Please note that LibreCat no longer supports Internet Explorer versions 8 or 9 (or earlier).
We recommend upgrading to the latest Internet Explorer, Google Chrome, or Firefox.
44 Publications
2023 | Conference Paper | LibreCat-ID: 43060 | 
S. N. Hebrok et al., “We Really Need to Talk About Session Tickets: A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets,” 2023.
LibreCat
| Download (ext.)
2023 | Conference Paper | LibreCat-ID: 48012
J. Rossel, V. Mladenov, and J. Somorovsky, “Security Analysis of the 3MF Data Format,” presented at the 26th International Symposium on Research in Attacks, Intrusions and Defenses, Hongkong, 2023, doi: 10.1145/3607199.3607216.
LibreCat
| Files available
| DOI
| Download (ext.)
2023 | Conference Paper | LibreCat-ID: 46500
J. Pottebaum et al., “Re-Envisioning Industrial Control Systems Security by Considering Human Factors as a Core Element of Defense-in-Depth,” in 2023 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW), Delft, Netherlands, 2023, pp. 379–385, doi: 10.1109/eurospw59978.2023.00048.
LibreCat
| DOI
| Download (ext.)
2023 | Conference Paper | LibreCat-ID: 49654
N. Niere, S. N. Hebrok, J. Somorovsky, and R. Merget, “Poster: Circumventing the GFW with TLS Record Fragmentation,” 2023, doi: 10.1145/3576915.3624372.
LibreCat
| DOI
2022 | Conference Paper | LibreCat-ID: 32572
P. Mayer et al., “‘I don’ know why I check this...’ - Investigating Expert Users’ Strategies to Detect Email Signature Spoofing Attacks,” in Eighteenth Symposium on Usable Privacy and Security (SOUPS 2022), 2022, pp. 77–96.
LibreCat
2022 | Conference Paper | LibreCat-ID: 32573
M. Maehren, P. Nieting, S. N. Hebrok, R. Merget, J. Somorovsky, and J. Schwenk, “TLS-Anvil: Adapting Combinatorial Testing for TLS Libraries,” 2022.
LibreCat
2021 | Conference Paper | LibreCat-ID: 25331
M. Brinkmann et al., “ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication,” in 30th {USENIX} Security Symposium ({USENIX} Security 21), 2021, pp. 4293–4310.
LibreCat
2021 | Conference Paper | LibreCat-ID: 25332
R. Merget, M. Brinkmann, N. Aviram, J. Somorovsky, J. Mittmann, and J. Schwenk, “Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E),” in 30th {USENIX} Security Symposium ({USENIX} Security 21), 2021, pp. 213–230.
LibreCat
2021 | Journal Article | LibreCat-ID: 24143
J. P. Drees et al., “Automated Detection of Side Channels in Cryptographic Protocols: DROWN the ROBOTs!,” 14th ACM Workshop on Artificial Intelligence and Security, 2021.
LibreCat
2020 | Conference Paper | LibreCat-ID: 25334
P. Fiterau-Brostean, B. Jonsson, R. Merget, J. de Ruiter, K. Sagonas, and J. Somorovsky, “Analysis of DTLS Implementations Using Protocol State Fuzzing,” in 29th {USENIX} Security Symposium ({USENIX} Security 20), 2020, pp. 2523–2540.
LibreCat
2020 | Conference Paper | LibreCat-ID: 25336
J. Schwenk, M. Brinkmann, D. Poddebniak, J. Müller, J. Somorovsky, and S. Schinzel, “Mitigation of Attacks on Email End-to-End Encryption,” in Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security, 2020, pp. 1647–1664, doi: 10.1145/3372297.3417878.
LibreCat
| DOI
2019 | Conference Paper | LibreCat-ID: 15908 |
J. Müller et al., “‘Johnny, you are fired!’ -- Spoofing OpenPGP and S/MIME Signatures in Emails,” in 28th {USENIX} Security Symposium ({USENIX} Security 19), 2019, pp. 1011–1028.
LibreCat
| Download (ext.)
2019 | Conference Paper | LibreCat-ID: 15909 |
R. Merget et al., “Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities,” in 28th {USENIX} Security Symposium ({USENIX} Security 19), 2019, pp. 1029–1046.
LibreCat
| Download (ext.)
2019 | Conference Paper | LibreCat-ID: 15910
N. Engelbertz, V. Mladenov, J. Somorovsky, D. Herring, N. Erinola, and J. Schwenk, “Security Analysis of XAdES Validation in the CEF Digital Signature Services (DSS),” in Open Identity Summit 2019, 2019, pp. 95–106.
LibreCat
2018 | Conference Paper | LibreCat-ID: 15892
M. R. Albrecht, J. Massimo, K. G. Paterson, and J. Somorovsky, “Prime and Prejudice: Primality Testing Under Adversarial Conditions,” in Proceedings of the 2018 ACM SIGSAC Conference on Computer and Communications Security, 2018.
LibreCat
| DOI
| Download (ext.)
2018 | Conference Paper | LibreCat-ID: 15905 |
D. Poddebniak et al., “Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels,” in 27th {USENIX} Security Symposium ({USENIX} Security 18), 2018, pp. 549–566.
LibreCat
| Download (ext.)
2018 | Conference Paper | LibreCat-ID: 15906 |
H. Böck, J. Somorovsky, and C. Young, “Return Of Bleichenbacher\textquoterights Oracle Threat (ROBOT),” in 27th {USENIX} Security Symposium ({USENIX} Security 18), 2018, pp. 817–849.
LibreCat
| Download (ext.)
2018 | Conference Paper | LibreCat-ID: 15914 |
N. Engelbertz, N. Erinola, D. Herring, J. Somorovsky, V. Mladenov, and J. Schwenk, “Security Analysis of eIDAS -- The Cross-Country Authentication Scheme in Europe,” in 12th {USENIX} Workshop on Offensive Technologies ({WOOT} 18), 2018.
LibreCat
| Download (ext.)