Showing cs.CRShow all
3 papers · 1 filter
cs.CR2025
Attestable Builds: Compiling Verifiable Binaries on Untrusted Systems using Trusted Execution Environments
Daniel Hugenroth, Mario Lins, René Mayrhofer +1
In this paper we present attestable builds, a new paradigm to provide strong source-to-binary correspondence in software artifacts. We tackle the challenge of opaque build pipeline…
cs.CR2025
An Architecture for Distributed Digital Identities in the Physical World
René Mayrhofer, Michael Roland, Tobias Höller +2
Digital identities are increasingly important for mediating not only digital but also physical service transactions. Managing such identities through centralized providers can caus…
cs.CR2024
On the critical path to implant backdoors and the effectiveness of potential mitigation techniques: Early learnings from XZ
Mario Lins, René Mayrhofer, Michael Roland +2
An emerging supply-chain attack due to a backdoor in XZ Utils has been identified. The backdoor allows an attacker to run commands remotely on vulnerable servers utilizing SSH with…