Publications

KIM: Kaos In der Medizin
Die sichere E-Mail-Infrastruktur für Ärztinnen, Apothekerinnen, Krankenversicherungen und Kliniken in Deutschland, KIM - Kommunikation …
Christoph Saatjohann, Fabian Ising, Sebastian Schinzel
Dissertation: Exploring Corner Cases of Modern Applied Cryptography
The advent of instantaneous communication via the Internet in the 80s and 90s has revolutionized the way we communicate. Suddenly, we …
Fabian Ising
PDF Cite
Content-Type: Multipart/Oracle - Tapping into Format Oracles in Email End-to-End Encryption
S/MIME and OpenPGP use cryptographic constructions repeatedly shown to be vulnerable to format oracle attacks in protocols like TLS, …
Fabian Ising, Damian Poddebniak, Tobias Kappert, Christoph Saatjohann, Sebastian Schinzel
Cite URL
Sicherheit Medizintechnischer Protokolle im Krankenhaus
Medizinische Einrichtungen waren in den letzten Jahren immer wieder von Cyber-Angriffen betroffen. Auch wenn sich diese Angriffe …
Christoph Saatjohann, Fabian Ising, Matthias Gierlings, Dominik Noss, Sascha Schimmler, Alexander Klemm, Leif Grundmann, Tilman Frosch, Sebastian Schinzel
Cite DOI URL
Grand Theft App: Digital Forensics of Vehicle Assistant Apps
Due to the increasing connectivity of modern vehicles, collected data is no longer only stored in the vehicle itself but also …
Simon Ebbers, Fabian Ising, Christoph Saatjohann, Sebastian Schinzel
Cite DOI URL
Why TLS Is Better without STARTTLS: A Security Analysis of STARTTLS in the Email Context
TLS is one of today’s most widely used and best-analyzed encryption technologies. However, for historical reasons, TLS for email …
Damian Poddebniak, Fabian Ising, Hanno Böck, Sebastian Schinzel
Cite URL
CORSICA: Cross-Origin Web Service Identification
Vulnerabilities in private networks are difficult to detect for attackers outside of the network. While there are known methods for …
Christian Dresen, Fabian Ising, Damian Poddebniak, Tobias Kappert, Thorsten Holz, Sebastian Schinzel
Cite DOI URL
STALK: Security Analysis of Smartwatches for Kids
Smart wearable devices become more and more prevalent in the age of the Internet of Things. While people wear them as fitness trackers …
Christoph Saatjohann, Fabian Ising, Luise Krings, Sebastian Schinzel
Cite DOI URL
Office Document Security and Privacy
OOXML and ODF are the de facto standard data formats for word processing, spreadsheets, and presentations. Both are XML-based, …
Jens Müller, Fabian Ising, Christian Mainka, Vladislav Mladenov, Sebastian Schinzel, Jörg Schwenk
Cite URL
Practical Decryption exFiltration: Breaking PDF Encryption
The Portable Document Format, better known as PDF, is one of the most widely used document formats worldwide, and in order to ensure …
Jens Müller, Fabian Ising, Vladislav Mladenov, Christian Mainka, Sebastian Schinzel, Jörg Schwenk
Cite DOI URL
Efail: Breaking S/MIME and OpenPGP Email Encryption Using Exfiltration Channels
OpenPGP and S/MIME are the two prime standards for providing end-to-end security for emails. We describe novel attacks built upon a …
Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, Jörg Schwenk
Cite URL
Master's Thesis: Analyzing Oracle Attacks against E-mail End-to-End Encryption
Fabian Ising
Cite