3 papers
cs.CR2024
Chain of trust: Unraveling references among Common Criteria certified products
Adam Janovsky, Łukasz Chmielewski, Petr Svenda +2
With 5394 security certificates of IT products and systems, the Common Criteria for Information Technology Security Evaluation have bred an ecosystem entangled with various kind of…
cs.CR2023
sec-certs: Examining the security certification practice for better vulnerability mitigation
Adam Janovsky, Jan Jancar, Petr Svenda +3
Products certified under security certification frameworks such as Common Criteria undergo significant scrutiny during the costly certification process. Yet, critical vulnerabiliti…
cs.CR2020
Biased RSA private keys: Origin attribution of GCD-factorable keys
Adam Janovsky, Matus Nemec, Petr Svenda +2
In 2016, Svenda et al. (USENIX 2016, The Million-key Question) reported that the implementation choices in cryptographic libraries allow for qualified guessing about the origin of…