5 papers
Hidden Ciphers and Where to Find Them: Static Discovery and Assessment of Cryptographic Assets in Software
Christian Näther, Eduard Hirsch
Modern software systems rely on cryptography for data protection, authentication, and trust establishment, yet organizations often lack a structured view of the cryptography deploy…
Architecture-Derived CBOMs for Cryptographic Migration: A Security-Aware Architecture Tradeoff Method
Eduard Hirsch, Kristina Raab
Cryptographic migration driven by algorithm deprecation, regulatory change, and post-quantum readiness requires more than an inventory of cryptographic assets. Existing Cryptograph…
Detecting Cryptographically Relevant Software Packages with Collaborative LLMs
Eduard Hirsch, Kristina Raab, Tobias J. Bauer +1
IT systems are facing an increasing number of security threats, including advanced persistent attacks and future quantum-computing vulnerabilities. The move towards crypto-agility…
On the Formalization of Cryptographic Migration
Daniel Loebenberger, Stefan-Lukas Gazdag, Daniel Herzinger +3
We present a novel approach to gaining insight into the structure of cryptographic migration problems which are classic problems in applied cryptography. We use a formal model to c…
Toward a Common Understanding of Cryptographic Agility -- A Systematic Review
Christian Näther, Christian Näther, Daniel Herzinger +5
Cryptographic agility is gaining attention due to its crucial role in maintaining cryptographic security in a rapidly evolving technological landscape. However, despite its increas…