4 mega-col-nav"> <div class="tb-megamenu-column-inner mega-inner clearfix"> <ul class="tb-megamenu-subnav mega-nav level-1 items-2"> <li data-id="47095" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="/conference/usenixsecurity24/activities" > Activities </a> </li> <li data-id="47102" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="/conference/usenixsecurity24/poster-session" > Poster Session </a> </li> </ul> </div> </div> </div> </div> </div> </li> <li data-id="46188" data-level="1" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-1 mega dropdown"> <a href="/conference/usenixsecurity24/call-for-papers" class="dropdown-toggle"> Participation </a> <div data-class="" data-width="" class="tb-megamenu-submenu dropdown-menu mega-dropdown-menu nav-child"> <div class="mega-dropdown-inner"> <div class="tb-megamenu-row row-fluid"> <div data-class="" data-width="4" data-hidewcol="0" id="tb-megamenu-column-7" class="tb-megamenu-column span4 mega-col-nav"> <div class="tb-megamenu-column-inner mega-inner clearfix"> <ul class="tb-megamenu-subnav mega-nav level-1 items-2"> <li data-id="46189" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="/conference/usenixsecurity24/call-for-papers" > Call for Papers </a> </li> <li data-id="46190" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="/conference/usenixsecurity24/submission-policies-and-instructions" > Submission Policies and Instructions </a> </li> </ul> </div> </div> <div data-class="" data-width="4" data-hidewcol="" id="tb-megamenu-column-8" class="tb-megamenu-column span4 mega-col-nav"> <div class="tb-megamenu-column-inner mega-inner clearfix"> <ul class="tb-megamenu-subnav mega-nav level-1 items-1"> <li data-id="46850" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="/conference/usenixsecurity24/call-for-artifacts" > Call for Artifacts </a> </li> </ul> </div> </div> <div data-class="" data-width="4" data-hidewcol="" id="tb-megamenu-column-9" class="tb-megamenu-column span4 mega-col-nav"> <div class="tb-megamenu-column-inner mega-inner clearfix"> <ul class="tb-megamenu-subnav mega-nav level-1 items-1"> <li data-id="46301" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="/conference/usenixsecurity24/instructions-presenters" > Instructions for Presenters </a> </li> </ul> </div> </div> </div> </div> </div> </li> <li data-id="45602" data-level="1" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-1 mega dropdown"> <a href="/conference/usenixsecurity24#sponsors" class="dropdown-toggle"> Sponsors </a> <div data-class="" data-width="" class="tb-megamenu-submenu dropdown-menu mega-dropdown-menu nav-child"> <div class="mega-dropdown-inner"> <div class="tb-megamenu-row row-fluid"> <div data-class="" data-width="" data-hidewcol="0" id="tb-megamenu-column-10" class="tb-megamenu-column span mega-col-nav"> <div class="tb-megamenu-column-inner mega-inner clearfix"> <ul class="tb-megamenu-subnav mega-nav level-1 items-1"> <li data-id="47055" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="/conference/usenixsecurity24/exhibitor-services" > Exhibitor Services </a> </li> </ul> </div> </div> </div> </div> </div> </li> <li data-id="45603" data-level="1" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-1 mega dropdown"> <a href="/conference/usenixsecurity24#marquee" class="dropdown-toggle"> About </a> <div data-class="" data-width="" class="tb-megamenu-submenu dropdown-menu mega-dropdown-menu nav-child"> <div class="mega-dropdown-inner"> <div class="tb-megamenu-row row-fluid"> <div data-class="" data-width="6" data-hidewcol="0" id="tb-megamenu-column-11" class="tb-megamenu-column span6 mega-col-nav"> <div class="tb-megamenu-column-inner mega-inner clearfix"> <ul class="tb-megamenu-subnav mega-nav level-1 items-2"> <li data-id="45604" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="/conference/usenixsecurity24#organizers" > Symposium Organizers </a> </li> <li data-id="45605" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="https://www.usenix.org/conferences/byname/108" > Past Symposia </a> </li> </ul> </div> </div> <div data-class="" data-width="6" data-hidewcol="" id="tb-megamenu-column-12" class="tb-megamenu-column span6 mega-col-nav"> <div class="tb-megamenu-column-inner mega-inner clearfix"> <ul class="tb-megamenu-subnav mega-nav level-1 items-3"> <li data-id="45606" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="https://www.usenix.org/policies" > Conference Policies </a> </li> <li data-id="45607" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="https://www.usenix.org/conferences/coc" > Code of Conduct </a> </li> <li data-id="45608" data-level="2" data-type="menu_item" data-class="" data-xicon="" data-caption="" data-alignsub="" data-group="0" data-hidewcol="0" data-hidesub="0" header_hide="0" footer_hide="0" id="" style="" class="tb-megamenu-item level-2 mega"> <a href="/conference/usenixsecurity24#questions" > Questions </a> </li> </ul> </div> </div> </div> </div> </div> </li> </ul> </div> </div> </div> </section> </div> </div> </header> <main role="main"> <section id="content"> <div class="outer-wrapper"> <h1 id="page-title">PURE: Payments with UWB RElay-protection</h1> </div> <div class="outer-wrapper"> </div> <div class="block-content"> <article id="node-298223" class="node node-paper view-mode-full"> <div class="content"> <div class="field field-name-field-paper-people-text field-type-text-long field-label-above"><div class="field-label">Authors: </div><div class="field-items"><div class="field-item odd"><p>Daniele Coppola, Giovanni Camurati, Claudio Anliker, Xenia Hofmeier, Patrick Schaller, David Basin, and Srdjan Capkun, <em>ETH Zurich</em></p> <p style="font-weight: 600; font-style: italic;">Distinguished Paper Award Winner</p></div></div></div><div class="field field-name-field-paper-description field-type-text-long field-label-above"><div class="field-label">Abstract: </div><div class="field-items"><div class="field-item odd"><p>Contactless payments are now widely used and are expected to reach $10 trillion worth of transactions by 2027. Although convenient, contactless payments are vulnerable to relay attacks that enable attackers to execute fraudulent payments. A number of countermeasures have been proposed to address this issue, including Mastercard's relay protection mechanism. These countermeasures, although effective against some Commercial off-the-shelf (COTS) relays, fail to prevent physical-layer relay attacks.</p> <p>In this work, we leverage the Ultra-Wide Band (UWB) radios incorporated in major smartphones, smartwatches, tags and accessories, and introduce PURE, the first UWB-based relay protection that integrates smoothly into existing contactless payment standards, and prevents even the most sophisticated physical layer attacks. PURE extends EMV payment protocols that are executed between cards and terminals, and does not require any modification to the backend of the issuer, acquirer, or payment network. PURE further tailors UWB ranging to the payment environment (i.e., wireless channels) to achieve both reliability and resistance to all known physical-layer distance reduction attacks against UWB 802.15.4z. We implement PURE within the EMV standard on modern smartphones, and evaluate its performance in a realistic deployment. Our experiments show that PURE provides a sub-meter relay protection with minimal execution overhead (41 ms). We formally verify the security of PURE's integration within Mastercard's EMV protocol using the Tamarin prover.</p></div></div></div><div class="field field-name-field-paper-people field-type-node-reference field-label-hidden"><div class="field-items"><div class="field-item odd"><article id="node-302416" class="node node-speaker view-mode-schedule"> <h2 class="node-title"> <a href="/conference/usenixsecurity24/speaker-or-organizer/daniele-coppola-eth-zurich">Daniele Coppola, ETH Zurich</a></h2> <div class="content"> </div> </article> </div><div class="field-item even"><article id="node-302414" class="node node-speaker view-mode-schedule"> <h2 class="node-title"> <a href="/conference/usenixsecurity24/speaker-or-organizer/giovanni-camurati-eth-zurich">Giovanni Camurati, ETH Zurich</a></h2> <div class="content"> </div> </article> </div><div class="field-item odd"><article id="node-302412" class="node node-speaker view-mode-schedule"> <h2 class="node-title"> <a href="/conference/usenixsecurity24/speaker-or-organizer/claudio-anliker-eth-zurich">Claudio Anliker, ETH Zurich</a></h2> <div class="content"> </div> </article> </div><div class="field-item even"><article id="node-302417" class="node node-speaker view-mode-schedule"> <h2 class="node-title"> <a href="/conference/usenixsecurity24/speaker-or-organizer/xenia-hofmeier-eth-zurich">Xenia Hofmeier, ETH Zurich</a></h2> <div class="content"> </div> </article> </div><div class="field-item odd"><article id="node-302418" class="node node-speaker view-mode-schedule"> <h2 class="node-title"> <a href="/conference/usenixsecurity24/speaker-or-organizer/patrick-schaller-eth-zurich">Patrick Schaller, ETH Zurich</a></h2> <div class="content"> </div> </article> </div><div class="field-item even"><article id="node-302413" class="node node-speaker view-mode-schedule"> <h2 class="node-title"> <a href="/conference/usenixsecurity24/speaker-or-organizer/david-basin-eth-zurich">David Basin, ETH Zurich</a></h2> <div class="content"> </div> </article> </div><div class="field-item odd"><article id="node-302415" class="node node-speaker view-mode-schedule"> <h2 class="node-title"> <a href="/conference/usenixsecurity24/speaker-or-organizer/srdjan-capkun-eth-zurich-2">Srdjan Capkun, ETH Zurich</a></h2> <div class="content"> </div> </article> </div></div></div><div id="node-paper-full-group-open-access-content" class=" group-open-access-content field-group-div"><h2><span>Open Access Media</span></h2><div class="description"><p>USENIX is committed to Open Access to the research presented at our events. Papers and proceedings are freely available to everyone once the event begins. Any video, audio, and/or slides that are posted after the event are also free and open to everyone. <a href="/annual-fund">Support USENIX</a> and our commitment to Open Access.</p> </div><div class="field field-name-field-bibtex-node field-type-node-reference field-label-hidden"><div class="field-items"><div class="field-item odd"><div class="bibtex-accordion"><div class="bibtex-accordion-label">BibTeX</div><div class="bibtex-accordion-content"><div class="bibtex-text-entry bibtex-accordion-text-entry">@inproceedings {298222,<br /> author = {Daniele Coppola and Giovanni Camurati and Claudio Anliker and Xenia Hofmeier and Patrick Schaller and David Basin and Srdjan Capkun},<br /> title = {{PURE}: Payments with {UWB} {RElay-protection}},<br /> booktitle = {33rd USENIX Security Symposium (USENIX Security 24)},<br /> year = {2024},<br /> isbn = {978-1-939133-44-1},<br /> address = {Philadelphia, PA},<br /> pages = {4553--4569},<br /> url = {https://www.usenix.org/conference/usenixsecurity24/presentation/coppola},<br /> publisher = {USENIX Association},<br /> month = aug<br /> }<br /> </div><div class="bibtex-download-link bibtex-accordion-download-link"><a href="/biblio/export/bibtex/298222">Download</a></div></div></div></div></div></div><div class="field field-name-field-final-paper-pdf field-type-file field-label-hidden"><div class="field-items"><div class="field-item odd"><span class="file"><img class="file-icon" alt="PDF icon" title="application/pdf" src="/modules/file/icons/application-pdf.png" /> <a href="https://www.usenix.org/system/files/usenixsecurity24-coppola.pdf" type="application/pdf; length=1484081" title="usenixsecurity24-coppola.pdf">Coppola PDF</a></span></div><div class="field-item even"><span class="file"><img class="file-icon" alt="PDF icon" title="application/pdf" src="/modules/file/icons/application-pdf.png" /> <a href="https://www.usenix.org/system/files/usenixsecurity24-appendix-coppola.pdf" type="application/pdf; length=322665" title="usenixsecurity24-appendix-coppola.pdf">Coppola Appendix PDF</a></span></div></div></div><div class="field field-name-field-presentation-pdf field-type-file field-label-hidden"><div class="field-items"><div class="field-item odd"><span class="file"><img class="file-icon" alt="PDF icon" title="application/pdf" src="/modules/file/icons/application-pdf.png" /> <a href="https://www.usenix.org/system/files/sec24fall-prepub-913-coppola.pdf" type="application/pdf; length=1223490" title="sec24fall-prepub-913-coppola.pdf">Coppola Paper (Prepublication) PDF</a></span></div></div></div><div class="field field-name-field-paper-slides-file field-type-file field-label-hidden"><div class="field-items"><div class="field-item odd"><div class="usenix-files-protected"><img src="https://www.usenix.org/sites/all/modules/usenix/usenix_files/images/usenix-unlocked.png" alt="" /></div><div class="usenix-schedule-slides"><a href="https://www.usenix.org/system/files/usenixsecurity24_slides-coppola.pdf">View the slides</a></div></div></div></div><div class="field field-name-field-artifact-evaluated field-type-taxonomy-term-reference field-label-hidden"><div class="field-items"><div class="field-item odd"><img src="https://www.usenix.org/sites/default/files/usenix_artifact_evaluation_available_125_update.png" width="125" height="125" alt="" title="" /></div><div class="field-item even"><img src="https://www.usenix.org/sites/default/files/usenix_artifact_evaluation_functional_125.png" width="125" height="125" alt="" title="" /></div></div></div><h2 class="field field-name-field-embed-video field-type-video-embed-field field-label-above"><span class="field-label">Presentation Video </span><span class="field-item odd first last"> <div class="embedded-video"> <div class="player"> <iframe class="large-12 medium-12 small-12 columns usenix-schedule-media" width="745" height="420" src="//www.youtube.com/embed/lFApim46gW0?width%3D745%26amp%3Bheight%3D420%26amp%3Btheme%3Ddark%26amp%3Bautoplay%3D0%26amp%3Bvq%3Dhd720%26amp%3Brel%3D0%26amp%3Bshowinfo%3D0%26amp%3Bmodestbranding%3D0%26amp%3Biv_load_policy%3D1%26amp%3Bcontrols%3D1%26amp%3Bautohide%3D2%26amp%3Bwmode%3Dopaque" frameborder="0" allowfullscreen></iframe> </div> </div> </span></h2></div> </div> </article> </div> </section> </main> <footer id="site-footer" role="contentinfo" class="site-footer"> <section class="footer-top"> <section class="block block-usenix-og-auto-menu usenix-og-auto-footer-menu"> <div class="block-content"> <ul class="menu"><li class="first expanded"><a href="/conference/usenixsecurity24#registration">Attend</a><ul class="menu"><li class="first leaf"><a href="/conference/usenixsecurity24/registration-information">Registration Information</a></li> <li class="leaf"><a href="/conference/usenixsecurity24/registration-discounts">Registration Discounts</a></li> <li class="leaf"><a href="/conference/usenixsecurity24/grants">Grant Opportunities</a></li> <li class="last leaf"><a href="/conference/usenixsecurity24/venue-hotel-and-travel">Venue, Hotel, and Travel</a></li> </ul></li> <li class="expanded"><a href="/conference/usenixsecurity24/glance">Program</a><ul class="menu"><li class="first leaf"><a href="/conference/usenixsecurity24/glance">Program At A Glance</a></li> <li class="leaf"><a href="/conference/usenixsecurity24/technical-sessions">Technical Sessions</a></li> <li class="leaf"><a href="/conference/usenixsecurity24/summer-accepted-papers">Summer Accepted Papers</a></li> <li class="leaf"><a href="/conference/usenixsecurity24/fall-accepted-papers">Fall Accepted Papers</a></li> <li class="leaf"><a href="/conference/usenixsecurity24/activities">Activities</a></li> <li class="last leaf"><a href="/conference/usenixsecurity24/poster-session">Poster Session</a></li> </ul></li> <li class="expanded"><a href="/conference/usenixsecurity24/call-for-papers">Participation</a><ul class="menu"><li class="first leaf"><a href="/conference/usenixsecurity24/call-for-papers">Call for Papers</a></li> <li class="leaf"><a href="/conference/usenixsecurity24/submission-policies-and-instructions">Submission Policies and Instructions</a></li> <li class="leaf"><a href="/conference/usenixsecurity24/call-for-artifacts">Call for Artifacts</a></li> <li class="last leaf"><a href="/conference/usenixsecurity24/instructions-presenters">Instructions for Presenters</a></li> </ul></li> <li class="expanded"><a href="/conference/usenixsecurity24#sponsors">Sponsors</a><ul class="menu"><li class="first last leaf"><a href="/conference/usenixsecurity24/exhibitor-services">Exhibitor Services</a></li> </ul></li> <li class="last expanded"><a href="/conference/usenixsecurity24#marquee">About</a><ul class="menu"><li class="first leaf"><a href="/conference/usenixsecurity24#organizers">Symposium Organizers</a></li> <li class="leaf"><a href="https://www.usenix.org/conferences/byname/108">Past Symposia</a></li> <li class="leaf"><a href="https://www.usenix.org/policies">Conference Policies</a></li> <li class="leaf"><a href="https://www.usenix.org/conferences/coc">Code of Conduct</a></li> <li class="last leaf"><a href="/conference/usenixsecurity24#questions">Questions</a></li> </ul></li> </ul></div> </section> </section> <section class="footer-bottom"> <section class="block block-usenix-conference og-conference-social-icon"> <div class="block-content"> <article id="node-285720" class="node node-conference view-mode-social-icon"> <div class="content"> <a href="https://www.linkedin.com/company/usenix-association" target="_blank"><span class="fab fa-linkedin"></span><span class="offscreen">LinkedIn</span></a><a href="https://www.facebook.com/USENIX-Security-Symposium-13544602263" target="_blank"><span class="fab fa-facebook-f"></span><span class="offscreen">Facebook</span></a><a href="http://www.youtube.com/user/USENIXAssociation" target="_blank"><span class="fab fa-youtube"></span><span class="offscreen">Youtube</span></a><a href="http://twitter.com/usenixsecurity" target="_blank"><span class="fab fa-x-twitter"></span><span class="offscreen">Twitter</span></a><a href="https://infosec.exchange/@usenixassociation" target="_blank"><span class="fab fa-mastodon"></span><span class="offscreen">Mastodon</span></a> </div> </article> </div> </section> <section class="block block-menu menu-footer"> <div class="block-content"> <ul class="menu"><li class="first leaf"><a href="/privacy-policy">Privacy Policy</a></li> <li class="last leaf"><a href="/contact">Contact Us</a></li> </ul></div> </section> <section class="block block-block 27"> <div class="block-content"> <div style="padding-top: .25em;"> <p style="color: inherit;">© USENIX <script>new Date().getFullYear()>document.write(new Date().getFullYear());</script></p> </div></div> </section> </section> </footer> </div> <script type="text/javascript">window.NREUM||(NREUM={});NREUM.info={"beacon":"bam.nr-data.net","licenseKey":"d823139095","applicationID":"509444","transactionName":"YVJVZksCXkEEVhIMWFgYYkBQTBodDFsCAE8YR19C","queueTime":0,"applicationTime":14,"atts":"TRVWEAMYTU8=","errorBeacon":"bam.nr-data.net","agent":""}</script></body> </html>