Using Unencrypted HTTP/2 to Circumvent Censorship

Last week, Jost presented his work on the security of the 3MF file in Hong Kong at the 26th International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2023). Some impressions from the journey:

Three of the students who have written their thesis with us won an award for outstanding theses in the context of IT security. We congratulate Marten Schmidt on his third place with the topic of “Analyzing the QUIC Ecosystem With the QUIC-Scanner” in the “Master’s Thesis” category, Philipp Breuch on another third place in the category “Bachelor’s Thesis” with the topic “Web Key Directory and other key exchange methods for OpenPGP”, and Niklas…

How Fragmentation Can Be Extended to the TLS Layer

A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets

As a part of the "Frühlings-Uni", Juraj has held a presentation on the importance of IT security and presented CTFs.

a security analysis on the OpenPGP key exchange method Web Key Directory

an overview of the usage of different file formats used for 3D printing

Two of the students who have written their thesis with us won an award for outstanding theses in the context of IT security. We congratulate Simon Nachtigall on his first place with the topic of “Evaluation of TLS session tickets” in the “Master’s Thesis” category and Nico Heitmann on another first place in the category “Bachelor’s Thesis” with the topic “Security Analysis of the Web Conferencing System BigBlueButton”.

Do you use S/MIME or OpenPGP to secure your emails? Do you think that validating e-mail signatures is easy? If your answer is yes, you should take a look at our study published together with our colleagues from Karlsruhe Institute of Technology, Münster University of Applied Sciences, and Ruhr University Bochum.

Together with our colleagues from the Ruhr University Bochum, we have published our paper on combinatorial testing of TLS implementations. The paper is presented at USENIX Security in Boston this week.

We are searching for two new research candidates, who would like to work in the areas of Web and TLS security.

As a part of the "Herbstuni", Katharina has held a presentation on the importance of IT security and presented CTFs.

Together with Robert Merget, we gave a hands-on tutorial on TLS 1.3 and how you can analyze it with TLS-Attacker. The tutorial was recorded and is now available on YouTube.