activity
20062025
most citedA Comprehensive Formal Security Analysis of OAuth 2.0

35 citations · 56 across the 9 of their papers we have counts for

collaborators

12 papers

cs.CR2025

CryptoQA: A Large-scale Question-answering Dataset for AI-assisted Cryptography

Mayar Elfares, Pascal Reisert, Tilman Dietz +4

Large language models (LLMs) excel at many general-purpose natural language processing tasks. However, their ability to perform deep reasoning and mathematical analysis, particular…

cs.HC2025★ 1 cited

Gaze3P: Gaze-Based Prediction of User-Perceived Privacy

Mayar Elfares, Pascal Reisert, Ralf Küsters +1

Privacy is a highly subjective concept and perceived variably by different individuals. Previous research on quantifying user-perceived privacy has primarily relied on questionnair…

cs.HC2025

Guidelines for Gaze-based Neural Preliminary Diagnosis

Mayar Elfares, Salma Younis, Pascal Reisert +3

Neural disorders refer to any condition affecting the nervous system and that influence how individuals perceive and interact with the world. Traditional neural diagnoses rely on c…

cs.CV2024★ 1 cited

PrivatEyes: Appearance-based Gaze Estimation Using Federated Secure Multi-Party Computation

Mayar Elfares, Pascal Reisert, Zhiming Hu +3

Latest gaze estimation methods require large-scale training data but their collection and exchange pose significant privacy risks. We propose PrivatEyes - the first privacy-enhanci…

cs.HC2022★ 3 cited

Federated Learning for Appearance-based Gaze Estimation in the Wild

Mayar Elfares, Zhiming Hu, Pascal Reisert +2

Gaze estimation methods have significantly matured in recent years, but the large number of eye images required to train deep learning models poses significant privacy risks. In ad…

cs.CR2019

An Extensive Formal Security Analysis of the OpenID Financial-grade API

Daniel Fett, Pedram Hosseyni, Ralf Kuesters

Forced by regulations and industry demand, banks worldwide are working to open their customers' online banking accounts to third-party services via web-based APIs. By using these s…

cs.CR2017

The Web SSO Standard OpenID Connect: In-Depth Formal Security Analysis and Security Guidelines

Daniel Fett, Ralf Kuesters, Guido Schmitz

Web-based single sign-on (SSO) services such as Google Sign-In and Log In with Paypal are based on the OpenID Connect protocol. This protocol enables so-called relying parties to d…

cs.CR2016★ 35 cited

A Comprehensive Formal Security Analysis of OAuth 2.0

Daniel Fett, Ralf Kuesters, Guido Schmitz

The OAuth 2.0 protocol is one of the most widely deployed authorization/single sign-on (SSO) protocols and also serves as the foundation for the new SSO standard OpenID Connect. De…

cs.CR2015★ 9 cited

SPRESSO: A Secure, Privacy-Respecting Single Sign-On System for the Web

Daniel Fett, Ralf Kuesters, Guido Schmitz

Single sign-on (SSO) systems, such as OpenID and OAuth, allow web sites, so-called relying parties (RPs), to delegate user authentication to identity providers (IdPs), such as Face…

cs.CR2014

Analyzing the BrowserID SSO System with Primary Identity Providers Using an Expressive Model of the Web

Daniel Fett, Ralf Kuesters, Guido Schmitz

BrowserID is a complex, real-world Single Sign-On (SSO) System for web applications recently developed by Mozilla. It employs new HTML5 features (such as web messaging and web stor…

cs.CR2008

Reducing Protocol Analysis with XOR to the XOR-free Case in the Horn Theory Based Approach

Ralf Kuesters, Tomasz Truderung

In the Horn theory based approach for cryptographic protocol analysis, cryptographic protocols and (Dolev-Yao) intruders are modeled by Horn theories and security analysis boils do…

cs.CR2006★ 7 cited

Implementing a Unification Algorithm for Protocol Analysis with XOR

Max Tuengerthal, Ralf Kuesters, Mathieu Turuani

In this paper, we propose a unification algorithm for the theory which combines unification algorithms for $E\_{\std}$ and $E\_{\ACUN}$ (ACUN properties, like XOR) but compared…