12 citations · 24 across the 4 of their papers we have counts for
4 papers · 1 filter
Re: What's Up Johnny? -- Covert Content Attacks on Email End-to-End Encryption
Jens Müller, Marcus Brinkmann, Damian Poddebniak +2
We show practical attacks against OpenPGP and S/MIME encryption and digital signatures in the context of email. Instead of targeting the underlying cryptographic primitives, our at…
On the security of modern Single Sign-On Protocols: Second-Order Vulnerabilities in OpenID Connect
Vladislav Mladenov, Christian Mainka, Jörg Schwenk
OAuth is the new de facto standard for delegating authorization in the web. An important limitation of OAuth is the fact that it was designed for authorization and not for authenti…
Owning Your Home Network: Router Security Revisited
Marcus Niemietz, Joerg Schwenk
In this paper we investigate the Web interfaces of several DSL home routers that can be used to manage their settings via a Web browser. Our goal is to change these settings by usi…
Do not trust me: Using malicious IdPs for analyzing and attacking Single Sign-On
Christian Mainka, Vladislav Mladenov, Jörg Schwenk
Single Sign-On (SSO) systems simplify login procedures by using an an Identity Provider (IdP) to issue authentication tokens which can be consumed by Service Providers (SPs). Tradi…