Jörg Schwenk

ORCID

Publication Activity (10 Years)

Years Active: 1996-2024
Publications (10 Years): 63

Top Venues

USENIX Security Symposium

IACR Cryptol. ePrint Arch.

CCS

CoRR

Publications

Martin Dunsche, Marcel Maehren, Nurullah Erinola, Robert Merget, Nicolai Bissantz, Juraj Somorovsky, Jörg Schwenk
With Great Power Come Great Side Channels: Statistical Timing Side-Channel Analyses with Bounded Type-1 Errors. USENIX Security Symposium (2024)
Fabian Bäumer, Marcus Brinkmann, Jörg Schwenk
Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation. USENIX Security Symposium (2024)
Fabian Bäumer, Marcus Brinkmann, Jörg Schwenk
Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation. CoRR (2023)
Sven Hebrok, Simon Nachtigall, Marcel Maehren, Nurullah Erinola, Robert Merget, Juraj Somorovsky, Jörg Schwenk
We Really Need to Talk About Session Tickets: A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets. USENIX Security Symposium (2023)
Matthias Gierlings, Marcus Brinkmann, Jörg Schwenk
Isolated and Exhausted: Attacking Operating Systems via Site Isolation in the Browser. USENIX Security Symposium (2023)
Simon Rohlmann, Vladislav Mladenov, Christian Mainka, Daniel Hirschberger, Jörg Schwenk
Every Signature is Broken: On the Insecurity of Microsoft Office's OOXML Signatures. USENIX Security Symposium (2023)
Dominik Trevor Noß, Lukas Knittel, Christian Mainka, Marcus Niemietz, Jörg Schwenk
Finding All Cross-Site Needles in the DOM Stack: A Comprehensive Methodology for the Automatic XS-Leak Detection in Web Browsers. CCS (2023)
Nurullah Erinola, Marcel Maehren, Robert Merget, Juraj Somorovsky, Jörg Schwenk
Exploring the Unknown DTLS Universe: Analysis of the DTLS Server Ecosystem on the Internet. USENIX Security Symposium (2023)
Simon Rohlmann, Christian Mainka, Vladislav Mladenov, Jörg Schwenk
Oops... Code Execution and Content Spoofing: The First Comprehensive Analysis of OpenDocument Signatures. USENIX Security Symposium (2022)
Jörg Schwenk, Douglas Stebila
A reduction-based proof for authentication and session key security in three-party Kerberos. Int. J. Appl. Cryptogr. 4 (2) (2022)
Louis Jannett, Vladislav Mladenov, Christian Mainka, Jörg Schwenk
DISTINCT: Identity Theft using In-Browser Communications in Dual-Window Single Sign-On. CCS (2022)
Marcel Maehren, Philipp Nieting, Sven Hebrok, Robert Merget, Juraj Somorovsky, Jörg Schwenk
TLS-Anvil: Adapting Combinatorial Testing for TLS Libraries. USENIX Security Symposium (2022)
Robert Merget, Marcus Brinkmann, Nimrod Aviram, Juraj Somorovsky, Johannes Mittmann, Jörg Schwenk
Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E). USENIX Security Symposium (2021)
Marcus Brinkmann, Christian Dresen, Robert Merget, Damian Poddebniak, Jens Müller, Juraj Somorovsky, Jörg Schwenk, Sebastian Schinzel
ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication. USENIX Security Symposium (2021)
Bertram Poettering, Paul Rösler, Jörg Schwenk, Douglas Stebila
SoK: Game-based Security Models for Group Key Exchange. IACR Cryptol. ePrint Arch. 2021 (2021)
Bertram Poettering, Paul Rösler, Jörg Schwenk, Douglas Stebila
SoK: Game-Based Security Models for Group Key Exchange. CT-RSA (2021)
Simon Rohlmann, Vladislav Mladenov, Christian Mainka, Jörg Schwenk
Breaking the Specification: PDF Certification. IEEE Symposium on Security and Privacy (2021)
Jens Müller, Dominik Noss, Christian Mainka, Vladislav Mladenov, Jörg Schwenk
Processing Dangerous Paths - On Security and Privacy of the Portable Document Format. NDSS (2021)
Lukas Knittel, Christian Mainka, Marcus Niemietz, Dominik Trevor Noß, Jörg Schwenk
XSinator.com: From a Formal Model to the Automatic Evaluation of Cross-Site Leaks in Web Browsers. CCS (2021)
Jens Müller, Marcus Brinkmann, Damian Poddebniak, Sebastian Schinzel, Jörg Schwenk
Mailto: Me Your Secrets. On Bugs and Features in Email End-to-End Encryption. CNS (2020)
Jörg Schwenk, Marcus Brinkmann, Damian Poddebniak, Jens Müller, Juraj Somorovsky, Sebastian Schinzel
Mitigation of Attacks on Email End-to-End Encryption. CCS (2020)
Sebastian Lauer, Kai Gellert, Robert Merget, Tobias Handirk, Jörg Schwenk
T0RTT: Non-Interactive Immediate Forward-Secret Single-Pass Circuit Construction. Proc. Priv. Enhancing Technol. 2020 (2) (2020)
Stefan Hoffmann, Jens Müller, Jörg Schwenk, Gerd Bumiller
Powerless Security. ACNS (2) (2020)
Robert Merget, Marcus Brinkmann, Nimrod Aviram, Juraj Somorovsky, Johannes Mittmann, Jörg Schwenk
Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E). IACR Cryptol. ePrint Arch. 2020 (2020)
Sven Schäge, Jörg Schwenk, Sebastian Lauer
Privacy-Preserving Authenticated Key Exchange and the Case of IKEv2. Public Key Cryptography (2) (2020)
Jens Müller, Fabian Ising, Christian Mainka, Vladislav Mladenov, Sebastian Schinzel, Jörg Schwenk
Office Document Security and Privacy. WOOT @ USENIX Security Symposium (2020)
Benjamin Dowling, Paul Rösler, Jörg Schwenk
Flexible Authenticated and Confidential Channel Establishment (fACCE): Analyzing the Noise Protocol Framework. Public Key Cryptography (1) (2020)
Sven Schäge, Jörg Schwenk, Sebastian Lauer
Privacy-Preserving Authenticated Key Exchange and the Case of IKEv2. IACR Cryptol. ePrint Arch. 2020 (2020)
Robert Merget, Juraj Somorovsky, Nimrod Aviram, Craig Young, Janis Fliegenschmidt, Jörg Schwenk, Yuval Shavitt
Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities. USENIX Security Symposium (2019)
Jens Müller, Marcus Brinkmann, Damian Poddebniak, Sebastian Schinzel, Jörg Schwenk
Re: What's Up Johnny? - Covert Content Attacks on Email End-to-End Encryption. CoRR (2019)
Nils Engelbertz, Vladislav Mladenov, Juraj Somorovsky, David Herring, Nurullah Erinola, Jörg Schwenk
Security Analysis of XAdES Validation in the CEF Digital Signature Services (DSS). Open Identity Summit (2019)
Jörg Schwenk, Douglas Stebila
A Reduction-Based Proof for Authentication and Session Key Security in 3-Party Kerberos. IACR Cryptol. ePrint Arch. 2019 (2019)
Vladislav Mladenov, Christian Mainka, Karsten Meyer zu Selhausen, Martin Grothe, Jörg Schwenk
1 Trillion Dollar Refund: How To Spoof PDF Signatures. CCS (2019)
Jens Müller, Marcus Brinkmann, Damian Poddebniak, Sebastian Schinzel, Jörg Schwenk
Re: What's Up Johnny? - Covert Content Attacks on Email End-to-End Encryption. ACNS (2019)
Jens Müller, Marcus Brinkmann, Damian Poddebniak, Hanno Böck, Sebastian Schinzel, Juraj Somorovsky, Jörg Schwenk
"Johnny, you are fired!" - Spoofing OpenPGP and S/MIME Signatures in Emails. USENIX Security Symposium (2019)
Jörg Schwenk, Tobias Wich, Detlef Hühnlein
Moderne Vertrauensdienste für vertrauenswürdige Transaktionen. Datenschutz und Datensicherheit 43 (4) (2019)
Benjamin Dowling, Paul Rösler, Jörg Schwenk
Flexible Authenticated and Confidential Channel Establishment (fACCE): Analyzing the Noise Protocol Framework. IACR Cryptol. ePrint Arch. 2019 (2019)
Sebastian Lauer, Kai Gellert, Robert Merget, Tobias Handirk, Jörg Schwenk
T0RTT: Non-Interactive Immediate Forward-Secret Single-Pass Circuit Construction. IACR Cryptol. ePrint Arch. 2019 (2019)
Jens Müller, Fabian Ising, Vladislav Mladenov, Christian Mainka, Sebastian Schinzel, Jörg Schwenk
Practical Decryption exFiltration: Breaking PDF Encryption. CCS (2019)
Dennis Felsch, Martin Grothe, Jörg Schwenk, Adam Czubak, Marcin Szymanek
The Dangers of Key Reuse: Practical Attacks on IPsec IKE. USENIX Security Symposium (2018)
Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, Jörg Schwenk
Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels. USENIX Security Symposium (2018)
Jens Müller, Vladislav Mladenov, Dennis Felsch, Jörg Schwenk
PostScript Undead: Pwning the Web with a 35 Years Old Language. RAID (2018)
Nils Engelbertz, Nurullah Erinola, David Herring, Juraj Somorovsky, Vladislav Mladenov, Jörg Schwenk
Security Analysis of eIDAS - The Cross-Country Authentication Scheme in Europe. WOOT @ USENIX Security Symposium (2018)
Paul Rösler, Christian Mainka, Jörg Schwenk
More is Less: On the End-to-End Security of Group Chats in Signal, WhatsApp, and Threema. EuroS&P (2018)
Jens Müller, Vladislav Mladenov, Juraj Somorovsky, Jörg Schwenk
SoK: Exploiting Network Printers. IEEE Symposium on Security and Privacy (2017)
Martin Grothe, Tobias Niemann, Juraj Somorovsky, Jörg Schwenk
Breaking and Fixing Gridcoin. WOOT (2017)
Paul Rösler, Christian Mainka, Jörg Schwenk
More is Less: How Group Chats Weaken the Security of Instant Messengers Signal, WhatsApp, and Threema. IACR Cryptol. ePrint Arch. 2017 (2017)
Britta Hale, Tibor Jager, Sebastian Lauer, Jörg Schwenk
Simple Security Definitions for and Constructions of 0-RTT Key Exchange. ACNS (2017)
Jörg Schwenk, Marcus Niemietz, Christian Mainka
Same-Origin Policy: Evaluation in Modern Browsers. USENIX Security Symposium (2017)
Marcus Niemietz, Jörg Schwenk
Out of the Dark: UI Redressing and Trustworthy Events. CANS (2017)
Tibor Jager, Florian Kohlar, Sven Schäge, Jörg Schwenk
Authenticated Confidential Channel Establishment and the Security of TLS-DHE. J. Cryptol. 30 (4) (2017)
Dennis Felsch, Christian Mainka, Vladislav Mladenov, Jörg Schwenk
SECRET: On the Feasibility of a Secure, Efficient, and Collaborative Real-Time Web Editor. AsiaCCS (2017)
Christian Mainka, Vladislav Mladenov, Jörg Schwenk, Tobias Wich
SoK: Single Sign-On Security - An Evaluation of OpenID Connect. EuroS&P (2017)
Mario Heiderich, Christopher Späth, Jörg Schwenk
DOMPurify: Client-Side Protection Against XSS and Markup Injection. ESORICS (2) (2017)
Matthias Horst, Martin Grothe, Tibor Jager, Jörg Schwenk
Breaking PPTP VPNs via RADIUS Encryption. CANS (2016)
Jörg Schwenk
Nonce-based Kerberos is a Secure Delegated AKE Protocol. IACR Cryptol. ePrint Arch. 2016 (2016)
Martin Grothe, Christian Mainka, Paul Rösler, Jörg Schwenk
How to Break Microsoft Rights Management Services. WOOT (2016)
Abeer Elsafie, Jörg Schwenk
Evaluating Two Methods for WS-(Security) Policy Negotiation and Decision Making. OTM Conferences (2016)
Christian Mainka, Vladislav Mladenov, Jörg Schwenk
Do Not Trust Me: Using Malicious IdPs for Analyzing and Attacking Single Sign-on. EuroS&P (2016)
Martin Grothe, Christian Mainka, Paul Rösler, Johanna Jupke, Jan Kaiser, Jörg Schwenk
Your Cloud in My Company: Modern Rights Management Services Revisited. ARES (2016)
Christopher Späth, Christian Mainka, Vladislav Mladenov, Jörg Schwenk
SoK: XML Parser Vulnerabilities. WOOT (2016)
Detlef Hühnlein, Tilman Frosch, Jörg Schwenk, Carl-Markus Piswanger, Marc Sel, Tina Hühnlein, Tobias Wich, Daniel Nemmert, René Lottes, Juraj Somorovsky, Vladislav Mladenov, Cristina Condovici, Herbert Leitold, Sophie Stalla-Bourdillon, Niko Tsakalakis, Jan Eichholz, Frank-Michael Kamm, Andreas Kühne, Damian Wabisch, Roger Dean, Jon Shamah, Mikheil Kapanadze, Nuno Ponte, Jose Martins, Renato Portela, Cagatay Karabat, Snezana Stojicic, Slobodan Nedeljkovic, Vincent Bouckaert, Alexandre Defays, Bruce Anderson, Michael Jonas, Christina Hermanns, Thomas Schubert, Dirk Wegener, Alexander Sazonov
FutureTrust - Future Trust Services for Trustworthy Global Transactions. Open Identity Summit (2016)
Tilman Frosch, Christian Mainka, Christoph Bader, Florian Bergsma, Jörg Schwenk, Thorsten Holz
How Secure is TextSecure? EuroS&P (2016)
Florian Bergsma, Tibor Jager, Jörg Schwenk
One-Round Key Exchange with Strong Security: An Efficient and Generic Construction in the Standard Model. IACR Cryptol. ePrint Arch. 2015 (2015)
Mario Heiderich, Marcus Niemietz, Jörg Schwenk
Waiting for CSP - Securing Legacy Web Applications with JSAgents. ESORICS (1) (2015)
Christian Altmeier, Christian Mainka, Juraj Somorovsky, Jörg Schwenk
AdIDoS - Adaptive and Intelligent Fully-Automatic Detection of Denial-of-Service Weaknesses in Web Services. DPM/QASA@ESORICS (2015)
Tibor Jager, Jörg Schwenk, Juraj Somorovsky
Practical Invalid Curve Attacks on TLS-ECDH. ESORICS (1) (2015)
Dennis Kupser, Christian Mainka, Jörg Schwenk, Juraj Somorovsky
How to Break XML Encryption - Automatically. WOOT (2015)
Dennis Felsch, Mario Heiderich, Frederic Schulz, Jörg Schwenk
How Private is Your Private Cloud?: Security Analysis of Cloud Control Interfaces. CCSW (2015)
Tibor Jager, Jörg Schwenk, Juraj Somorovsky
On the Security of TLS 1.3 and QUIC Against Weaknesses in PKCS#1 v1.5 Encryption. CCS (2015)
Marcus Niemietz, Jörg Schwenk
Owning Your Home Network: Router Security Revisited. CoRR (2015)
Marcus Niemietz, Juraj Somorovsky, Christian Mainka, Jörg Schwenk
Not so Smart: On Smart TV Apps. SIoT (2015)
Abeer Elsafie, Jörg Schwenk
Semi-automated Fuzzy MCDM and Lattice Solutions for WS-Policy Intersection. SERVICES (2015)
Florian Bergsma, Tibor Jager, Jörg Schwenk
One-Round Key Exchange with Strong Security: An Efficient and Generic Construction in the Standard Model. Public Key Cryptography (2015)
Vladislav Mladenov, Christian Mainka, Julian Krautwald, Florian Feldmann, Jörg Schwenk
On the security of modern Single Sign-On Protocols: OpenID Connect 1.0. CoRR (2015)
Britta Hale, Tibor Jager, Sebastian Lauer, Jörg Schwenk
Speeding: On Low-Latency Key Exchange. IACR Cryptol. ePrint Arch. 2015 (2015)
Christian Mainka, Vladislav Mladenov, Tim Guenther, Jörg Schwenk
Automatic recognition, processing and attacking of single sign-on protocols with burp suite. Open Identity Summit (2015)
Andreas Mayer, Marcus Niemietz, Vladislav Mladenov, Jörg Schwenk
Guardians of the Clouds: When Identity Providers Fail. CCSW (2014)
Christian Mainka, Vladislav Mladenov, Jörg Schwenk
Do not trust me: Using malicious IdPs for analyzing and attacking Single Sign-On. CoRR (2014)
Christian Mainka, Vladislav Mladenov, Florian Feldmann, Julian Krautwald, Jörg Schwenk
Your Software at my Service: Security Analysis of SaaS Single Sign-On Solutions in the Cloud. CCSW (2014)
Ashar Javed, David Bletgen, Florian Kohlar, Markus Dürmuth, Jörg Schwenk
Secure Fallback Authentication and the Trusted Friend Attack. ICDCS Workshops (2014)
Mario Heiderich, Marcus Niemietz, Felix Schuster, Thorsten Holz, Jörg Schwenk
Scriptless attacks: Stealing more pie without touching the sill. J. Comput. Secur. 22 (4) (2014)
Andreas Mayer, Vladislav Mladenov, Jörg Schwenk, Florian Feldmann, Christopher Meyer
Strengthening Web Authentication through TLS - Beyond TLS Client Certificates. Open Identity Summit (2014)
Tilman Frosch, Christian Mainka, Christoph Bader, Florian Bergsma, Jörg Schwenk, Thorsten Holz
How Secure is TextSecure? IACR Cryptol. ePrint Arch. 2014 (2014)
Ashar Javed, Jens Riemer, Jörg Schwenk
SIACHEN: A Fine-Grained Policy Language for the Mitigation of Cross-Site Scripting Attacks. ISC (2014)
Ashar Javed, Christian Merz, Jörg Schwenk
TTPCookie: Flexible Third-Party Cookie Management for Increasing Online Privacy. TrustCom (2014)
Jörg Schwenk
Modelling Time for Authenticated Key Exchange Protocols. ESORICS (2) (2014)
Andreas Mayer, Vladislav Mladenov, Jörg Schwenk
On the Security of Holder-of-Key Single Sign-On. Sicherheit (2014)
Florian Bergsma, Benjamin Dowling, Florian Kohlar, Jörg Schwenk, Douglas Stebila
Multi-Ciphersuite Security of the Secure Shell (SSH) Protocol. CCS (2014)
Yong Li, Sven Schäge, Zheng Yang, Florian Kohlar, Jörg Schwenk
On the Security of the Pre-Shared Key Ciphersuites of TLS. IACR Cryptol. ePrint Arch. 2014 (2014)
Christopher Meyer, Juraj Somorovsky, Eugen Weiss, Jörg Schwenk, Sebastian Schinzel, Erik Tews
Revisiting SSL/TLS Implementations: New Bleichenbacher Side Channels and Attacks. USENIX Security Symposium (2014)
Yong Li, Sven Schäge, Zheng Yang, Christoph Bader, Jörg Schwenk
New Modular Compilers for Authenticated Key Exchange. ACNS (2014)
Ashar Javed, Jörg Schwenk
Systematically Breaking Online WYSIWYG Editors. WISA (2014)
Yong Li, Sven Schäge, Zheng Yang, Florian Kohlar, Jörg Schwenk
On the Security of the Pre-shared Key Ciphersuites of TLS. Public Key Cryptography (2014)
Mario Heiderich, Jörg Schwenk, Tilman Frosch, Jonas Magazinius, Edward Z. Yang
mXSS attacks: attacking well-secured web-applications by using innerHTML mutations. CCS (2013)
Benjamin Dowling, Florian Giesen, Florian Kohlar, Jörg Schwenk, Douglas Stebila
Multi-ciphersuite security and the SSH protocol. IACR Cryptol. ePrint Arch. 2013 (2013)
Florian Kohlar, Sven Schäge, Jörg Schwenk
On the Security of TLS-DH and TLS-RSA in the Standard Model. IACR Cryptol. ePrint Arch. 2013 (2013)
Abeer Elsafie, Christian Mainka, Jörg Schwenk
A new approach for WS-Policy Intersection using Partial Ordered Sets. ZEUS (2013)
Detlef Hühnlein, Jörg Schwenk, Tobias Wich, Vladislav Mladenov, Florian Feldmann, Andreas Mayer, Johannes Schmölz, Bud P. Bruegger, Moritz Horsch
Options for integrating eID and SAML. Digital Identity Management (2013)
Ashar Javed, Jörg Schwenk
Towards Elimination of Cross-Site Scripting on Mobile Versions of Web Applications. WISA (2013)

Jörg Schwenk.css-eqlu8i{font-size:small;padding-left:4px;}

Publication Activity (10 Years)

Top Topics

Top Venues

Jörg Schwenk