7 citations · 23 across the 7 of their papers we have counts for
6 papers · 1 filter
Chain of trust: Unraveling references among Common Criteria certified products
Adam Janovsky, Łukasz Chmielewski, Petr Svenda +2
With 5394 security certificates of IT products and systems, the Common Criteria for Information Technology Security Evaluation have bred an ecosystem entangled with various kind of…
sec-certs: Examining the security certification practice for better vulnerability mitigation
Adam Janovsky, Jan Jancar, Petr Svenda +3
Products certified under security certification frameworks such as Common Criteria undergo significant scrutiny during the costly certification process. Yet, critical vulnerabiliti…
Will You Trust This TLS Certificate? Perceptions of People Working in IT (Extended Version)
Martin Ukrop, Lydia Kraus, Vashek Matyas
Flawed TLS certificates are not uncommon on the Internet. While they signal a potential issue, in most cases they have benign causes (e.g., misconfiguration or even deliberate depl…
A Longitudinal Study of Cryptographic API: a Decade of Android Malware
Adam Janovsky, Davide Maiorca, Dominik Macko +2
Cryptography has been extensively used in Android applications to guarantee secure communications, conceal critical data from reverse engineering, or ensure mobile users' privacy.…
Biased RSA private keys: Origin attribution of GCD-factorable keys
Adam Janovsky, Matus Nemec, Petr Svenda +2
In 2016, Svenda et al. (USENIX 2016, The Million-key Question) reported that the implementation choices in cryptographic libraries allow for qualified guessing about the origin of…
Practical Cryptographic Data Integrity Protection with Full Disk Encryption Extended Version
Milan Broz, Mikulas Patocka, Vashek Matyas
Full Disk Encryption (FDE) has become a widely used security feature. Although FDE can provide confidentiality, it generally does not provide cryptographic data integrity protectio…