Veröffentlichungen
Security Analysis of XAdES Validation in the CEF Digital Signature Services (DSS)
2019 - Nils Engelbertz, Vladislav Mladenov, Juraj Somorovsky, Nurullah Erinnola, David Herring, Jörg Schwenk
In Search of CurveSwap: Measuring Elliptic Curve Implementations in the Wild
2018 - Luke Valenta, Nick Sullivan, Antonio Sanso
In IEEE European Symposium on Security and Privacy (EuroS&P), 2018 [IEEE Website]Towards Bidirectional Ratcheted Key Exchange
2018 - Bertram Poettering, Paul Rösler
In Advances in Cryptology, IACR CRYPTO 2018 [extended version]Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels
2018 - Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, Jörg Schwenk
27th USENIX Security Symposium (USENIX Security 18) [full version]The Dangers of Key Reuse: Practical Attacks on IPsec IKE
2018 - Dennis Felsch, Martin Grothe, Jörg Schwenk, Adam Czubak, Marcin Szymanek
27th USENIX Security Symposium, August 15–17, 2018, Baltimore, MD, USA [Original Publication] [Video of the Talk] [Paper] [Slides]Return Of Bleichenbacher’s Oracle Threat (ROBOT)
2018 - Hanno Böck, Juraj Somorovsky, Craig Young
27th USENIX Security Symposium (USENIX Security 18) [Attack website]PostScript Undead: Pwning the Web with a 35 Years Old Language
2018 - Jens Müller, Vladislav Mladenov, Dennis Felsch, Jörg Schwenk
Proc. of 21st Symposium on Research in Attacks, Intrusions, and Defenses (RAID), to appear September 2018.Security Analysis of eIDAS – The Cross-Country Authentication Scheme in Europe
2018 - Nils Engelbertz, Nurullah Erinola, David Herring, Vladislav Mladenov, Juraj Somorovsky, Jörg Schwenk
12th USENIX Workshop on Offensive Technologies (WOOT '18) [pdf]Evaluation of eID and Trust Services
2018 - Nils Engelbertz, Nurullah Erinola, David Herring, Juraj Somorovsky, Vladislav Mladenov
[pdf]Attacking Deterministic Signature Schemes using Fault Attacks
2018 - Damian Poddebniak, Juraj Somorovsky, Sebastian Schinzel, Manfred Lochter, Paul Rösler
IEEE European Symposium on Security and Privacy, EuroS&P 2018 [full version]