[{"author":[{"first_name":"Hendrik","last_name":"Siewert","full_name":"Siewert, Hendrik"},{"first_name":"Martin","last_name":"Kretschmer","full_name":"Kretschmer, Martin"},{"full_name":"Niemietz, Marcus","first_name":"Marcus","last_name":"Niemietz"},{"id":"83504","last_name":"Somorovsky","orcid":"0000-0002-3593-7720","first_name":"Juraj","full_name":"Somorovsky, Juraj"}],"status":"public","year":"2022","title":"On the Security of Parsing Security-Relevant HTTP Headers in Modern Browsers","publication_status":"published","date_updated":"2024-05-23T11:01:43Z","_id":"54435","language":[{"iso":"eng"}],"publisher":"IEEE","user_id":"74619","doi":"10.1109/spw54247.2022.9833880","citation":{"short":"H. Siewert, M. Kretschmer, M. Niemietz, J. Somorovsky, in: 2022 IEEE Security and Privacy Workshops (SPW), IEEE, 2022.","chicago":"Siewert, Hendrik, Martin Kretschmer, Marcus Niemietz, and Juraj Somorovsky. “On the Security of Parsing Security-Relevant HTTP Headers in Modern Browsers.” In <i>2022 IEEE Security and Privacy Workshops (SPW)</i>. IEEE, 2022. <a href=\"https://doi.org/10.1109/spw54247.2022.9833880\">https://doi.org/10.1109/spw54247.2022.9833880</a>.","ieee":"H. Siewert, M. Kretschmer, M. Niemietz, and J. Somorovsky, “On the Security of Parsing Security-Relevant HTTP Headers in Modern Browsers,” 2022, doi: <a href=\"https://doi.org/10.1109/spw54247.2022.9833880\">10.1109/spw54247.2022.9833880</a>.","apa":"Siewert, H., Kretschmer, M., Niemietz, M., &#38; Somorovsky, J. (2022). On the Security of Parsing Security-Relevant HTTP Headers in Modern Browsers. <i>2022 IEEE Security and Privacy Workshops (SPW)</i>. <a href=\"https://doi.org/10.1109/spw54247.2022.9833880\">https://doi.org/10.1109/spw54247.2022.9833880</a>","bibtex":"@inproceedings{Siewert_Kretschmer_Niemietz_Somorovsky_2022, title={On the Security of Parsing Security-Relevant HTTP Headers in Modern Browsers}, DOI={<a href=\"https://doi.org/10.1109/spw54247.2022.9833880\">10.1109/spw54247.2022.9833880</a>}, booktitle={2022 IEEE Security and Privacy Workshops (SPW)}, publisher={IEEE}, author={Siewert, Hendrik and Kretschmer, Martin and Niemietz, Marcus and Somorovsky, Juraj}, year={2022} }","ama":"Siewert H, Kretschmer M, Niemietz M, Somorovsky J. On the Security of Parsing Security-Relevant HTTP Headers in Modern Browsers. In: <i>2022 IEEE Security and Privacy Workshops (SPW)</i>. IEEE; 2022. doi:<a href=\"https://doi.org/10.1109/spw54247.2022.9833880\">10.1109/spw54247.2022.9833880</a>","mla":"Siewert, Hendrik, et al. “On the Security of Parsing Security-Relevant HTTP Headers in Modern Browsers.” <i>2022 IEEE Security and Privacy Workshops (SPW)</i>, IEEE, 2022, doi:<a href=\"https://doi.org/10.1109/spw54247.2022.9833880\">10.1109/spw54247.2022.9833880</a>."},"publication":"2022 IEEE Security and Privacy Workshops (SPW)","abstract":[{"lang":"eng","text":"Web browsers are among the most important but also complex software solutions to access the web. It is therefore not surprising that web browsers are an attractive target for attackers. Especially in the last decade, security researchers and browser vendors have developed sandboxing mechanisms like security-relevant HTTP headers to tackle the problem of getting a more secure browser. Although the security community is aware of the importance of security-relevant HTTP headers, legacy applications and individual requests from different parties have led to possible insecure configurations of these headers. Even if specific security headers are configured correctly, conflicts in their functionalities may lead to unforeseen browser behaviors and vulnerabilities. Recently, the first work which analyzed duplicated headers and conflicts in headers was published by Calzavara et al. at USENIX Security [1]. The authors focused on inconsistent protections by using both, the HTTP header X-Frame-Options and the framing protection of the Content-Security-Policy. We extend their work by analyzing browser behaviors when parsing duplicated headers, conflicting directives, and values that do not conform to the defined ABNF metalanguage specification. We created an open-source testbed running over 19,800 test cases, at which nearly 300 test cases are executed in the set of 66 different browsers. Our work shows that browsers conform to the specification and behave securely. However, all tested browsers behave differently when it comes, for example, to parsing the Strict-Transport-Security header. Moreover, Chrome, Safari, and Firefox behave differently if the header contains a character, which is not allowed by the defined ABNF. This results in the protection mechanism being fully enforced, partially enforced, or not enforced and thus completely bypassable."}],"date_created":"2024-05-23T10:49:19Z","department":[{"_id":"632"}],"type":"conference"},{"publication":"30th {USENIX} Security Symposium ({USENIX} Security 21)","citation":{"short":"M. Brinkmann, C. Dresen, R. Merget, D. Poddebniak, J. Müller, J. Somorovsky, J. Schwenk, S. Schinzel, in: 30th {USENIX} Security Symposium ({USENIX} Security 21), {USENIX} Association, 2021, pp. 4293–4310.","chicago":"Brinkmann, Marcus, Christian Dresen, Robert Merget, Damian Poddebniak, Jens Müller, Juraj Somorovsky, Jörg Schwenk, and Sebastian Schinzel. “ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication.” In <i>30th {USENIX} Security Symposium ({USENIX} Security 21)</i>, 4293–4310. {USENIX} Association, 2021.","apa":"Brinkmann, M., Dresen, C., Merget, R., Poddebniak, D., Müller, J., Somorovsky, J., Schwenk, J., &#38; Schinzel, S. (2021). ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication. <i>30th {USENIX} Security Symposium ({USENIX} Security 21)</i>, 4293–4310.","ieee":"M. Brinkmann <i>et al.</i>, “ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication,” in <i>30th {USENIX} Security Symposium ({USENIX} Security 21)</i>, 2021, pp. 4293–4310.","ama":"Brinkmann M, Dresen C, Merget R, et al. ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication. In: <i>30th {USENIX} Security Symposium ({USENIX} Security 21)</i>. {USENIX} Association; 2021:4293-4310.","bibtex":"@inproceedings{Brinkmann_Dresen_Merget_Poddebniak_Müller_Somorovsky_Schwenk_Schinzel_2021, title={ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication}, booktitle={30th {USENIX} Security Symposium ({USENIX} Security 21)}, publisher={{USENIX} Association}, author={Brinkmann, Marcus and Dresen, Christian and Merget, Robert and Poddebniak, Damian and Müller, Jens and Somorovsky, Juraj and Schwenk, Jörg and Schinzel, Sebastian}, year={2021}, pages={4293–4310} }","mla":"Brinkmann, Marcus, et al. “ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication.” <i>30th {USENIX} Security Symposium ({USENIX} Security 21)</i>, {USENIX} Association, 2021, pp. 4293–310."},"date_created":"2021-10-04T18:53:47Z","type":"conference","department":[{"_id":"632"}],"year":"2021","title":"ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication","status":"public","author":[{"full_name":"Brinkmann, Marcus","first_name":"Marcus","last_name":"Brinkmann"},{"first_name":"Christian","last_name":"Dresen","full_name":"Dresen, Christian"},{"last_name":"Merget","first_name":"Robert","full_name":"Merget, Robert"},{"full_name":"Poddebniak, Damian","first_name":"Damian","last_name":"Poddebniak"},{"last_name":"Müller","first_name":"Jens","full_name":"Müller, Jens"},{"full_name":"Somorovsky, Juraj","orcid":"0000-0002-3593-7720","first_name":"Juraj","last_name":"Somorovsky","id":"83504"},{"last_name":"Schwenk","first_name":"Jörg","full_name":"Schwenk, Jörg"},{"first_name":"Sebastian","last_name":"Schinzel","full_name":"Schinzel, Sebastian"}],"publication_identifier":{"isbn":["978-1-939133-24-3"]},"date_updated":"2022-01-06T06:57:01Z","page":"4293-4310","_id":"25331","publisher":"{USENIX} Association","language":[{"iso":"eng"}],"user_id":"83504"},{"date_created":"2021-10-04T18:55:36Z","department":[{"_id":"632"}],"type":"conference","citation":{"ieee":"R. Merget, M. Brinkmann, N. Aviram, J. Somorovsky, J. Mittmann, and J. Schwenk, “Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E),” in <i>30th {USENIX} Security Symposium ({USENIX} Security 21)</i>, 2021, pp. 213–230.","apa":"Merget, R., Brinkmann, M., Aviram, N., Somorovsky, J., Mittmann, J., &#38; Schwenk, J. (2021). Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E). <i>30th {USENIX} Security Symposium ({USENIX} Security 21)</i>, 213–230.","chicago":"Merget, Robert, Marcus Brinkmann, Nimrod Aviram, Juraj Somorovsky, Johannes Mittmann, and Jörg Schwenk. “Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E).” In <i>30th {USENIX} Security Symposium ({USENIX} Security 21)</i>, 213–30. {USENIX} Association, 2021.","short":"R. Merget, M. Brinkmann, N. Aviram, J. Somorovsky, J. Mittmann, J. Schwenk, in: 30th {USENIX} Security Symposium ({USENIX} Security 21), {USENIX} Association, 2021, pp. 213–230.","mla":"Merget, Robert, et al. “Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E).” <i>30th {USENIX} Security Symposium ({USENIX} Security 21)</i>, {USENIX} Association, 2021, pp. 213–30.","bibtex":"@inproceedings{Merget_Brinkmann_Aviram_Somorovsky_Mittmann_Schwenk_2021, title={Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E)}, booktitle={30th {USENIX} Security Symposium ({USENIX} Security 21)}, publisher={{USENIX} Association}, author={Merget, Robert and Brinkmann, Marcus and Aviram, Nimrod and Somorovsky, Juraj and Mittmann, Johannes and Schwenk, Jörg}, year={2021}, pages={213–230} }","ama":"Merget R, Brinkmann M, Aviram N, Somorovsky J, Mittmann J, Schwenk J. Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E). In: <i>30th {USENIX} Security Symposium ({USENIX} Security 21)</i>. {USENIX} Association; 2021:213-230."},"publication":"30th {USENIX} Security Symposium ({USENIX} Security 21)","publisher":"{USENIX} Association","_id":"25332","language":[{"iso":"eng"}],"page":"213-230","user_id":"83504","author":[{"last_name":"Merget","first_name":"Robert","full_name":"Merget, Robert"},{"full_name":"Brinkmann, Marcus","first_name":"Marcus","last_name":"Brinkmann"},{"full_name":"Aviram, Nimrod","first_name":"Nimrod","last_name":"Aviram"},{"first_name":"Juraj","orcid":"0000-0002-3593-7720","last_name":"Somorovsky","full_name":"Somorovsky, Juraj","id":"83504"},{"first_name":"Johannes","last_name":"Mittmann","full_name":"Mittmann, Johannes"},{"full_name":"Schwenk, Jörg","first_name":"Jörg","last_name":"Schwenk"}],"publication_identifier":{"isbn":["978-1-939133-24-3"]},"status":"public","year":"2021","title":"Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E)","date_updated":"2022-01-06T06:57:01Z"},{"citation":{"bibtex":"@article{Drees_Gupta_Hüllermeier_Jager_Konze_Priesterjahn_Ramaswamy_Somorovsky_2021, title={Automated Detection of Side Channels in Cryptographic Protocols: DROWN the ROBOTs!}, journal={14th ACM Workshop on Artificial Intelligence and Security}, author={Drees, Jan Peter and Gupta, Pritha and Hüllermeier, Eyke and Jager, Tibor and Konze, Alexander and Priesterjahn, Claudia and Ramaswamy, Arunselvan and Somorovsky, Juraj}, year={2021} }","ama":"Drees JP, Gupta P, Hüllermeier E, et al. Automated Detection of Side Channels in Cryptographic Protocols: DROWN the ROBOTs! <i>14th ACM Workshop on Artificial Intelligence and Security</i>. Published online 2021.","mla":"Drees, Jan Peter, et al. “Automated Detection of Side Channels in Cryptographic Protocols: DROWN the ROBOTs!” <i>14th ACM Workshop on Artificial Intelligence and Security</i>, 2021.","short":"J.P. Drees, P. Gupta, E. Hüllermeier, T. Jager, A. Konze, C. Priesterjahn, A. Ramaswamy, J. Somorovsky, 14th ACM Workshop on Artificial Intelligence and Security (2021).","chicago":"Drees, Jan Peter, Pritha Gupta, Eyke Hüllermeier, Tibor Jager, Alexander Konze, Claudia Priesterjahn, Arunselvan Ramaswamy, and Juraj Somorovsky. “Automated Detection of Side Channels in Cryptographic Protocols: DROWN the ROBOTs!” <i>14th ACM Workshop on Artificial Intelligence and Security</i>, 2021.","ieee":"J. P. Drees <i>et al.</i>, “Automated Detection of Side Channels in Cryptographic Protocols: DROWN the ROBOTs!,” <i>14th ACM Workshop on Artificial Intelligence and Security</i>, 2021.","apa":"Drees, J. P., Gupta, P., Hüllermeier, E., Jager, T., Konze, A., Priesterjahn, C., Ramaswamy, A., &#38; Somorovsky, J. (2021). Automated Detection of Side Channels in Cryptographic Protocols: DROWN the ROBOTs! <i>14th ACM Workshop on Artificial Intelligence and Security</i>."},"publication":"14th ACM Workshop on Artificial Intelligence and Security","department":[{"_id":"632"}],"type":"journal_article","date_created":"2021-09-10T09:56:27Z","date_updated":"2022-01-06T06:56:08Z","author":[{"first_name":"Jan Peter","last_name":"Drees","full_name":"Drees, Jan Peter"},{"id":"54803","first_name":"Pritha","last_name":"Gupta","full_name":"Gupta, Pritha"},{"id":"48129","first_name":"Eyke","last_name":"Hüllermeier","full_name":"Hüllermeier, Eyke"},{"last_name":"Jager","first_name":"Tibor","full_name":"Jager, Tibor"},{"last_name":"Konze","first_name":"Alexander","full_name":"Konze, Alexander"},{"full_name":"Priesterjahn, Claudia","last_name":"Priesterjahn","first_name":"Claudia"},{"id":"66937","full_name":"Ramaswamy, Arunselvan","orcid":"https://orcid.org/ 0000-0001-7547-8111","first_name":"Arunselvan","last_name":"Ramaswamy"},{"id":"83504","first_name":"Juraj","last_name":"Somorovsky","orcid":"0000-0002-3593-7720","full_name":"Somorovsky, Juraj"}],"status":"public","title":"Automated Detection of Side Channels in Cryptographic Protocols: DROWN the ROBOTs!","year":"2021","user_id":"83504","_id":"24143","language":[{"iso":"eng"}]},{"status":"public","year":"2020","title":"Analysis of DTLS Implementations Using Protocol State Fuzzing","author":[{"last_name":"Fiterau-Brostean","first_name":"Paul","full_name":"Fiterau-Brostean, Paul"},{"last_name":"Jonsson","first_name":"Bengt","full_name":"Jonsson, Bengt"},{"first_name":"Robert","last_name":"Merget","full_name":"Merget, Robert"},{"first_name":"Joeri","last_name":"de Ruiter","full_name":"de Ruiter, Joeri"},{"full_name":"Sagonas, Konstantinos","first_name":"Konstantinos","last_name":"Sagonas"},{"id":"83504","full_name":"Somorovsky, Juraj","last_name":"Somorovsky","first_name":"Juraj","orcid":"0000-0002-3593-7720"}],"publication_identifier":{"isbn":["978-1-939133-17-5"]},"date_updated":"2022-01-06T06:57:01Z","page":"2523-2540","_id":"25334","language":[{"iso":"eng"}],"publisher":"{USENIX} Association","user_id":"83504","publication":"29th {USENIX} Security Symposium ({USENIX} Security 20)","citation":{"bibtex":"@inproceedings{Fiterau-Brostean_Jonsson_Merget_de Ruiter_Sagonas_Somorovsky_2020, title={Analysis of DTLS Implementations Using Protocol State Fuzzing}, booktitle={29th {USENIX} Security Symposium ({USENIX} Security 20)}, publisher={{USENIX} Association}, author={Fiterau-Brostean, Paul and Jonsson, Bengt and Merget, Robert and de Ruiter, Joeri and Sagonas, Konstantinos and Somorovsky, Juraj}, year={2020}, pages={2523–2540} }","ama":"Fiterau-Brostean P, Jonsson B, Merget R, de Ruiter J, Sagonas K, Somorovsky J. Analysis of DTLS Implementations Using Protocol State Fuzzing. In: <i>29th {USENIX} Security Symposium ({USENIX} Security 20)</i>. {USENIX} Association; 2020:2523-2540.","mla":"Fiterau-Brostean, Paul, et al. “Analysis of DTLS Implementations Using Protocol State Fuzzing.” <i>29th {USENIX} Security Symposium ({USENIX} Security 20)</i>, {USENIX} Association, 2020, pp. 2523–40.","chicago":"Fiterau-Brostean, Paul, Bengt Jonsson, Robert Merget, Joeri de Ruiter, Konstantinos Sagonas, and Juraj Somorovsky. “Analysis of DTLS Implementations Using Protocol State Fuzzing.” In <i>29th {USENIX} Security Symposium ({USENIX} Security 20)</i>, 2523–40. {USENIX} Association, 2020.","short":"P. Fiterau-Brostean, B. Jonsson, R. Merget, J. de Ruiter, K. Sagonas, J. Somorovsky, in: 29th {USENIX} Security Symposium ({USENIX} Security 20), {USENIX} Association, 2020, pp. 2523–2540.","ieee":"P. Fiterau-Brostean, B. Jonsson, R. Merget, J. de Ruiter, K. Sagonas, and J. Somorovsky, “Analysis of DTLS Implementations Using Protocol State Fuzzing,” in <i>29th {USENIX} Security Symposium ({USENIX} Security 20)</i>, 2020, pp. 2523–2540.","apa":"Fiterau-Brostean, P., Jonsson, B., Merget, R., de Ruiter, J., Sagonas, K., &#38; Somorovsky, J. (2020). Analysis of DTLS Implementations Using Protocol State Fuzzing. <i>29th {USENIX} Security Symposium ({USENIX} Security 20)</i>, 2523–2540."},"date_created":"2021-10-04T18:56:41Z","type":"conference","department":[{"_id":"632"}]},{"publication_status":"published","date_updated":"2022-08-03T09:57:27Z","author":[{"full_name":"Schwenk, Jörg","last_name":"Schwenk","first_name":"Jörg"},{"last_name":"Brinkmann","first_name":"Marcus","full_name":"Brinkmann, Marcus"},{"full_name":"Poddebniak, Damian","first_name":"Damian","last_name":"Poddebniak"},{"full_name":"Müller, Jens","first_name":"Jens","last_name":"Müller"},{"id":"83504","first_name":"Juraj","last_name":"Somorovsky","orcid":"0000-0002-3593-7720","full_name":"Somorovsky, Juraj"},{"full_name":"Schinzel, Sebastian","last_name":"Schinzel","first_name":"Sebastian"}],"publication_identifier":{"isbn":["9781450370899"]},"title":"Mitigation of Attacks on Email End-to-End Encryption","year":"2020","doi":"10.1145/3372297.3417878","language":[{"iso":"eng"}],"series_title":"CCS '20","abstract":[{"lang":"eng","text":"OpenPGP and S/MIME are two major standards for securing email communication introduced in the early 1990s. Three recent classes of attacks exploit weak cipher modes (EFAIL Malleability Gadgets, or EFAIL-MG), the flexibility of the MIME email structure (EFAIL Direct Exfiltration, or EFAIL-DE), and the Reply action of the email client (REPLY attacks). Although all three break message confidentiality by using standardized email features, only EFAIL-MG has been mitigated in IETF standards with the introduction of AEAD algorithms. So far, no uniform and reliable countermeasures have been adopted by email clients to prevent EFAIL-DE and REPLY attacks. Instead, email clients implement a variety of different ad-hoc countermeasures which are only partially effective, cause interoperability problems, and fragment the secure email ecosystem.We present the first generic countermeasure against both REPLY and EFAIL-DE attacks by checking the decryption context including SMTP headers and MIME structure during decryption. The decryption context is encoded into a string DC and used as Associated Data (AD) in the AEAD encryption. Thus the proposed solution seamlessly extends the EFAIL-MG countermeasures. The decryption context changes whenever an attacker alters the email source code in a critical way, for example, if the attacker changes the MIME structure or adds a new Reply-To header. The proposed solution does not cause any interoperability problems and legacy emails can still be decrypted. We evaluate our approach by implementing the decryption contexts in Thunderbird/Enigmail and by verifying their correct functionality after the email has been transported over all major email providers, including Gmail and iCloud Mail."}],"publication":"Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security","department":[{"_id":"632"}],"keyword":["decryption contexts","EFAIL","OpenPGP","S/MIME","AEAD"],"type":"conference","date_created":"2021-10-04T18:58:37Z","status":"public","user_id":"83504","publisher":"Association for Computing Machinery","_id":"25336","page":"1647–1664","citation":{"ama":"Schwenk J, Brinkmann M, Poddebniak D, Müller J, Somorovsky J, Schinzel S. Mitigation of Attacks on Email End-to-End Encryption. In: <i>Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security</i>. CCS ’20. Association for Computing Machinery; 2020:1647–1664. doi:<a href=\"https://doi.org/10.1145/3372297.3417878\">10.1145/3372297.3417878</a>","bibtex":"@inproceedings{Schwenk_Brinkmann_Poddebniak_Müller_Somorovsky_Schinzel_2020, place={New York, NY, USA}, series={CCS ’20}, title={Mitigation of Attacks on Email End-to-End Encryption}, DOI={<a href=\"https://doi.org/10.1145/3372297.3417878\">10.1145/3372297.3417878</a>}, booktitle={Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security}, publisher={Association for Computing Machinery}, author={Schwenk, Jörg and Brinkmann, Marcus and Poddebniak, Damian and Müller, Jens and Somorovsky, Juraj and Schinzel, Sebastian}, year={2020}, pages={1647–1664}, collection={CCS ’20} }","mla":"Schwenk, Jörg, et al. “Mitigation of Attacks on Email End-to-End Encryption.” <i>Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security</i>, Association for Computing Machinery, 2020, pp. 1647–1664, doi:<a href=\"https://doi.org/10.1145/3372297.3417878\">10.1145/3372297.3417878</a>.","chicago":"Schwenk, Jörg, Marcus Brinkmann, Damian Poddebniak, Jens Müller, Juraj Somorovsky, and Sebastian Schinzel. “Mitigation of Attacks on Email End-to-End Encryption.” In <i>Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security</i>, 1647–1664. CCS ’20. New York, NY, USA: Association for Computing Machinery, 2020. <a href=\"https://doi.org/10.1145/3372297.3417878\">https://doi.org/10.1145/3372297.3417878</a>.","short":"J. Schwenk, M. Brinkmann, D. Poddebniak, J. Müller, J. Somorovsky, S. Schinzel, in: Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security, Association for Computing Machinery, New York, NY, USA, 2020, pp. 1647–1664.","apa":"Schwenk, J., Brinkmann, M., Poddebniak, D., Müller, J., Somorovsky, J., &#38; Schinzel, S. (2020). Mitigation of Attacks on Email End-to-End Encryption. <i>Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security</i>, 1647–1664. <a href=\"https://doi.org/10.1145/3372297.3417878\">https://doi.org/10.1145/3372297.3417878</a>","ieee":"J. Schwenk, M. Brinkmann, D. Poddebniak, J. Müller, J. Somorovsky, and S. Schinzel, “Mitigation of Attacks on Email End-to-End Encryption,” in <i>Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security</i>, 2020, pp. 1647–1664, doi: <a href=\"https://doi.org/10.1145/3372297.3417878\">10.1145/3372297.3417878</a>."},"place":"New York, NY, USA"},{"type":"conference","oa":"1","place":"Santa Clara, CA","date_created":"2020-02-15T09:50:57Z","publication":"28th {USENIX} Security Symposium ({USENIX} Security 19)","citation":{"ama":"Müller J, Brinkmann M, Poddebniak D, et al. “Johnny, you are fired!” -- Spoofing OpenPGP and S/MIME Signatures in Emails. In: <i>28th {USENIX} Security Symposium ({USENIX} Security 19)</i>. Santa Clara, CA: {USENIX} Association; 2019:1011-1028.","bibtex":"@inproceedings{Müller_Brinkmann_Poddebniak_Böck_Schinzel_Somorovsky_Schwenk_2019, place={Santa Clara, CA}, title={“Johnny, you are fired!” -- Spoofing OpenPGP and S/MIME Signatures in Emails}, booktitle={28th {USENIX} Security Symposium ({USENIX} Security 19)}, publisher={{USENIX} Association}, author={Müller, Jens and Brinkmann, Marcus and Poddebniak, Damian and Böck, Hanno and Schinzel, Sebastian and Somorovsky, Juraj and Schwenk, Jörg}, year={2019}, pages={1011–1028} }","mla":"Müller, Jens, et al. “‘Johnny, You Are Fired!’ -- Spoofing OpenPGP and S/MIME Signatures in Emails.” <i>28th {USENIX} Security Symposium ({USENIX} Security 19)</i>, {USENIX} Association, 2019, pp. 1011–28.","short":"J. Müller, M. Brinkmann, D. Poddebniak, H. Böck, S. Schinzel, J. Somorovsky, J. Schwenk, in: 28th {USENIX} Security Symposium ({USENIX} Security 19), {USENIX} Association, Santa Clara, CA, 2019, pp. 1011–1028.","chicago":"Müller, Jens, Marcus Brinkmann, Damian Poddebniak, Hanno Böck, Sebastian Schinzel, Juraj Somorovsky, and Jörg Schwenk. “‘Johnny, You Are Fired!’ -- Spoofing OpenPGP and S/MIME Signatures in Emails.” In <i>28th {USENIX} Security Symposium ({USENIX} Security 19)</i>, 1011–28. Santa Clara, CA: {USENIX} Association, 2019.","apa":"Müller, J., Brinkmann, M., Poddebniak, D., Böck, H., Schinzel, S., Somorovsky, J., &#38; Schwenk, J. (2019). “Johnny, you are fired!” -- Spoofing OpenPGP and S/MIME Signatures in Emails. In <i>28th {USENIX} Security Symposium ({USENIX} Security 19)</i> (pp. 1011–1028). Santa Clara, CA: {USENIX} Association.","ieee":"J. Müller <i>et al.</i>, “‘Johnny, you are fired!’ -- Spoofing OpenPGP and S/MIME Signatures in Emails,” in <i>28th {USENIX} Security Symposium ({USENIX} Security 19)</i>, 2019, pp. 1011–1028."},"user_id":"83504","page":"1011-1028","main_file_link":[{"open_access":"1","url":"https://www.usenix.org/conference/usenixsecurity19/presentation/muller"}],"language":[{"iso":"eng"}],"_id":"15908","publisher":"{USENIX} Association","date_updated":"2022-01-06T06:52:40Z","year":"2019","status":"public","title":"\"Johnny, you are fired!\" -- Spoofing OpenPGP and S/MIME Signatures in Emails","author":[{"full_name":"Müller, Jens","last_name":"Müller","first_name":"Jens"},{"full_name":"Brinkmann, Marcus","first_name":"Marcus","last_name":"Brinkmann"},{"full_name":"Poddebniak, Damian","first_name":"Damian","last_name":"Poddebniak"},{"full_name":"Böck, Hanno","last_name":"Böck","first_name":"Hanno"},{"last_name":"Schinzel","first_name":"Sebastian","full_name":"Schinzel, Sebastian"},{"first_name":"Juraj","last_name":"Somorovsky","orcid":"0000-0002-3593-7720","full_name":"Somorovsky, Juraj","id":"83504"},{"full_name":"Schwenk, Jörg","first_name":"Jörg","last_name":"Schwenk"}],"publication_identifier":{"isbn":["978-1-939133-06-9"]}},{"publication":"28th {USENIX} Security Symposium ({USENIX} Security 19)","citation":{"bibtex":"@inproceedings{Merget_Somorovsky_Aviram_Young_Fliegenschmidt_Schwenk_Shavitt_2019, place={Santa Clara, CA}, title={Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities}, booktitle={28th {USENIX} Security Symposium ({USENIX} Security 19)}, publisher={{USENIX} Association}, author={Merget, Robert and Somorovsky, Juraj and Aviram, Nimrod and Young, Craig and Fliegenschmidt, Janis and Schwenk, Jörg and Shavitt, Yuval}, year={2019}, pages={1029–1046} }","ama":"Merget R, Somorovsky J, Aviram N, et al. Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities. In: <i>28th {USENIX} Security Symposium ({USENIX} Security 19)</i>. Santa Clara, CA: {USENIX} Association; 2019:1029-1046.","mla":"Merget, Robert, et al. “Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities.” <i>28th {USENIX} Security Symposium ({USENIX} Security 19)</i>, {USENIX} Association, 2019, pp. 1029–46.","chicago":"Merget, Robert, Juraj Somorovsky, Nimrod Aviram, Craig Young, Janis Fliegenschmidt, Jörg Schwenk, and Yuval Shavitt. “Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities.” In <i>28th {USENIX} Security Symposium ({USENIX} Security 19)</i>, 1029–46. Santa Clara, CA: {USENIX} Association, 2019.","short":"R. Merget, J. Somorovsky, N. Aviram, C. Young, J. Fliegenschmidt, J. Schwenk, Y. Shavitt, in: 28th {USENIX} Security Symposium ({USENIX} Security 19), {USENIX} Association, Santa Clara, CA, 2019, pp. 1029–1046.","ieee":"R. Merget <i>et al.</i>, “Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities,” in <i>28th {USENIX} Security Symposium ({USENIX} Security 19)</i>, 2019, pp. 1029–1046.","apa":"Merget, R., Somorovsky, J., Aviram, N., Young, C., Fliegenschmidt, J., Schwenk, J., &#38; Shavitt, Y. (2019). Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities. In <i>28th {USENIX} Security Symposium ({USENIX} Security 19)</i> (pp. 1029–1046). Santa Clara, CA: {USENIX} Association."},"type":"conference","oa":"1","place":"Santa Clara, CA","date_created":"2020-02-15T09:51:09Z","date_updated":"2022-01-06T06:52:40Z","year":"2019","status":"public","title":"Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities","publication_identifier":{"isbn":["978-1-939133-06-9"]},"author":[{"first_name":"Robert","last_name":"Merget","full_name":"Merget, Robert"},{"full_name":"Somorovsky, Juraj","first_name":"Juraj","last_name":"Somorovsky","orcid":"0000-0002-3593-7720","id":"83504"},{"first_name":"Nimrod","last_name":"Aviram","full_name":"Aviram, Nimrod"},{"first_name":"Craig","last_name":"Young","full_name":"Young, Craig"},{"first_name":"Janis","last_name":"Fliegenschmidt","full_name":"Fliegenschmidt, Janis"},{"full_name":"Schwenk, Jörg","first_name":"Jörg","last_name":"Schwenk"},{"last_name":"Shavitt","first_name":"Yuval","full_name":"Shavitt, Yuval"}],"user_id":"83504","page":"1029-1046","main_file_link":[{"open_access":"1","url":"https://www.usenix.org/conference/usenixsecurity19/presentation/merget"}],"_id":"15909","language":[{"iso":"eng"}],"publisher":"{USENIX} Association"},{"author":[{"full_name":"Engelbertz, Nils","last_name":"Engelbertz","first_name":"Nils"},{"full_name":"Mladenov, Vladislav","first_name":"Vladislav","last_name":"Mladenov"},{"id":"83504","first_name":"Juraj","orcid":"0000-0002-3593-7720","last_name":"Somorovsky","full_name":"Somorovsky, Juraj"},{"first_name":"David","last_name":"Herring","full_name":"Herring, David"},{"first_name":"Nurullah","last_name":"Erinola","full_name":"Erinola, Nurullah"},{"full_name":"Schwenk, Jörg","last_name":"Schwenk","first_name":"Jörg"}],"year":"2019","status":"public","title":"Security Analysis of XAdES Validation in the CEF Digital Signature Services (DSS)","date_updated":"2022-01-06T06:52:40Z","publisher":"Gesellschaft für Informatik, Bonn","_id":"15910","language":[{"iso":"eng"}],"page":" 95-106 ","editor":[{"last_name":"Roßnagel","first_name":"Heiko","full_name":"Roßnagel, Heiko"},{"full_name":"Wagner, Sven","first_name":"Sven","last_name":"Wagner"},{"last_name":"Hühnlein","first_name":"Detlef","full_name":"Hühnlein, Detlef"}],"user_id":"83504","citation":{"mla":"Engelbertz, Nils, et al. “Security Analysis of XAdES Validation in the CEF Digital Signature Services (DSS).” <i>Open Identity Summit 2019</i>, edited by Heiko Roßnagel et al., Gesellschaft für Informatik, Bonn, 2019, pp. 95–106.","ama":"Engelbertz N, Mladenov V, Somorovsky J, Herring D, Erinola N, Schwenk J. Security Analysis of XAdES Validation in the CEF Digital Signature Services (DSS). In: Roßnagel H, Wagner S, Hühnlein D, eds. <i>Open Identity Summit 2019</i>. Gesellschaft für Informatik, Bonn; 2019:95-106.","bibtex":"@inproceedings{Engelbertz_Mladenov_Somorovsky_Herring_Erinola_Schwenk_2019, title={Security Analysis of XAdES Validation in the CEF Digital Signature Services (DSS)}, booktitle={Open Identity Summit 2019}, publisher={Gesellschaft für Informatik, Bonn}, author={Engelbertz, Nils and Mladenov, Vladislav and Somorovsky, Juraj and Herring, David and Erinola, Nurullah and Schwenk, Jörg}, editor={Roßnagel, Heiko and Wagner, Sven and Hühnlein, DetlefEditors}, year={2019}, pages={95–106} }","apa":"Engelbertz, N., Mladenov, V., Somorovsky, J., Herring, D., Erinola, N., &#38; Schwenk, J. (2019). Security Analysis of XAdES Validation in the CEF Digital Signature Services (DSS). In H. Roßnagel, S. Wagner, &#38; D. Hühnlein (Eds.), <i>Open Identity Summit 2019</i> (pp. 95–106). Gesellschaft für Informatik, Bonn.","ieee":"N. Engelbertz, V. Mladenov, J. Somorovsky, D. Herring, N. Erinola, and J. Schwenk, “Security Analysis of XAdES Validation in the CEF Digital Signature Services (DSS),” in <i>Open Identity Summit 2019</i>, 2019, pp. 95–106.","chicago":"Engelbertz, Nils, Vladislav Mladenov, Juraj Somorovsky, David Herring, Nurullah Erinola, and Jörg Schwenk. “Security Analysis of XAdES Validation in the CEF Digital Signature Services (DSS).” In <i>Open Identity Summit 2019</i>, edited by Heiko Roßnagel, Sven Wagner, and Detlef Hühnlein, 95–106. Gesellschaft für Informatik, Bonn, 2019.","short":"N. Engelbertz, V. Mladenov, J. Somorovsky, D. Herring, N. Erinola, J. Schwenk, in: H. Roßnagel, S. Wagner, D. Hühnlein (Eds.), Open Identity Summit 2019, Gesellschaft für Informatik, Bonn, 2019, pp. 95–106."},"publication":"Open Identity Summit 2019","date_created":"2020-02-15T10:01:05Z","type":"conference"},{"publication_status":"published","date_updated":"2022-01-06T06:52:39Z","status":"public","year":"2018","title":"Prime and Prejudice: Primality Testing Under Adversarial Conditions","author":[{"full_name":"Albrecht, Martin R.","last_name":"Albrecht","first_name":"Martin R."},{"full_name":"Massimo, Jake","last_name":"Massimo","first_name":"Jake"},{"last_name":"Paterson","first_name":"Kenneth G.","full_name":"Paterson, Kenneth G."},{"full_name":"Somorovsky, Juraj","orcid":"0000-0002-3593-7720","first_name":"Juraj","last_name":"Somorovsky","id":"83504"}],"publication_identifier":{"isbn":["9781450356930"]},"user_id":"83504","doi":"10.1145/3243734.3243787","main_file_link":[{"url":"https://eprint.iacr.org/2018/749"}],"_id":"15892","language":[{"iso":"eng"}],"extern":"1","publication":"Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security","citation":{"mla":"Albrecht, Martin R., et al. “Prime and Prejudice: Primality Testing Under Adversarial Conditions.” <i>Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security</i>, 2018, doi:<a href=\"https://doi.org/10.1145/3243734.3243787\">10.1145/3243734.3243787</a>.","ama":"Albrecht MR, Massimo J, Paterson KG, Somorovsky J. Prime and Prejudice: Primality Testing Under Adversarial Conditions. In: <i>Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security</i>. ; 2018. doi:<a href=\"https://doi.org/10.1145/3243734.3243787\">10.1145/3243734.3243787</a>","bibtex":"@inproceedings{Albrecht_Massimo_Paterson_Somorovsky_2018, title={Prime and Prejudice: Primality Testing Under Adversarial Conditions}, DOI={<a href=\"https://doi.org/10.1145/3243734.3243787\">10.1145/3243734.3243787</a>}, booktitle={Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security}, author={Albrecht, Martin R. and Massimo, Jake and Paterson, Kenneth G. and Somorovsky, Juraj}, year={2018} }","apa":"Albrecht, M. R., Massimo, J., Paterson, K. G., &#38; Somorovsky, J. (2018). Prime and Prejudice: Primality Testing Under Adversarial Conditions. In <i>Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security</i>. <a href=\"https://doi.org/10.1145/3243734.3243787\">https://doi.org/10.1145/3243734.3243787</a>","ieee":"M. R. Albrecht, J. Massimo, K. G. Paterson, and J. Somorovsky, “Prime and Prejudice: Primality Testing Under Adversarial Conditions,” in <i>Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security</i>, 2018.","chicago":"Albrecht, Martin R., Jake Massimo, Kenneth G. Paterson, and Juraj Somorovsky. “Prime and Prejudice: Primality Testing Under Adversarial Conditions.” In <i>Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security</i>, 2018. <a href=\"https://doi.org/10.1145/3243734.3243787\">https://doi.org/10.1145/3243734.3243787</a>.","short":"M.R. Albrecht, J. Massimo, K.G. Paterson, J. Somorovsky, in: Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, 2018."},"type":"conference","date_created":"2020-02-15T09:34:47Z"},{"citation":{"short":"D. Poddebniak, J. Somorovsky, S. Schinzel, M. Lochter, P. Rosler, in: 2018 IEEE European Symposium on Security and Privacy (EuroS&#38;P), 2018.","chicago":"Poddebniak, Damian, Juraj Somorovsky, Sebastian Schinzel, Manfred Lochter, and Paul Rosler. “Attacking Deterministic Signature Schemes Using Fault Attacks.” In <i>2018 IEEE European Symposium on Security and Privacy (EuroS&#38;P)</i>, 2018. <a href=\"https://doi.org/10.1109/eurosp.2018.00031\">https://doi.org/10.1109/eurosp.2018.00031</a>.","ieee":"D. Poddebniak, J. Somorovsky, S. Schinzel, M. Lochter, and P. Rosler, “Attacking Deterministic Signature Schemes Using Fault Attacks,” in <i>2018 IEEE European Symposium on Security and Privacy (EuroS&#38;P)</i>, 2018.","apa":"Poddebniak, D., Somorovsky, J., Schinzel, S., Lochter, M., &#38; Rosler, P. (2018). Attacking Deterministic Signature Schemes Using Fault Attacks. In <i>2018 IEEE European Symposium on Security and Privacy (EuroS&#38;P)</i>. <a href=\"https://doi.org/10.1109/eurosp.2018.00031\">https://doi.org/10.1109/eurosp.2018.00031</a>","bibtex":"@inproceedings{Poddebniak_Somorovsky_Schinzel_Lochter_Rosler_2018, title={Attacking Deterministic Signature Schemes Using Fault Attacks}, DOI={<a href=\"https://doi.org/10.1109/eurosp.2018.00031\">10.1109/eurosp.2018.00031</a>}, booktitle={2018 IEEE European Symposium on Security and Privacy (EuroS&#38;P)}, author={Poddebniak, Damian and Somorovsky, Juraj and Schinzel, Sebastian and Lochter, Manfred and Rosler, Paul}, year={2018} }","ama":"Poddebniak D, Somorovsky J, Schinzel S, Lochter M, Rosler P. Attacking Deterministic Signature Schemes Using Fault Attacks. In: <i>2018 IEEE European Symposium on Security and Privacy (EuroS&#38;P)</i>. ; 2018. doi:<a href=\"https://doi.org/10.1109/eurosp.2018.00031\">10.1109/eurosp.2018.00031</a>","mla":"Poddebniak, Damian, et al. “Attacking Deterministic Signature Schemes Using Fault Attacks.” <i>2018 IEEE European Symposium on Security and Privacy (EuroS&#38;P)</i>, 2018, doi:<a href=\"https://doi.org/10.1109/eurosp.2018.00031\">10.1109/eurosp.2018.00031</a>."},"publication":"2018 IEEE European Symposium on Security and Privacy (EuroS&P)","type":"conference","date_created":"2020-02-15T09:35:53Z","publication_status":"published","date_updated":"2022-01-06T06:52:39Z","author":[{"last_name":"Poddebniak","first_name":"Damian","full_name":"Poddebniak, Damian"},{"id":"83504","last_name":"Somorovsky","orcid":"0000-0002-3593-7720","first_name":"Juraj","full_name":"Somorovsky, Juraj"},{"full_name":"Schinzel, Sebastian","last_name":"Schinzel","first_name":"Sebastian"},{"full_name":"Lochter, Manfred","last_name":"Lochter","first_name":"Manfred"},{"full_name":"Rosler, Paul","first_name":"Paul","last_name":"Rosler"}],"publication_identifier":{"isbn":["9781538642283"]},"year":"2018","title":"Attacking Deterministic Signature Schemes Using Fault Attacks","status":"public","user_id":"83504","doi":"10.1109/eurosp.2018.00031","_id":"15893","language":[{"iso":"eng"}]},{"citation":{"bibtex":"@inproceedings{Detering_Somorovsky_Mainka_Mladenov_Schwenk_2018, title={On The (In-)Security Of JavaScript Object Signing And Encryption}, DOI={<a href=\"https://doi.org/10.1145/3150376.3150379\">10.1145/3150376.3150379</a>}, booktitle={Proceedings of the 1st Reversing and Offensive-oriented Trends Symposium on - ROOTS}, author={Detering, Dennis and Somorovsky, Juraj and Mainka, Christian and Mladenov, Vladislav and Schwenk, Jörg}, year={2018} }","ama":"Detering D, Somorovsky J, Mainka C, Mladenov V, Schwenk J. On The (In-)Security Of JavaScript Object Signing And Encryption. In: <i>Proceedings of the 1st Reversing and Offensive-Oriented Trends Symposium on - ROOTS</i>. ; 2018. doi:<a href=\"https://doi.org/10.1145/3150376.3150379\">10.1145/3150376.3150379</a>","mla":"Detering, Dennis, et al. “On The (In-)Security Of JavaScript Object Signing And Encryption.” <i>Proceedings of the 1st Reversing and Offensive-Oriented Trends Symposium on - ROOTS</i>, 2018, doi:<a href=\"https://doi.org/10.1145/3150376.3150379\">10.1145/3150376.3150379</a>.","short":"D. Detering, J. Somorovsky, C. Mainka, V. Mladenov, J. Schwenk, in: Proceedings of the 1st Reversing and Offensive-Oriented Trends Symposium on - ROOTS, 2018.","chicago":"Detering, Dennis, Juraj Somorovsky, Christian Mainka, Vladislav Mladenov, and Jörg Schwenk. “On The (In-)Security Of JavaScript Object Signing And Encryption.” In <i>Proceedings of the 1st Reversing and Offensive-Oriented Trends Symposium on - ROOTS</i>, 2018. <a href=\"https://doi.org/10.1145/3150376.3150379\">https://doi.org/10.1145/3150376.3150379</a>.","ieee":"D. Detering, J. Somorovsky, C. Mainka, V. Mladenov, and J. Schwenk, “On The (In-)Security Of JavaScript Object Signing And Encryption,” in <i>Proceedings of the 1st Reversing and Offensive-oriented Trends Symposium on - ROOTS</i>, 2018.","apa":"Detering, D., Somorovsky, J., Mainka, C., Mladenov, V., &#38; Schwenk, J. (2018). On The (In-)Security Of JavaScript Object Signing And Encryption. In <i>Proceedings of the 1st Reversing and Offensive-oriented Trends Symposium on - ROOTS</i>. <a href=\"https://doi.org/10.1145/3150376.3150379\">https://doi.org/10.1145/3150376.3150379</a>"},"publication":"Proceedings of the 1st Reversing and Offensive-oriented Trends Symposium on - ROOTS","date_created":"2020-02-15T09:36:33Z","type":"conference","author":[{"full_name":"Detering, Dennis","last_name":"Detering","first_name":"Dennis"},{"full_name":"Somorovsky, Juraj","first_name":"Juraj","last_name":"Somorovsky","orcid":"0000-0002-3593-7720","id":"83504"},{"first_name":"Christian","last_name":"Mainka","full_name":"Mainka, Christian"},{"full_name":"Mladenov, Vladislav","last_name":"Mladenov","first_name":"Vladislav"},{"first_name":"Jörg","last_name":"Schwenk","full_name":"Schwenk, Jörg"}],"publication_identifier":{"isbn":["9781450353212"]},"status":"public","year":"2018","title":"On The (In-)Security Of JavaScript Object Signing And Encryption","publication_status":"published","date_updated":"2022-01-06T06:52:39Z","language":[{"iso":"eng"}],"_id":"15894","user_id":"83504","doi":"10.1145/3150376.3150379"},{"publication_identifier":{"isbn":["978-1-939133-04-5"]},"author":[{"last_name":"Poddebniak","first_name":"Damian","full_name":"Poddebniak, Damian"},{"last_name":"Dresen","first_name":"Christian","full_name":"Dresen, Christian"},{"last_name":"Müller","first_name":"Jens","full_name":"Müller, Jens"},{"last_name":"Ising","first_name":"Fabian","full_name":"Ising, Fabian"},{"full_name":"Schinzel, Sebastian","first_name":"Sebastian","last_name":"Schinzel"},{"first_name":"Simon","last_name":"Friedberger","full_name":"Friedberger, Simon"},{"id":"83504","full_name":"Somorovsky, Juraj","orcid":"0000-0002-3593-7720","last_name":"Somorovsky","first_name":"Juraj"},{"full_name":"Schwenk, Jörg","first_name":"Jörg","last_name":"Schwenk"}],"title":"Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels","status":"public","year":"2018","date_updated":"2022-01-06T06:52:40Z","language":[{"iso":"eng"}],"_id":"15905","publisher":"{USENIX} Association","page":"549-566","main_file_link":[{"url":"https://www.usenix.org/node/217635","open_access":"1"}],"user_id":"83504","citation":{"bibtex":"@inproceedings{Poddebniak_Dresen_Müller_Ising_Schinzel_Friedberger_Somorovsky_Schwenk_2018, place={Baltimore, MD}, title={Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels}, booktitle={27th {USENIX} Security Symposium ({USENIX} Security 18)}, publisher={{USENIX} Association}, author={Poddebniak, Damian and Dresen, Christian and Müller, Jens and Ising, Fabian and Schinzel, Sebastian and Friedberger, Simon and Somorovsky, Juraj and Schwenk, Jörg}, year={2018}, pages={549–566} }","ama":"Poddebniak D, Dresen C, Müller J, et al. Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels. In: <i>27th {USENIX} Security Symposium ({USENIX} Security 18)</i>. Baltimore, MD: {USENIX} Association; 2018:549-566.","mla":"Poddebniak, Damian, et al. “Efail: Breaking S/MIME and OpenPGP Email Encryption Using Exfiltration Channels.” <i>27th {USENIX} Security Symposium ({USENIX} Security 18)</i>, {USENIX} Association, 2018, pp. 549–66.","short":"D. Poddebniak, C. Dresen, J. Müller, F. Ising, S. Schinzel, S. Friedberger, J. Somorovsky, J. Schwenk, in: 27th {USENIX} Security Symposium ({USENIX} Security 18), {USENIX} Association, Baltimore, MD, 2018, pp. 549–566.","chicago":"Poddebniak, Damian, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, and Jörg Schwenk. “Efail: Breaking S/MIME and OpenPGP Email Encryption Using Exfiltration Channels.” In <i>27th {USENIX} Security Symposium ({USENIX} Security 18)</i>, 549–66. Baltimore, MD: {USENIX} Association, 2018.","ieee":"D. Poddebniak <i>et al.</i>, “Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels,” in <i>27th {USENIX} Security Symposium ({USENIX} Security 18)</i>, 2018, pp. 549–566.","apa":"Poddebniak, D., Dresen, C., Müller, J., Ising, F., Schinzel, S., Friedberger, S., … Schwenk, J. (2018). Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels. In <i>27th {USENIX} Security Symposium ({USENIX} Security 18)</i> (pp. 549–566). Baltimore, MD: {USENIX} Association."},"publication":"27th {USENIX} Security Symposium ({USENIX} Security 18)","extern":"1","date_created":"2020-02-15T09:49:36Z","place":"Baltimore, MD","oa":"1","type":"conference"},{"date_updated":"2022-01-06T06:52:40Z","title":"Return Of Bleichenbacher\\textquoterights Oracle Threat (ROBOT)","year":"2018","status":"public","publication_identifier":{"isbn":["978-1-939133-04-5"]},"author":[{"first_name":"Hanno","last_name":"Böck","full_name":"Böck, Hanno"},{"full_name":"Somorovsky, Juraj","orcid":"0000-0002-3593-7720","first_name":"Juraj","last_name":"Somorovsky","id":"83504"},{"first_name":"Craig","last_name":"Young","full_name":"Young, Craig"}],"user_id":"83504","page":"817-849","main_file_link":[{"url":"https://www.usenix.org/node/217495","open_access":"1"}],"language":[{"iso":"eng"}],"_id":"15906","publisher":"{USENIX} Association","publication":"27th {USENIX} Security Symposium ({USENIX} Security 18)","citation":{"mla":"Böck, Hanno, et al. “Return Of Bleichenbacher\\textquoterights Oracle Threat (ROBOT).” <i>27th {USENIX} Security Symposium ({USENIX} Security 18)</i>, {USENIX} Association, 2018, pp. 817–49.","bibtex":"@inproceedings{Böck_Somorovsky_Young_2018, place={Baltimore, MD}, title={Return Of Bleichenbacher\\textquoterights Oracle Threat (ROBOT)}, booktitle={27th {USENIX} Security Symposium ({USENIX} Security 18)}, publisher={{USENIX} Association}, author={Böck, Hanno and Somorovsky, Juraj and Young, Craig}, year={2018}, pages={817–849} }","ama":"Böck H, Somorovsky J, Young C. Return Of Bleichenbacher\\textquoterights Oracle Threat (ROBOT). In: <i>27th {USENIX} Security Symposium ({USENIX} Security 18)</i>. Baltimore, MD: {USENIX} Association; 2018:817-849.","ieee":"H. Böck, J. Somorovsky, and C. Young, “Return Of Bleichenbacher\\textquoterights Oracle Threat (ROBOT),” in <i>27th {USENIX} Security Symposium ({USENIX} Security 18)</i>, 2018, pp. 817–849.","apa":"Böck, H., Somorovsky, J., &#38; Young, C. (2018). Return Of Bleichenbacher\\textquoterights Oracle Threat (ROBOT). In <i>27th {USENIX} Security Symposium ({USENIX} Security 18)</i> (pp. 817–849). Baltimore, MD: {USENIX} Association.","short":"H. Böck, J. Somorovsky, C. Young, in: 27th {USENIX} Security Symposium ({USENIX} Security 18), {USENIX} Association, Baltimore, MD, 2018, pp. 817–849.","chicago":"Böck, Hanno, Juraj Somorovsky, and Craig Young. “Return Of Bleichenbacher\\textquoterights Oracle Threat (ROBOT).” In <i>27th {USENIX} Security Symposium ({USENIX} Security 18)</i>, 817–49. Baltimore, MD: {USENIX} Association, 2018."},"type":"conference","oa":"1","date_created":"2020-02-15T09:49:57Z","place":"Baltimore, MD"},{"citation":{"ieee":"N. Engelbertz, N. Erinola, D. Herring, J. Somorovsky, V. Mladenov, and J. Schwenk, “Security Analysis of eIDAS -- The Cross-Country Authentication Scheme in Europe,” in <i>12th {USENIX} Workshop on Offensive Technologies ({WOOT} 18)</i>, 2018.","apa":"Engelbertz, N., Erinola, N., Herring, D., Somorovsky, J., Mladenov, V., &#38; Schwenk, J. (2018). Security Analysis of eIDAS -- The Cross-Country Authentication Scheme in Europe. In <i>12th {USENIX} Workshop on Offensive Technologies ({WOOT} 18)</i>. Baltimore, MD: {USENIX} Association.","chicago":"Engelbertz, Nils, Nurullah Erinola, David Herring, Juraj Somorovsky, Vladislav Mladenov, and Jörg Schwenk. “Security Analysis of EIDAS -- The Cross-Country Authentication Scheme in Europe.” In <i>12th {USENIX} Workshop on Offensive Technologies ({WOOT} 18)</i>. Baltimore, MD: {USENIX} Association, 2018.","short":"N. Engelbertz, N. Erinola, D. Herring, J. Somorovsky, V. Mladenov, J. Schwenk, in: 12th {USENIX} Workshop on Offensive Technologies ({WOOT} 18), {USENIX} Association, Baltimore, MD, 2018.","mla":"Engelbertz, Nils, et al. “Security Analysis of EIDAS -- The Cross-Country Authentication Scheme in Europe.” <i>12th {USENIX} Workshop on Offensive Technologies ({WOOT} 18)</i>, {USENIX} Association, 2018.","bibtex":"@inproceedings{Engelbertz_Erinola_Herring_Somorovsky_Mladenov_Schwenk_2018, place={Baltimore, MD}, title={Security Analysis of eIDAS -- The Cross-Country Authentication Scheme in Europe}, booktitle={12th {USENIX} Workshop on Offensive Technologies ({WOOT} 18)}, publisher={{USENIX} Association}, author={Engelbertz, Nils and Erinola, Nurullah and Herring, David and Somorovsky, Juraj and Mladenov, Vladislav and Schwenk, Jörg}, year={2018} }","ama":"Engelbertz N, Erinola N, Herring D, Somorovsky J, Mladenov V, Schwenk J. Security Analysis of eIDAS -- The Cross-Country Authentication Scheme in Europe. In: <i>12th {USENIX} Workshop on Offensive Technologies ({WOOT} 18)</i>. Baltimore, MD: {USENIX} Association; 2018."},"publication":"12th {USENIX} Workshop on Offensive Technologies ({WOOT} 18)","extern":"1","date_created":"2020-02-15T10:07:49Z","place":"Baltimore, MD","oa":"1","type":"conference","author":[{"last_name":"Engelbertz","first_name":"Nils","full_name":"Engelbertz, Nils"},{"full_name":"Erinola, Nurullah","first_name":"Nurullah","last_name":"Erinola"},{"full_name":"Herring, David","last_name":"Herring","first_name":"David"},{"id":"83504","last_name":"Somorovsky","orcid":"0000-0002-3593-7720","first_name":"Juraj","full_name":"Somorovsky, Juraj"},{"first_name":"Vladislav","last_name":"Mladenov","full_name":"Mladenov, Vladislav"},{"full_name":"Schwenk, Jörg","last_name":"Schwenk","first_name":"Jörg"}],"status":"public","year":"2018","title":"Security Analysis of eIDAS -- The Cross-Country Authentication Scheme in Europe","date_updated":"2022-01-06T06:52:40Z","_id":"15914","language":[{"iso":"eng"}],"publisher":"{USENIX} Association","main_file_link":[{"url":"https://www.usenix.org/node/220571","open_access":"1"}],"user_id":"83504"},{"citation":{"mla":"Muller, Jens, et al. “SoK: Exploiting Network Printers.” <i>2017 IEEE Symposium on Security and Privacy (SP)</i>, 2017, doi:<a href=\"https://doi.org/10.1109/sp.2017.47\">10.1109/sp.2017.47</a>.","ama":"Muller J, Mladenov V, Somorovsky J, Schwenk J. SoK: Exploiting Network Printers. In: <i>2017 IEEE Symposium on Security and Privacy (SP)</i>. ; 2017. doi:<a href=\"https://doi.org/10.1109/sp.2017.47\">10.1109/sp.2017.47</a>","bibtex":"@inproceedings{Muller_Mladenov_Somorovsky_Schwenk_2017, title={SoK: Exploiting Network Printers}, DOI={<a href=\"https://doi.org/10.1109/sp.2017.47\">10.1109/sp.2017.47</a>}, booktitle={2017 IEEE Symposium on Security and Privacy (SP)}, author={Muller, Jens and Mladenov, Vladislav and Somorovsky, Juraj and Schwenk, Jörg}, year={2017} }","apa":"Muller, J., Mladenov, V., Somorovsky, J., &#38; Schwenk, J. (2017). SoK: Exploiting Network Printers. In <i>2017 IEEE Symposium on Security and Privacy (SP)</i>. <a href=\"https://doi.org/10.1109/sp.2017.47\">https://doi.org/10.1109/sp.2017.47</a>","ieee":"J. Muller, V. Mladenov, J. Somorovsky, and J. Schwenk, “SoK: Exploiting Network Printers,” in <i>2017 IEEE Symposium on Security and Privacy (SP)</i>, 2017.","short":"J. Muller, V. Mladenov, J. Somorovsky, J. Schwenk, in: 2017 IEEE Symposium on Security and Privacy (SP), 2017.","chicago":"Muller, Jens, Vladislav Mladenov, Juraj Somorovsky, and Jörg Schwenk. “SoK: Exploiting Network Printers.” In <i>2017 IEEE Symposium on Security and Privacy (SP)</i>, 2017. <a href=\"https://doi.org/10.1109/sp.2017.47\">https://doi.org/10.1109/sp.2017.47</a>."},"publication":"2017 IEEE Symposium on Security and Privacy (SP)","extern":"1","date_created":"2020-02-15T09:37:12Z","type":"conference","publication_identifier":{"isbn":["9781509055333"]},"author":[{"full_name":"Muller, Jens","last_name":"Muller","first_name":"Jens"},{"last_name":"Mladenov","first_name":"Vladislav","full_name":"Mladenov, Vladislav"},{"first_name":"Juraj","orcid":"0000-0002-3593-7720","last_name":"Somorovsky","full_name":"Somorovsky, Juraj","id":"83504"},{"last_name":"Schwenk","first_name":"Jörg","full_name":"Schwenk, Jörg"}],"title":"SoK: Exploiting Network Printers","status":"public","year":"2017","date_updated":"2022-01-06T06:52:39Z","publication_status":"published","_id":"15895","language":[{"iso":"eng"}],"main_file_link":[{"url":"https://www.nds.ruhr-uni-bochum.de/research/publications/sok-exploiting-network-printers/"}],"doi":"10.1109/sp.2017.47","user_id":"83504"},{"oa":"1","type":"conference","place":"Vancouver, BC","date_created":"2020-02-15T10:05:49Z","citation":{"ieee":"M. Grothe, T. Niemann, J. Somorovsky, and J. Schwenk, “Breaking and Fixing Gridcoin,” in <i>11th {USENIX} Workshop on Offensive Technologies ({WOOT} 17)</i>, 2017.","mla":"Grothe, Martin, et al. “Breaking and Fixing Gridcoin.” <i>11th {USENIX} Workshop on Offensive Technologies ({WOOT} 17)</i>, {USENIX} Association, 2017.","apa":"Grothe, M., Niemann, T., Somorovsky, J., &#38; Schwenk, J. (2017). Breaking and Fixing Gridcoin. In <i>11th {USENIX} Workshop on Offensive Technologies ({WOOT} 17)</i>. Vancouver, BC: {USENIX} Association.","bibtex":"@inproceedings{Grothe_Niemann_Somorovsky_Schwenk_2017, place={Vancouver, BC}, title={Breaking and Fixing Gridcoin}, booktitle={11th {USENIX} Workshop on Offensive Technologies ({WOOT} 17)}, publisher={{USENIX} Association}, author={Grothe, Martin and Niemann, Tobias and Somorovsky, Juraj and Schwenk, Jörg}, year={2017} }","chicago":"Grothe, Martin, Tobias Niemann, Juraj Somorovsky, and Jörg Schwenk. “Breaking and Fixing Gridcoin.” In <i>11th {USENIX} Workshop on Offensive Technologies ({WOOT} 17)</i>. Vancouver, BC: {USENIX} Association, 2017.","short":"M. Grothe, T. Niemann, J. Somorovsky, J. Schwenk, in: 11th {USENIX} Workshop on Offensive Technologies ({WOOT} 17), {USENIX} Association, Vancouver, BC, 2017.","ama":"Grothe M, Niemann T, Somorovsky J, Schwenk J. Breaking and Fixing Gridcoin. In: <i>11th {USENIX} Workshop on Offensive Technologies ({WOOT} 17)</i>. Vancouver, BC: {USENIX} Association; 2017."},"publication":"11th {USENIX} Workshop on Offensive Technologies ({WOOT} 17)","user_id":"83504","_id":"15912","publisher":"{USENIX} Association","language":[{"iso":"eng"}],"main_file_link":[{"open_access":"1","url":"https://www.usenix.org/conference/woot17/workshop-program/presentation/grothe"}],"date_updated":"2022-01-06T06:52:40Z","author":[{"first_name":"Martin","last_name":"Grothe","full_name":"Grothe, Martin"},{"full_name":"Niemann, Tobias","first_name":"Tobias","last_name":"Niemann"},{"full_name":"Somorovsky, Juraj","first_name":"Juraj","last_name":"Somorovsky","orcid":"0000-0002-3593-7720","id":"83504"},{"full_name":"Schwenk, Jörg","first_name":"Jörg","last_name":"Schwenk"}],"title":"Breaking and Fixing Gridcoin","status":"public","year":"2017"},{"date_updated":"2022-01-06T06:52:39Z","publication_status":"published","publication_identifier":{"isbn":["9781450341394"]},"author":[{"first_name":"Juraj","last_name":"Somorovsky","orcid":"0000-0002-3593-7720","full_name":"Somorovsky, Juraj","id":"83504"}],"status":"public","year":"2016","title":"Systematic Fuzzing and Testing of TLS Libraries","doi":"10.1145/2976749.2978411","user_id":"83504","_id":"15896","language":[{"iso":"eng"}],"main_file_link":[{"url":"https://www.nds.ruhr-uni-bochum.de/media/nds/veroeffentlichungen/2016/10/19/tls-attacker-ccs16.pdf"}],"extern":"1","citation":{"ieee":"J. Somorovsky, “Systematic Fuzzing and Testing of TLS Libraries,” in <i>Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security - CCS’16</i>, 2016.","apa":"Somorovsky, J. (2016). Systematic Fuzzing and Testing of TLS Libraries. In <i>Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security - CCS’16</i>. <a href=\"https://doi.org/10.1145/2976749.2978411\">https://doi.org/10.1145/2976749.2978411</a>","chicago":"Somorovsky, Juraj. “Systematic Fuzzing and Testing of TLS Libraries.” In <i>Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security - CCS’16</i>, 2016. <a href=\"https://doi.org/10.1145/2976749.2978411\">https://doi.org/10.1145/2976749.2978411</a>.","short":"J. Somorovsky, in: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security - CCS’16, 2016.","mla":"Somorovsky, Juraj. “Systematic Fuzzing and Testing of TLS Libraries.” <i>Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security - CCS’16</i>, 2016, doi:<a href=\"https://doi.org/10.1145/2976749.2978411\">10.1145/2976749.2978411</a>.","bibtex":"@inproceedings{Somorovsky_2016, title={Systematic Fuzzing and Testing of TLS Libraries}, DOI={<a href=\"https://doi.org/10.1145/2976749.2978411\">10.1145/2976749.2978411</a>}, booktitle={Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security - CCS’16}, author={Somorovsky, Juraj}, year={2016} }","ama":"Somorovsky J. Systematic Fuzzing and Testing of TLS Libraries. In: <i>Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security - CCS’16</i>. ; 2016. doi:<a href=\"https://doi.org/10.1145/2976749.2978411\">10.1145/2976749.2978411</a>"},"publication":"Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security - CCS'16","type":"conference","date_created":"2020-02-15T09:37:47Z"},{"year":"2016","title":"DROWN: Breaking TLS Using SSLv2","status":"public","author":[{"first_name":"Nimrod","last_name":"Aviram","full_name":"Aviram, Nimrod"},{"first_name":"Sebastian","last_name":"Schinzel","full_name":"Schinzel, Sebastian"},{"id":"83504","full_name":"Somorovsky, Juraj","orcid":"0000-0002-3593-7720","first_name":"Juraj","last_name":"Somorovsky"},{"last_name":"Heninger","first_name":"Nadia","full_name":"Heninger, Nadia"},{"full_name":"Dankel, Maik","first_name":"Maik","last_name":"Dankel"},{"first_name":"Jens","last_name":"Steube","full_name":"Steube, Jens"},{"full_name":"Valenta, Luke","first_name":"Luke","last_name":"Valenta"},{"last_name":"Adrian","first_name":"David","full_name":"Adrian, David"},{"full_name":"Halderman, J. Alex","last_name":"Halderman","first_name":"J. Alex"},{"full_name":"Dukhovni, Viktor","first_name":"Viktor","last_name":"Dukhovni"},{"full_name":"Käsper, Emilia","last_name":"Käsper","first_name":"Emilia"},{"last_name":"Cohney","first_name":"Shaanan","full_name":"Cohney, Shaanan"},{"full_name":"Engels, Susanne","first_name":"Susanne","last_name":"Engels"},{"full_name":"Paar, Christof","last_name":"Paar","first_name":"Christof"},{"full_name":"Shavitt, Yuval","first_name":"Yuval","last_name":"Shavitt"}],"publication_identifier":{"isbn":["978-1-931971-32-4"]},"date_updated":"2022-01-06T06:52:40Z","page":"689-706","main_file_link":[{"url":"https://www.usenix.org/node/197246","open_access":"1"}],"_id":"15907","language":[{"iso":"eng"}],"publisher":"{USENIX} Association","user_id":"83504","publication":"25th {USENIX} Security Symposium ({USENIX} Security 16)","citation":{"chicago":"Aviram, Nimrod, Sebastian Schinzel, Juraj Somorovsky, Nadia Heninger, Maik Dankel, Jens Steube, Luke Valenta, et al. “DROWN: Breaking TLS Using SSLv2.” In <i>25th {USENIX} Security Symposium ({USENIX} Security 16)</i>, 689–706. Austin, TX: {USENIX} Association, 2016.","short":"N. Aviram, S. Schinzel, J. Somorovsky, N. Heninger, M. Dankel, J. Steube, L. Valenta, D. Adrian, J.A. Halderman, V. Dukhovni, E. Käsper, S. Cohney, S. Engels, C. Paar, Y. Shavitt, in: 25th {USENIX} Security Symposium ({USENIX} Security 16), {USENIX} Association, Austin, TX, 2016, pp. 689–706.","ieee":"N. Aviram <i>et al.</i>, “DROWN: Breaking TLS Using SSLv2,” in <i>25th {USENIX} Security Symposium ({USENIX} Security 16)</i>, 2016, pp. 689–706.","apa":"Aviram, N., Schinzel, S., Somorovsky, J., Heninger, N., Dankel, M., Steube, J., … Shavitt, Y. (2016). DROWN: Breaking TLS Using SSLv2. In <i>25th {USENIX} Security Symposium ({USENIX} Security 16)</i> (pp. 689–706). Austin, TX: {USENIX} Association.","bibtex":"@inproceedings{Aviram_Schinzel_Somorovsky_Heninger_Dankel_Steube_Valenta_Adrian_Halderman_Dukhovni_et al._2016, place={Austin, TX}, title={DROWN: Breaking TLS Using SSLv2}, booktitle={25th {USENIX} Security Symposium ({USENIX} Security 16)}, publisher={{USENIX} Association}, author={Aviram, Nimrod and Schinzel, Sebastian and Somorovsky, Juraj and Heninger, Nadia and Dankel, Maik and Steube, Jens and Valenta, Luke and Adrian, David and Halderman, J. Alex and Dukhovni, Viktor and et al.}, year={2016}, pages={689–706} }","ama":"Aviram N, Schinzel S, Somorovsky J, et al. DROWN: Breaking TLS Using SSLv2. In: <i>25th {USENIX} Security Symposium ({USENIX} Security 16)</i>. Austin, TX: {USENIX} Association; 2016:689-706.","mla":"Aviram, Nimrod, et al. “DROWN: Breaking TLS Using SSLv2.” <i>25th {USENIX} Security Symposium ({USENIX} Security 16)</i>, {USENIX} Association, 2016, pp. 689–706."},"place":"Austin, TX","date_created":"2020-02-15T09:50:14Z","type":"conference","oa":"1"},{"oa":"1","type":"conference","date_created":"2020-02-15T10:06:33Z","place":"Austin, TX","citation":{"chicago":"Böck, Hanno, Aaron Zauner, Sean Devlin, Juraj Somorovsky, and Philipp Jovanovic. “Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS.” In <i>10th {USENIX} Workshop on Offensive Technologies ({WOOT} 16)</i>. Austin, TX: {USENIX} Association, 2016.","short":"H. Böck, A. Zauner, S. Devlin, J. Somorovsky, P. Jovanovic, in: 10th {USENIX} Workshop on Offensive Technologies ({WOOT} 16), {USENIX} Association, Austin, TX, 2016.","apa":"Böck, H., Zauner, A., Devlin, S., Somorovsky, J., &#38; Jovanovic, P. (2016). Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS. In <i>10th {USENIX} Workshop on Offensive Technologies ({WOOT} 16)</i>. Austin, TX: {USENIX} Association.","ieee":"H. Böck, A. Zauner, S. Devlin, J. Somorovsky, and P. Jovanovic, “Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS,” in <i>10th {USENIX} Workshop on Offensive Technologies ({WOOT} 16)</i>, 2016.","ama":"Böck H, Zauner A, Devlin S, Somorovsky J, Jovanovic P. Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS. In: <i>10th {USENIX} Workshop on Offensive Technologies ({WOOT} 16)</i>. Austin, TX: {USENIX} Association; 2016.","bibtex":"@inproceedings{Böck_Zauner_Devlin_Somorovsky_Jovanovic_2016, place={Austin, TX}, title={Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS}, booktitle={10th {USENIX} Workshop on Offensive Technologies ({WOOT} 16)}, publisher={{USENIX} Association}, author={Böck, Hanno and Zauner, Aaron and Devlin, Sean and Somorovsky, Juraj and Jovanovic, Philipp}, year={2016} }","mla":"Böck, Hanno, et al. “Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS.” <i>10th {USENIX} Workshop on Offensive Technologies ({WOOT} 16)</i>, {USENIX} Association, 2016."},"publication":"10th {USENIX} Workshop on Offensive Technologies ({WOOT} 16)","user_id":"83504","_id":"15913","language":[{"iso":"eng"}],"publisher":"{USENIX} Association","main_file_link":[{"url":"https://www.usenix.org/conference/woot16/workshop-program/presentation/bock","open_access":"1"}],"date_updated":"2022-01-06T06:52:40Z","author":[{"full_name":"Böck, Hanno","first_name":"Hanno","last_name":"Böck"},{"full_name":"Zauner, Aaron","last_name":"Zauner","first_name":"Aaron"},{"first_name":"Sean","last_name":"Devlin","full_name":"Devlin, Sean"},{"full_name":"Somorovsky, Juraj","last_name":"Somorovsky","orcid":"0000-0002-3593-7720","first_name":"Juraj","id":"83504"},{"first_name":"Philipp","last_name":"Jovanovic","full_name":"Jovanovic, Philipp"}],"status":"public","year":"2016","title":"Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS"}]