2 papers
cs.CR2024
Injection Attacks Against End-to-End Encrypted Applications
Andrés Fábrega, Carolina Ortega Pérez, Armin Namavari +3
We explore an emerging threat model for end-to-end (E2E) encrypted applications: an adversary sends chosen messages to a target client, thereby "injecting" adversarial content into…
cs.CR2024
Exploiting Leakage in Password Managers via Injection Attacks
Andrés Fábrega, Armin Namavari, Rachit Agarwal +2
This work explores injection attacks against password managers. In this setting, the adversary (only) controls their own application client, which they use to "inject" chosen paylo…