Please note that LibreCat no longer supports Internet Explorer versions 8 or 9 (or earlier).
We recommend upgrading to the latest Internet Explorer, Google Chrome, or Firefox.
48 Publications
2018 | Conference Paper | LibreCat-ID: 15894
On The (In-)Security Of JavaScript Object Signing And Encryption
D. Detering, J. Somorovsky, C. Mainka, V. Mladenov, J. Schwenk, in: Proceedings of the 1st Reversing and Offensive-Oriented Trends Symposium on - ROOTS, 2018.
LibreCat
| DOI
D. Detering, J. Somorovsky, C. Mainka, V. Mladenov, J. Schwenk, in: Proceedings of the 1st Reversing and Offensive-Oriented Trends Symposium on - ROOTS, 2018.
2018 | Conference Paper | LibreCat-ID: 15905 | 
Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels
D. Poddebniak, C. Dresen, J. Müller, F. Ising, S. Schinzel, S. Friedberger, J. Somorovsky, J. Schwenk, in: 27th {USENIX} Security Symposium ({USENIX} Security 18), {USENIX} Association, Baltimore, MD, 2018, pp. 549–566.
LibreCat
| Download (ext.)
D. Poddebniak, C. Dresen, J. Müller, F. Ising, S. Schinzel, S. Friedberger, J. Somorovsky, J. Schwenk, in: 27th {USENIX} Security Symposium ({USENIX} Security 18), {USENIX} Association, Baltimore, MD, 2018, pp. 549–566.
2018 | Conference Paper | LibreCat-ID: 15906 |
Return Of Bleichenbacher\textquoterights Oracle Threat (ROBOT)
H. Böck, J. Somorovsky, C. Young, in: 27th {USENIX} Security Symposium ({USENIX} Security 18), {USENIX} Association, Baltimore, MD, 2018, pp. 817–849.
LibreCat
| Download (ext.)
H. Böck, J. Somorovsky, C. Young, in: 27th {USENIX} Security Symposium ({USENIX} Security 18), {USENIX} Association, Baltimore, MD, 2018, pp. 817–849.
2018 | Conference Paper | LibreCat-ID: 15914 |
Security Analysis of eIDAS -- The Cross-Country Authentication Scheme in Europe
N. Engelbertz, N. Erinola, D. Herring, J. Somorovsky, V. Mladenov, J. Schwenk, in: 12th {USENIX} Workshop on Offensive Technologies ({WOOT} 18), {USENIX} Association, Baltimore, MD, 2018.
LibreCat
| Download (ext.)
N. Engelbertz, N. Erinola, D. Herring, J. Somorovsky, V. Mladenov, J. Schwenk, in: 12th {USENIX} Workshop on Offensive Technologies ({WOOT} 18), {USENIX} Association, Baltimore, MD, 2018.
2017 | Conference Paper | LibreCat-ID: 15895
SoK: Exploiting Network Printers
J. Muller, V. Mladenov, J. Somorovsky, J. Schwenk, in: 2017 IEEE Symposium on Security and Privacy (SP), 2017.
LibreCat
| DOI
| Download (ext.)
J. Muller, V. Mladenov, J. Somorovsky, J. Schwenk, in: 2017 IEEE Symposium on Security and Privacy (SP), 2017.
2017 | Conference Paper | LibreCat-ID: 15912 |
Breaking and Fixing Gridcoin
M. Grothe, T. Niemann, J. Somorovsky, J. Schwenk, in: 11th {USENIX} Workshop on Offensive Technologies ({WOOT} 17), {USENIX} Association, Vancouver, BC, 2017.
LibreCat
| Download (ext.)
M. Grothe, T. Niemann, J. Somorovsky, J. Schwenk, in: 11th {USENIX} Workshop on Offensive Technologies ({WOOT} 17), {USENIX} Association, Vancouver, BC, 2017.
2016 | Conference Paper | LibreCat-ID: 15896
Systematic Fuzzing and Testing of TLS Libraries
J. Somorovsky, in: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security - CCS’16, 2016.
LibreCat
| DOI
| Download (ext.)
J. Somorovsky, in: Proceedings of the 2016 ACM SIGSAC Conference on Computer and Communications Security - CCS’16, 2016.
2016 | Conference Paper | LibreCat-ID: 15907 |
DROWN: Breaking TLS Using SSLv2
N. Aviram, S. Schinzel, J. Somorovsky, N. Heninger, M. Dankel, J. Steube, L. Valenta, D. Adrian, J.A. Halderman, V. Dukhovni, E. Käsper, S. Cohney, S. Engels, C. Paar, Y. Shavitt, in: 25th {USENIX} Security Symposium ({USENIX} Security 16), {USENIX} Association, Austin, TX, 2016, pp. 689–706.
LibreCat
| Download (ext.)
N. Aviram, S. Schinzel, J. Somorovsky, N. Heninger, M. Dankel, J. Steube, L. Valenta, D. Adrian, J.A. Halderman, V. Dukhovni, E. Käsper, S. Cohney, S. Engels, C. Paar, Y. Shavitt, in: 25th {USENIX} Security Symposium ({USENIX} Security 16), {USENIX} Association, Austin, TX, 2016, pp. 689–706.
2016 | Conference Paper | LibreCat-ID: 15913 |
Nonce-Disrespecting Adversaries: Practical Forgery Attacks on GCM in TLS
H. Böck, A. Zauner, S. Devlin, J. Somorovsky, P. Jovanovic, in: 10th {USENIX} Workshop on Offensive Technologies ({WOOT} 16), {USENIX} Association, Austin, TX, 2016.
LibreCat
| Download (ext.)
H. Böck, A. Zauner, S. Devlin, J. Somorovsky, P. Jovanovic, in: 10th {USENIX} Workshop on Offensive Technologies ({WOOT} 16), {USENIX} Association, Austin, TX, 2016.
2015 | Book Chapter | LibreCat-ID: 15897
AdIDoS – Adaptive and Intelligent Fully-Automatic Detection of Denial-of-Service Weaknesses in Web Services
C. Altmeier, C. Mainka, J. Somorovsky, J. Schwenk, in: Data Privacy Management, and Security Assurance - 10th International Workshop, {DPM} 2015, and 4th International Workshop, {QASA} 2015, Cham, 2015.
LibreCat
| DOI
C. Altmeier, C. Mainka, J. Somorovsky, J. Schwenk, in: Data Privacy Management, and Security Assurance - 10th International Workshop, {DPM} 2015, and 4th International Workshop, {QASA} 2015, Cham, 2015.
2015 | Conference Paper | LibreCat-ID: 15898
On the Security of TLS 1.3 and QUIC Against Weaknesses in PKCS#1 v1.5 Encryption
T. Jager, J. Schwenk, J. Somorovsky, in: Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security - CCS ’15, 2015.
LibreCat
| DOI
| Download (ext.)
T. Jager, J. Schwenk, J. Somorovsky, in: Proceedings of the 22nd ACM SIGSAC Conference on Computer and Communications Security - CCS ’15, 2015.
2015 | Book Chapter | LibreCat-ID: 15899
Practical Invalid Curve Attacks on TLS-ECDH
T. Jager, J. Schwenk, J. Somorovsky, in: Computer Security -- ESORICS 2015, Cham, 2015.
LibreCat
| DOI
| Download (ext.)
T. Jager, J. Schwenk, J. Somorovsky, in: Computer Security -- ESORICS 2015, Cham, 2015.
2015 | Conference Paper | LibreCat-ID: 15900
Not so Smart: On Smart TV Apps
M. Niemietz, J. Somorovsky, C. Mainka, J. Schwenk, in: International Workshop on Secure Internet of Things (SIoT), 2015.
LibreCat
| DOI
M. Niemietz, J. Somorovsky, C. Mainka, J. Schwenk, in: International Workshop on Secure Internet of Things (SIoT), 2015.
2015 | Conference Paper | LibreCat-ID: 15911 |
How to Break XML Encryption -- Automatically
D. Kupser, C. Mainka, J. Schwenk, J. Somorovsky, in: 9th {USENIX} Workshop on Offensive Technologies ({WOOT} 15), {USENIX} Association, Washington, D.C., 2015.
LibreCat
| Download (ext.)
D. Kupser, C. Mainka, J. Schwenk, J. Somorovsky, in: 9th {USENIX} Workshop on Offensive Technologies ({WOOT} 15), {USENIX} Association, Washington, D.C., 2015.
2014 | Conference Paper | LibreCat-ID: 15904 |
Revisiting SSL/TLS Implementations: New Bleichenbacher Side Channels and Attacks
C. Meyer, J. Somorovsky, E. Weiss, J. Schwenk, S. Schinzel, E. Tews, in: 23rd {USENIX} Security Symposium ({USENIX} Security 14), {USENIX} Association, San Diego, CA, 2014, pp. 733–748.
LibreCat
| Download (ext.)
C. Meyer, J. Somorovsky, E. Weiss, J. Schwenk, S. Schinzel, E. Tews, in: 23rd {USENIX} Security Symposium ({USENIX} Security 14), {USENIX} Association, San Diego, CA, 2014, pp. 733–748.
2013 | Dissertation | LibreCat-ID: 15901
On the insecurity of XML Security
J. Somorovsky, On the Insecurity of XML Security, 2013.
LibreCat
| DOI
J. Somorovsky, On the Insecurity of XML Security, 2013.
2013 | Conference Paper | LibreCat-ID: 15902
A New Approach towards DoS Penetration Testing on Web Services
A. Falkenberg, C. Mainka, J. Somorovsky, J. Schwenk, in: 2013 IEEE 20th International Conference on Web Services, 2013.
LibreCat
| DOI
A. Falkenberg, C. Mainka, J. Somorovsky, J. Schwenk, in: 2013 IEEE 20th International Conference on Web Services, 2013.
2013 | Journal Article | LibreCat-ID: 15903
Penetration test tool for XML-based web services
C. Mainka, V. Mladenov, J. Somorovsky, J. Schwenk, CEUR Workshop Proceedings 965 (2013) 31–35.
LibreCat
C. Mainka, V. Mladenov, J. Somorovsky, J. Schwenk, CEUR Workshop Proceedings 965 (2013) 31–35.
2013 | Conference Paper | LibreCat-ID: 15918 |
One Bad Apple: Backwards Compatibility Attacks on State-of-the-Art Cryptography
T. Jager, K.G. Paterson, J. Somorovsky, in: 20th Annual Network and Distributed System Security Symposium, NDSS 2013, San Diego, California, USA, February 24-27, 2013, 2013.
LibreCat
| Download (ext.)
T. Jager, K.G. Paterson, J. Somorovsky, in: 20th Annual Network and Distributed System Security Symposium, NDSS 2013, San Diego, California, USA, February 24-27, 2013, 2013.
2012 | Conference Paper | LibreCat-ID: 15888 |
On Breaking SAML: Be Whoever You Want to Be
J. Somorovsky, A. Mayer, J. Schwenk, M. Kampmann, M. Jensen, in: Presented as Part of the 21st {USENIX} Security Symposium ({USENIX} Security 12), {USENIX}, Bellevue, WA, 2012, pp. 397–412.
LibreCat
| Download (ext.)
J. Somorovsky, A. Mayer, J. Schwenk, M. Kampmann, M. Jensen, in: Presented as Part of the 21st {USENIX} Security Symposium ({USENIX} Security 12), {USENIX}, Bellevue, WA, 2012, pp. 397–412.