Moderne Verfahren der Kryptographie - von RSA zu Zero-Knowledge. - Albrecht Beutelspacher; Jörg Schwenk; Klaus-Dieter Wolfenstetter (Vieweg, 1995)

Establishing a Key Hierarchy for Conditional Access without Encryption. - Jörg Schwenk (Communications and Multimedia Security, 1996)

Public Key Encryption and Signature Schemes Based on Polynomials over Zn. - Jörg Schwenk; Jörg Eisfeld (EUROCRYPT, 1996)

How to Security Broadcast a Secret. - Jörg Schwenk (Communications and Multimedia Security, 1999)

Combining digital watermarks and collusion-secure fingerprints for digital images. - Jana Dittmann; Alexander Behr; Mark Stabenau; Peter Schmitt; Jörg Schwenk; Johannes Ueberberg (Security and Watermarking of Multimedia Contents, 1999)

Combining digital watermarks and collusion secure fingerprints for digital images. - Jana Dittmann; Peter Schmitt; Eva Saar; Jörg Schwenk; Johannes Ueberberg (J. Electronic Imaging, 2000)

Tree-based Key Agreement for Multicast. - Tobias Martin; R. Schaffelhofer; Jörg Schwenk (Communications and Multimedia Security, 2001)

From pay-tv to pay-streaming: similarities and differences. - Jörg Schwenk; Tobias Martin; Erik Neumann (MM&Sec, 2001)

Customer Identification for MPEG Video Based on Digital Fingerprinting. - Jana Dittmann; Enrico Hauer; Claus Vielhauer; Jörg Schwenk; Eva Saar (IEEE Pacific Rim Conference on Multimedia, 2001)

Moderne Verfahren der Kryptographie - von RSA zu Zero-Knowledge (5. Aufl.). - Albrecht Beutelspacher; Jörg Schwenk; Klaus-Dieter Wolfenstetter (Vieweg, 2004)

Pseudonym Generation Scheme for Ad-Hoc Group Communication Based on IDH. - Mark Manulis; Jörg Schwenk (ESAS, 2004)

Key-assignment strategies for CPPM. - André Adelsbach; Jörg Schwenk (MM&Sec, 2004)

Secure XMaiL or How to Get Rid of Legacy Code in Secure E-Mail Applications. - Lars Ewers; Wolfgang Kubbilun; Lijun Liao; Jörg Schwenk (Communications and Multimedia Security, 2005)

Trustworthy Verification and Visualisation of Multiple XML-Signatures. - Wolfgang Kubbilun; Sebastian Gajek; Michael Psarros; Jörg Schwenk (Communications and Multimedia Security, 2005)

Visual Spoofing of SSL Protected Web Sites and Effective Countermeasures. - André Adelsbach; Sebastian Gajek; Jörg Schwenk (ISPEC, 2005)

Moderne Verfahren der Krypotgraphie - von RSA zu Zero-Knowledge (6. Aufl.). - Albrecht Beutelspacher; Jörg Schwenk; Klaus-Dieter Wolfenstetter (Vieweg, 2006)

SSL-VA-Authentifizierung als Schutz von Phishing und Pharming. - Sebastian Gajek; Jörg Schwenk; Christoph Wegener (Sicherheit, 2006)

On Security Models and Compilers for Group Key Exchange Protocols. - Emmanuel Bresson; Mark Manulis; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2006)

Linkable Democratic Group Signatures. - Mark Manulis; Ahmad-Reza Sadeghi; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2006)

SSL-over-SOAP: Towards a Token-based Key Establishment Framework for Web Services. - Sebastian Gajek; Lijun Liao; Bodo Möller; Jörg Schwenk (WEWST, 2007)

Secure Emails in XML Format Using Web Services. - Lijun Liao; Jörg Schwenk (ECOWS, 2007)

Securing Email Communication with XML Technology. - Lijun Liao; Jörg Schwenk (International Conference on Internet Computing, 2007)

Provably Secure Framework for Information Aggregation in Sensor Networks. - Mark Manulis; Jörg Schwenk (ICCSA (1), 2007)

End-to-End Header Protection in Signed S/MIME. - Lijun Liao; Jörg Schwenk (OTM Conferences (2), 2007)

Breaking and fixing the inline approach. - Sebastian Gajek; Lijun Liao; Jörg Schwenk (SWS, 2007)

Secure Internet Voting with Code Sheets. - Jörg Helbach; Jörg Schwenk (VOTE-ID, 2007)

Signieren mit Chipkartensystemen in unsicheren Umgebungen - Homebanking mit Secure HBCI/FinTS. - Sebastian Gajek; Lijun Liao; Jörg Schwenk (Datenschutz und Datensicherheit, 2007)

Studieren mit Sicherheit in Bochum - Die Studiengänge zum Thema IT-Sicherheit. - Christof Paar; Ahmad-Reza Sadeghi; Jörg Schwenk; Christoph Wegener (Datenschutz und Datensicherheit, 2007)

Provably Secure Framework for Information Aggregation is Sensor Networks. - Mark Manulis; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2007)

Enforcing User-Aware Browser-Based Mutual Authentication with Strong Locked Same Origin Policy. - Sebastian Gajek; Mark Manulis; Jörg Schwenk (ACISP, 2008)

TLS-Federation - a Secure and Relying-Party-Friendly Approach for Federated Identity Management. - Bud P. Bruegger; Detlef Hühnlein; Jörg Schwenk (BIOSIG, 2008)

Provably secure browser-based user-aware mutual authentication over TLS. - Sebastian Gajek; Mark Manulis; Ahmad-Reza Sadeghi; Jörg Schwenk (AsiaCCS, 2008)

A Browser-Based Kerberos Authentication Scheme. - Sebastian Gajek; Tibor Jager; Mark Manulis; Jörg Schwenk (ESORICS, 2008)

Code Voting with Linkable Group Signatures. - Jörg Helbach; Jörg Schwenk; Sven Schäge (Electronic Voting, 2008)

CAPTCHA-based Code Voting. - Rolf Oppliger; Jörg Schwenk; Christoph Löhr (Electronic Voting, 2008)

A Novel Solution for End-to-End Integrity Protection in Signed PGP Mail. - Lijun Liao; Jörg Schwenk (ICICS, 2008)

Universally Composable Security Analysis of TLS. - Sebastian Gajek; Mark Manulis; Olivier Pereira; Ahmad-Reza Sadeghi; Jörg Schwenk (ProvSec, 2008)

On the Equivalence of Generic Group Models. - Tibor Jager; Jörg Schwenk (ProvSec, 2008)

Nutzung von selbstsignierten Client-Zertifikaten zur Authentifikation bei SSL/TLS. - Tibor Jager; Heiko Jäkel; Jörg Schwenk (Sicherheit, 2008)

Protecting Code Voting Against Vote Selling. - Rolf Oppliger; Jörg Schwenk; Jörg Helbach (Sicherheit, 2008)

Stronger TLS bindings for SAML assertions and SAML artifacts. - Sebastian Gajek; Lijun Liao; Jörg Schwenk (SWS, 2008)

Universally Composable Security Analysis of TLS - Secure Sessions with Handshake and Record Layer Protocols. - Sebastian Gajek; Mark Manulis; Olivier Pereira; Ahmad-Reza Sadeghi; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2008)

The Generic Hardness of Subset Membership Problems under the Factoring Assumption. - Tibor Jager; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2008)

The Accountability Problem of Flooding Attacks in Service-Oriented Architectures. - Meiko Jensen; Jörg Schwenk (ARES, 2009)

On Technical Security Issues in Cloud Computing. - Meiko Jensen; Jörg Schwenk; Nils Gruschka; Luigi Lo Iacono (IEEE CLOUD, 2009)

SAMLizing the European Citizen Card. - Jan Eichholz; Detlef Hühnlein; Jörg Schwenk (BIOSIG, 2009)

Sicherheitsanalyse von Kreditkarten am Beispiel von EMV. - Christopher Wolf; Jörg Schwenk; Zidu Wang (GI Jahrestagung, 2009)

Analysis of Signature Wrapping Attacks and Countermeasures. - Sebastian Gajek; Meiko Jensen; Lijun Liao; Jörg Schwenk (ICWS, 2009)

Risks of the CardSpace Protocol. - Sebastian Gajek; Jörg Schwenk; Michael Steiner 001; Chen Xuan (ISC, 2009)

Group key agreement for wireless mesh networks. - Andreas Noack 002; Jörg Schwenk (LCN, 2009)

Extending the similarity-based XML multicast approach with digital signatures. - Antonia Azzini; Stefania Marrara; Meiko Jensen; Jörg Schwenk (SWS, 2009)

The curse of namespaces in the domain of XML signature. - Meiko Jensen; Lijun Liao; Jörg Schwenk (SWS, 2009)

XML Signature Wrapping Angriffe - What you process is not always what you verify. - Nils Gruschka; Meiko Jensen; Luigi Lo Iacono; Jörg Schwenk (Datenschutz und Datensicherheit, 2009)

User-aware provably secure protocols for browser-based mutual authentication. - Sebastian Gajek; Mark Manulis; Jörg Schwenk (Int. J. Appl. Cryptogr., 2009)

Security model and framework for information aggregation in sensor networks. - Mark Manulis; Jörg Schwenk (ACM Trans. Sens. Networks, 2009)

Sicherheit und Kryptographie im Internet - Von sicherer E-Mail bis zu IP-Verschlüsselung (3. Aufl.). - Jörg Schwenk (Vieweg, 2010)

Secure Bindings of SAML Assertions to TLS Sessions. - Florian Kohlar; Jörg Schwenk; Meiko Jensen; Sebastian Gajek (ARES, 2010)

Towards an Anonymous Access Control and Accountability Scheme for Cloud Computing. - Meiko Jensen; Sven Schäge; Jörg Schwenk (IEEE CLOUD, 2010)

A New RSA-Based Signature Scheme. - Sven Schäge; Jörg Schwenk (AFRICACRYPT, 2010)

Generic Compilers for Authenticated Key Exchange. - Tibor Jager; Florian Kohlar; Sven Schäge; Jörg Schwenk (ASIACRYPT, 2010)

Attacking of SmartCard-Based Banking Applications with JavaScript-Based Rootkits. - Daniel Bußmeyer; Felix Gröbert; Jörg Schwenk; Christoph Wegener (Financial Cryptography, 2010)

A CDH-Based Ring Signature Scheme with Short Signatures and Public Keys. - Sven Schäge; Jörg Schwenk (Financial Cryptography, 2010)

Group key agreement performance in wireless mesh networks. - Andreas Noack 002; Jörg Schwenk (LCN, 2010)

Streaming-Based Verification of XML Signatures in SOAP Messages. - Juraj Somorovsky; Meiko Jensen; Jörg Schwenk (SERVICES, 2010)

Security Analysis of OpenID. - Pavol Sovis; Florian Kohlar; Jörg Schwenk (Sicherheit, 2010)

Generic Compilers for Authenticated Key Exchange (Full Version). - Tibor Jager; Florian Kohlar; Sven Schäge; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2010)

Security Prospects through Cloud Computing by Adopting Multiple Clouds. - Meiko Jensen; Jörg Schwenk; Jens-Matthias Bohli; Nils Gruschka; Luigi Lo Iacono (IEEE CLOUD, 2011)

All your clouds are belong to us: security analysis of cloud management interfaces. - Juraj Somorovsky; Mario Heiderich; Meiko Jensen; Jörg Schwenk; Nils Gruschka; Luigi Lo Iacono (CCSW, 2011)

The power of recognition: secure single sign-on using TLS channel bindings. - Jörg Schwenk; Florian Kohlar; Marcus Amon (Digital Identity Management, 2011)

The Bug That Made Me President a Browser- and Web-Security Case Study on Helios Voting. - Mario Heiderich; Tilman Frosch; Marcus Niemietz; Jörg Schwenk (VoteID, 2011)

A Standard-Model Security Analysis of TLS-DHE. - Tibor Jager; Florian Kohlar; Sven Schäge; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2011)

On Cryptographically Strong Bindings of SAML Assertions to Transport Layer Security. - Florian Kohlar; Jörg Schwenk; Meiko Jensen; Sebastian Gajek (Int. J. Mob. Comput. Multim. Commun., 2011)

HTTP Authentication. - Jörg Schwenk (Encyclopedia of Cryptography and Security (2nd Ed.), 2011)

Scriptless attacks: stealing the pie without touching the sill. - Mario Heiderich; Marcus Niemietz; Felix Schuster; Thorsten Holz; Jörg Schwenk (CCS, 2012)

XSpRES - Robust and Effective XML Signatures for Web Services. - Christian Mainka; Meiko Jensen; Luigi Lo Iacono; Jörg Schwenk (CLOSER, 2012)

Making XML Signatures Immune to XML Signature Wrapping Attacks. - Christian Mainka; Meiko Jensen; Luigi Lo Iacono; Jörg Schwenk (CLOSER (Selected Papers), 2012)

SeC2: Secure Mobile Solution for Distributed Public Cloud Storages. - Juraj Somorovsky; Christopher Meyer; Thang Tran; Mohamad Sbeiti; Jörg Schwenk; Christian Wietfeld (CLOSER, 2012)

On the Security of TLS-DHE in the Standard Model. - Tibor Jager; Florian Kohlar; Sven Schäge; Jörg Schwenk (CRYPTO, 2012)

Sometimes It's Better to Be STUCK! SAML Transportation Unit for Cryptographic Keys. - Christopher Meyer; Florian Feldmann; Jörg Schwenk (ICISC, 2012)

Strongly Authenticated Key Exchange Protocol from Bilinear Groups without Random Oracles. - Zheng Yang 005; Jörg Schwenk (ProvSec, 2012)

Penetration Testing Tool for Web Services Security. - Christian Mainka; Juraj Somorovsky; Jörg Schwenk (SERVICES, 2012)

Technical Analysis of Countermeasures against Attack on XML Encryption - or - Just Another Motivation for Authenticated Encryption. - Juraj Somorovsky; Jörg Schwenk (SERVICES, 2012)

On the design and implementation of the Open eCard App. - Detlef Hühnlein; Dirk Petrautzki; Johannes Schmölz; Tobias Wich; Moritz Horsch; Thomas Wieland; Jan Eichholz; Alexander Wiesmaier; Johannes Braun 001; Florian Feldmann; Simon Potzernheim; Jörg Schwenk; et al. (Sicherheit, 2012)

On Breaking SAML: Be Whoever You Want to Be. - Juraj Somorovsky; Andreas Mayer; Jörg Schwenk; Marco Kampmann; Meiko Jensen (USENIX Security Symposium, 2012)

XML Signature Wrapping Angriffe wirksam unterbinden. - Meiko Jensen; Holger Junker; Luigi Lo Iacono; Christian Mainka; Jörg Schwenk (Datenschutz und Datensicherheit, 2012)

mXSS attacks: attacking well-secured web-applications by using innerHTML mutations. - Mario Heiderich; Jörg Schwenk; Tilman Frosch; Jonas Magazinius; Edward Z. Yang (CCS, 2013)

Randomly Failed! The State of Randomness in Current Java Implementations. - Kai Michaelis; Christopher Meyer; Jörg Schwenk (CT-RSA, 2013)

Options for integrating eID and SAML. - Detlef Hühnlein; Jörg Schwenk; Tobias Wich; Vladislav Mladenov; Florian Feldmann; Andreas Mayer; Johannes Schmölz; Bud P. Bruegger; Moritz Horsch (Digital Identity Management, 2013)

A New Approach towards DoS Penetration Testing on Web Services. - Andreas Falkenberg; Christian Mainka; Juraj Somorovsky; Jörg Schwenk (ICWS, 2013)

How to authenticate mobile devices in a web environment - the SIM-ID approach. - Florian Feldmann; Jörg Schwenk (Open Identity Summit, 2013)

Towards Elimination of Cross-Site Scripting on Mobile Versions of Web Applications. - Ashar Javed 001; Jörg Schwenk (WISA, 2013)

SoK: Lessons Learned from SSL/TLS Attacks. - Christopher Meyer; Jörg Schwenk (WISA, 2013)

A new approach for WS-Policy Intersection using Partial Ordered Sets. - Abeer Elsafie; Christian Mainka; Jörg Schwenk (ZEUS, 2013)

Multi-ciphersuite security and the SSH protocol. - Benjamin Dowling; Florian Giesen; Florian Kohlar; Jörg Schwenk; Douglas Stebila (IACR Cryptol. ePrint Arch., 2013)

On the Security of TLS-DH and TLS-RSA in the Standard Model. - Florian Kohlar; Sven Schäge; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2013)

Lessons Learned From Previous SSL/TLS Attacks - A Brief Chronology Of Attacks And Weaknesses. - Christopher Meyer; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2013)

Modelling Time, or A Step Towards Reduction-based Security Proofs for OTP and Kerberos. - Jörg Schwenk (IACR Cryptol. ePrint Arch., 2013)

On the Analysis of Cryptographic Assumptions in the Generic Ring Model. - Tibor Jager; Jörg Schwenk (J. Cryptol., 2013)

New Modular Compilers for Authenticated Key Exchange. - Yong Li 021; Sven Schäge; Zheng Yang 005; Christoph Bader; Jörg Schwenk (ACNS, 2014)

Multi-Ciphersuite Security of the Secure Shell (SSH) Protocol. - Florian Bergsma; Benjamin Dowling; Florian Kohlar; Jörg Schwenk; Douglas Stebila (CCS, 2014)

Your Software at my Service: Security Analysis of SaaS Single Sign-On Solutions in the Cloud. - Christian Mainka; Vladislav Mladenov; Florian Feldmann; Julian Krautwald; Jörg Schwenk (CCSW, 2014)

Guardians of the Clouds: When Identity Providers Fail. - Andreas Mayer; Marcus Niemietz; Vladislav Mladenov; Jörg Schwenk (CCSW, 2014)

Modelling Time for Authenticated Key Exchange Protocols. - Jörg Schwenk (ESORICS (2), 2014)

Secure Fallback Authentication and the Trusted Friend Attack. - Ashar Javed 001; David Bletgen; Florian Kohlar; Markus Dürmuth; Jörg Schwenk (ICDCS Workshops, 2014)

SIACHEN: A Fine-Grained Policy Language for the Mitigation of Cross-Site Scripting Attacks. - Ashar Javed 001; Jens Riemer; Jörg Schwenk (ISC, 2014)

Strengthening Web Authentication through TLS - Beyond TLS Client Certificates. - Andreas Mayer; Vladislav Mladenov; Jörg Schwenk; Florian Feldmann; Christopher Meyer (Open Identity Summit, 2014)

On the Security of Holder-of-Key Single Sign-On. - Andreas Mayer; Vladislav Mladenov; Jörg Schwenk (Sicherheit, 2014)

TTPCookie: Flexible Third-Party Cookie Management for Increasing Online Privacy. - Ashar Javed 001; Christian Merz; Jörg Schwenk (TrustCom, 2014)

Revisiting SSL/TLS Implementations: New Bleichenbacher Side Channels and Attacks. - Christopher Meyer; Juraj Somorovsky; Eugen Weiss; Jörg Schwenk; Sebastian Schinzel; Erik Tews (USENIX Security Symposium, 2014)

Systematically Breaking Online WYSIWYG Editors. - Ashar Javed 001; Jörg Schwenk (WISA, 2014)

How Secure is TextSecure? - Tilman Frosch; Christian Mainka; Christoph Bader; Florian Bergsma; Jörg Schwenk; Thorsten Holz (IACR Cryptol. ePrint Arch., 2014)

On the Security of the Pre-Shared Key Ciphersuites of TLS. - Yong Li 021; Sven Schäge; Zheng Yang 005; Florian Kohlar; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2014)

Scriptless attacks: Stealing more pie without touching the sill. - Mario Heiderich; Marcus Niemietz; Felix Schuster; Thorsten Holz; Jörg Schwenk (J. Comput. Secur., 2014)

How Private is Your Private Cloud?: Security Analysis of Cloud Control Interfaces. - Dennis Felsch; Mario Heiderich; Frederic Schulz; Jörg Schwenk (CCSW, 2015)

On the Security of TLS 1.3 and QUIC Against Weaknesses in PKCS#1 v1.5 Encryption. - Tibor Jager; Jörg Schwenk; Juraj Somorovsky (CCS, 2015)

AdIDoS - Adaptive and Intelligent Fully-Automatic Detection of Denial-of-Service Weaknesses in Web Services. - Christian Altmeier; Christian Mainka; Juraj Somorovsky; Jörg Schwenk (DPM/QASA@ESORICS, 2015)

Waiting for CSP - Securing Legacy Web Applications with JSAgents. - Mario Heiderich; Marcus Niemietz; Jörg Schwenk (ESORICS (1), 2015)

Practical Invalid Curve Attacks on TLS-ECDH. - Tibor Jager; Jörg Schwenk; Juraj Somorovsky (ESORICS (1), 2015)

Automatic recognition, processing and attacking of single sign-on protocols with burp suite. - Christian Mainka; Vladislav Mladenov; Tim Guenther; Jörg Schwenk (Open Identity Summit, 2015)

Semi-automated Fuzzy MCDM and Lattice Solutions for WS-Policy Intersection. - Abeer Elsafie; Jörg Schwenk (SERVICES, 2015)

Not so Smart: On Smart TV Apps. - Marcus Niemietz; Juraj Somorovsky; Christian Mainka; Jörg Schwenk (SIoT, 2015)

How to Break XML Encryption - Automatically. - Dennis Kupser; Christian Mainka; Jörg Schwenk; Juraj Somorovsky (WOOT, 2015)

On the security of modern Single Sign-On Protocols: OpenID Connect 1.0. - Vladislav Mladenov; Christian Mainka; Julian Krautwald; Florian Feldmann; Jörg Schwenk (CoRR, 2015)

Owning Your Home Network: Router Security Revisited. - Marcus Niemietz; Jörg Schwenk (CoRR, 2015)

One-Round Key Exchange with Strong Security: An Efficient and Generic Construction in the Standard Model. - Florian Bergsma; Tibor Jager; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2015)

Speeding: On Low-Latency Key Exchange. - Britta Hale; Tibor Jager; Sebastian Lauer; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2015)

Your Cloud in My Company: Modern Rights Management Services Revisited. - Martin Grothe; Christian Mainka; Paul Rösler; Johanna Jupke; Jan Kaiser; Jörg Schwenk (ARES, 2016)

Breaking PPTP VPNs via RADIUS Encryption. - Matthias Horst; Martin Grothe; Tibor Jager; Jörg Schwenk (CANS, 2016)

Do Not Trust Me: Using Malicious IdPs for Analyzing and Attacking Single Sign-on. - Christian Mainka; Vladislav Mladenov; Jörg Schwenk (EuroS&P, 2016)

FutureTrust - Future Trust Services for Trustworthy Global Transactions. - Detlef Hühnlein; Tilman Frosch; Jörg Schwenk; Carl-Markus Piswanger; Marc Sel; Tina Hühnlein; Tobias Wich; Daniel Nemmert; René Lottes; Juraj Somorovsky; Vladislav Mladenov; Cristina Condovici; et al. (Open Identity Summit, 2016)

Evaluating Two Methods for WS-(Security) Policy Negotiation and Decision Making. - Abeer Elsafie; Jörg Schwenk (OTM Conferences, 2016)

How to Break Microsoft Rights Management Services. - Martin Grothe; Christian Mainka; Paul Rösler; Jörg Schwenk (WOOT, 2016)

SoK: XML Parser Vulnerabilities. - Christopher Späth; Christian Mainka; Vladislav Mladenov; Jörg Schwenk (WOOT, 2016)

Nonce-based Kerberos is a Secure Delegated AKE Protocol. - Jörg Schwenk (IACR Cryptol. ePrint Arch., 2016)

Simple Security Definitions for and Constructions of 0-RTT Key Exchange. - Britta Hale; Tibor Jager; Sebastian Lauer; Jörg Schwenk (ACNS, 2017)

Out of the Dark: UI Redressing and Trustworthy Events. - Marcus Niemietz; Jörg Schwenk (CANS, 2017)

SECRET: On the Feasibility of a Secure, Efficient, and Collaborative Real-Time Web Editor. - Dennis Felsch; Christian Mainka; Vladislav Mladenov; Jörg Schwenk (AsiaCCS, 2017)

DOMPurify: Client-Side Protection Against XSS and Markup Injection. - Mario Heiderich; Christopher Späth; Jörg Schwenk (ESORICS (2), 2017)

SoK: Single Sign-On Security - An Evaluation of OpenID Connect. - Christian Mainka; Vladislav Mladenov; Jörg Schwenk; Tobias Wich (EuroS&P, 2017)

SoK: Exploiting Network Printers. - Jens Müller 007; Vladislav Mladenov; Juraj Somorovsky; Jörg Schwenk (IEEE Symposium on Security and Privacy, 2017)

Same-Origin Policy: Evaluation in Modern Browsers. - Jörg Schwenk; Marcus Niemietz; Christian Mainka (USENIX Security Symposium, 2017)

Breaking and Fixing Gridcoin. - Martin Grothe; Tobias Niemann; Juraj Somorovsky; Jörg Schwenk (WOOT, 2017)

More is Less: How Group Chats Weaken the Security of Instant Messengers Signal, WhatsApp, and Threema. - Paul Rösler; Christian Mainka; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2017)

Authenticated Confidential Channel Establishment and the Security of TLS-DHE. - Tibor Jager; Florian Kohlar; Sven Schäge; Jörg Schwenk (J. Cryptol., 2017)

More is Less: On the End-to-End Security of Group Chats in Signal, WhatsApp, and Threema. - Paul Rösler; Christian Mainka; Jörg Schwenk (EuroS&P, 2018)

PostScript Undead: Pwning the Web with a 35 Years Old Language. - Jens Müller 007; Vladislav Mladenov; Dennis Felsch; Jörg Schwenk (RAID, 2018)

The Dangers of Key Reuse: Practical Attacks on IPsec IKE. - Dennis Felsch; Martin Grothe; Jörg Schwenk; Adam Czubak; Marcin Szymanek (USENIX Security Symposium, 2018)

Efail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration Channels. - Damian Poddebniak; Christian Dresen; Jens Müller 007; Fabian Ising; Sebastian Schinzel; Simon Friedberger; Juraj Somorovsky; Jörg Schwenk (USENIX Security Symposium, 2018)

Security Analysis of eIDAS - The Cross-Country Authentication Scheme in Europe. - Nils Engelbertz; Nurullah Erinola; David Herring; Juraj Somorovsky; Vladislav Mladenov; Jörg Schwenk (WOOT @ USENIX Security Symposium, 2018)

Re: What's Up Johnny? - Covert Content Attacks on Email End-to-End Encryption. - Jens Müller 007; Marcus Brinkmann; Damian Poddebniak; Sebastian Schinzel; Jörg Schwenk (ACNS, 2019)

Practical Decryption exFiltration: Breaking PDF Encryption. - Jens Müller 007; Fabian Ising; Vladislav Mladenov; Christian Mainka; Sebastian Schinzel; Jörg Schwenk (CCS, 2019)

1 Trillion Dollar Refund: How To Spoof PDF Signatures. - Vladislav Mladenov; Christian Mainka; Karsten Meyer zu Selhausen; Martin Grothe; Jörg Schwenk (CCS, 2019)

Security Analysis of XAdES Validation in the CEF Digital Signature Services (DSS). - Nils Engelbertz; Vladislav Mladenov; Juraj Somorovsky; David Herring; Nurullah Erinola; Jörg Schwenk (Open Identity Summit, 2019)

"Johnny, you are fired!" - Spoofing OpenPGP and S/MIME Signatures in Emails. - Jens Müller 007; Marcus Brinkmann; Damian Poddebniak; Hanno Böck; Sebastian Schinzel; Juraj Somorovsky; Jörg Schwenk (USENIX Security Symposium, 2019)

Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities. - Robert Merget; Juraj Somorovsky; Nimrod Aviram; Craig Young; Janis Fliegenschmidt; Jörg Schwenk; Yuval Shavitt (USENIX Security Symposium, 2019)

Moderne Vertrauensdienste für vertrauenswürdige Transaktionen. - Jörg Schwenk; Tobias Wich; Detlef Hühnlein (Datenschutz und Datensicherheit, 2019)

Flexible Authenticated and Confidential Channel Establishment (fACCE): Analyzing the Noise Protocol Framework. - Benjamin Dowling; Paul Rösler; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2019)

A Reduction-Based Proof for Authentication and Session Key Security in 3-Party Kerberos. - Jörg Schwenk; Douglas Stebila (IACR Cryptol. ePrint Arch., 2019)

Powerless Security. - Stefan Hoffmann 004; Jens Müller 007; Jörg Schwenk; Gerd Bumiller (ACNS (2), 2020)

Mitigation of Attacks on Email End-to-End Encryption. - Jörg Schwenk; Marcus Brinkmann; Damian Poddebniak; Jens Müller 007; Juraj Somorovsky; Sebastian Schinzel (CCS, 2020)

Mailto: Me Your Secrets. On Bugs and Features in Email End-to-End Encryption. - Jens Müller 007; Marcus Brinkmann; Damian Poddebniak; Sebastian Schinzel; Jörg Schwenk (CNS, 2020)

Office Document Security and Privacy. - Jens Müller 007; Fabian Ising; Christian Mainka; Vladislav Mladenov; Sebastian Schinzel; Jörg Schwenk (WOOT @ USENIX Security Symposium, 2020)

Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E). - Robert Merget; Marcus Brinkmann; Nimrod Aviram; Juraj Somorovsky; Johannes Mittmann; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2020)

Privacy-Preserving Authenticated Key Exchange and the Case of IKEv2. - Sven Schäge; Jörg Schwenk; Sebastian Lauer (IACR Cryptol. ePrint Arch., 2020)

T0RTT: Non-Interactive Immediate Forward-Secret Single-Pass Circuit Construction. - Sebastian Lauer; Kai Gellert; Robert Merget; Tobias Handirk; Jörg Schwenk (Proc. Priv. Enhancing Technol., 2020)

XSinator.com: From a Formal Model to the Automatic Evaluation of Cross-Site Leaks in Web Browsers. - Lukas Knittel; Christian Mainka; Marcus Niemietz; Dominik Trevor Noß; Jörg Schwenk (CCS, 2021)

Processing Dangerous Paths - On Security and Privacy of the Portable Document Format. - Jens Müller 007; Dominik Noss; Christian Mainka; Vladislav Mladenov; Jörg Schwenk (NDSS, 2021)

Breaking the Specification: PDF Certification. - Simon Rohlmann; Vladislav Mladenov; Christian Mainka; Jörg Schwenk (SP, 2021)

ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication. - Marcus Brinkmann; Christian Dresen; Robert Merget; Damian Poddebniak; Jens Müller 007; Juraj Somorovsky; Jörg Schwenk; Sebastian Schinzel (USENIX Security Symposium, 2021)

SoK: Game-based Security Models for Group Key Exchange. - Bertram Poettering; Paul Rösler; Jörg Schwenk; Douglas Stebila (IACR Cryptol. ePrint Arch., 2021)

DISTINCT: Identity Theft using In-Browser Communications in Dual-Window Single Sign-On. - Louis Jannett; Vladislav Mladenov; Christian Mainka; Jörg Schwenk (CCS, 2022)

TLS-Anvil: Adapting Combinatorial Testing for TLS Libraries. - Marcel Maehren; Philipp Nieting; Sven Hebrok; Robert Merget; Juraj Somorovsky; Jörg Schwenk (USENIX Security Symposium, 2022)

Oops... Code Execution and Content Spoofing: The First Comprehensive Analysis of OpenDocument Signatures. - Simon Rohlmann; Christian Mainka; Vladislav Mladenov; Jörg Schwenk (USENIX Security Symposium, 2022)

A reduction-based proof for authentication and session key security in three-party Kerberos. - Jörg Schwenk; Douglas Stebila (Int. J. Appl. Cryptogr., 2022)

Guide to Internet Cryptography - Security Protocols and Real-World Attack Implications - Jörg Schwenk (Springer, 2022)

USENIX'23 Artifact: Isolated and Exhausted: Attacking Operating Systems via Site Isolation in the Browser. - Matthias Gierlings; Marcus Brinkmann; Jörg Schwenk (Zenodo, 2022)

Finding All Cross-Site Needles in the DOM Stack: A Comprehensive Methodology for the Automatic XS-Leak Detection in Web Browsers. - Dominik Trevor Noß; Lukas Knittel; Christian Mainka; Marcus Niemietz; Jörg Schwenk (CCS, 2023)

Exploring the Unknown DTLS Universe: Analysis of the DTLS Server Ecosystem on the Internet. - Nurullah Erinola; Marcel Maehren; Robert Merget; Juraj Somorovsky; Jörg Schwenk (USENIX Security Symposium, 2023)

Isolated and Exhausted: Attacking Operating Systems via Site Isolation in the Browser. - Matthias Gierlings; Marcus Brinkmann; Jörg Schwenk (USENIX Security Symposium, 2023)

We Really Need to Talk About Session Tickets: A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets. - Sven Hebrok; Simon Nachtigall; Marcel Maehren; Nurullah Erinola; Robert Merget; Juraj Somorovsky; Jörg Schwenk (USENIX Security Symposium, 2023)

Every Signature is Broken: On the Insecurity of Microsoft Office's OOXML Signatures. - Simon Rohlmann; Vladislav Mladenov; Christian Mainka; Daniel Hirschberger; Jörg Schwenk (USENIX Security Symposium, 2023)

Terrapin Attack: Breaking SSH Channel Integrity By Sequence Number Manipulation. - Fabian Bäumer; Marcus Brinkmann; Jörg Schwenk (USENIX Security Symposium, 2024)

With Great Power Come Great Side Channels: Statistical Timing Side-Channel Analyses with Bounded Type-1 Errors. - Martin Dunsche; Marcel Maehren; Nurullah Erinola; Robert Merget; Nicolai Bissantz; Juraj Somorovsky; Jörg Schwenk (USENIX Security Symposium, 2024)

USENIX'24 Artifact Datasets: With Great Power Come Great Side Channels: Statistical Timing Side-Channel Analyses with Bounded Type-1 Errors. - Martin Dunsche; Marcel Maehren; Nurullah Erinola; Robert Merget; Nicolai Bissantz; Juraj Somorovsky; Jörg Schwenk (Zenodo, 2024)

Opossum Attack: Application Layer Desynchronization using Opportunistic TLS. - Robert Merget; Nurullah Erinola; Marcel Maehren; Lukas Knittel; Sven Hebrok; Marcus Brinkmann; Juraj Somorovsky; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2025)

SILENT: A New Lens on Statistics in Software Timing Side Channels. - Martin Dunsche; Patrick Bastian; Marcel Maehren; Nurullah Erinola; Robert Merget; Nicolai Bissantz; Holger Dette; Jörg Schwenk (CoRR, 2025)