Scalable Scanning and Automatic Classification of TLS Padding Oracle Vulnerabilities. - Robert Merget; Juraj Somorovsky; Nimrod Aviram; Craig Young; Janis Fliegenschmidt; Jörg Schwenk; Yuval Shavitt (USENIX Security Symposium, 2019)

Analysis of DTLS Implementations Using Protocol State Fuzzing. - Paul Fiterau-Brostean; Bengt Jonsson 001; Robert Merget; Joeri de Ruiter; Konstantinos Sagonas; Juraj Somorovsky (USENIX Security Symposium, 2020)

Raccoon Attack: Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E). - Robert Merget; Marcus Brinkmann; Nimrod Aviram; Juraj Somorovsky; Johannes Mittmann; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2020)

T0RTT: Non-Interactive Immediate Forward-Secret Single-Pass Circuit Construction. - Sebastian Lauer; Kai Gellert; Robert Merget; Tobias Handirk; Jörg Schwenk (Proc. Priv. Enhancing Technol., 2020)

ALPACA: Application Layer Protocol Confusion - Analyzing and Mitigating Cracks in TLS Authentication. - Marcus Brinkmann; Christian Dresen; Robert Merget; Damian Poddebniak; Jens Müller 007; Juraj Somorovsky; Jörg Schwenk; Sebastian Schinzel (USENIX Security Symposium, 2021)

TLS-Anvil: Adapting Combinatorial Testing for TLS Libraries. - Marcel Maehren; Philipp Nieting; Sven Hebrok; Robert Merget; Juraj Somorovsky; Jörg Schwenk (USENIX Security Symposium, 2022)

Poster: Circumventing the GFW with TLS Record Fragmentation. - Niklas Niere; Sven Hebrok; Juraj Somorovsky; Robert Merget (CCS, 2023)

Exploring the Unknown DTLS Universe: Analysis of the DTLS Server Ecosystem on the Internet. - Nurullah Erinola; Marcel Maehren; Robert Merget; Juraj Somorovsky; Jörg Schwenk (USENIX Security Symposium, 2023)

We Really Need to Talk About Session Tickets: A Large-Scale Analysis of Cryptographic Dangers with TLS Session Tickets. - Sven Hebrok; Simon Nachtigall; Marcel Maehren; Nurullah Erinola; Robert Merget; Juraj Somorovsky; Jörg Schwenk (USENIX Security Symposium, 2023)

On the security of TLS in the real world. - Robert Merget (2023)

With Great Power Come Great Side Channels: Statistical Timing Side-Channel Analyses with Bounded Type-1 Errors. - Martin Dunsche; Marcel Maehren; Nurullah Erinola; Robert Merget; Nicolai Bissantz; Juraj Somorovsky; Jörg Schwenk (USENIX Security Symposium, 2024)

USENIX'24 Artifact Datasets: With Great Power Come Great Side Channels: Statistical Timing Side-Channel Analyses with Bounded Type-1 Errors. - Martin Dunsche; Marcel Maehren; Nurullah Erinola; Robert Merget; Nicolai Bissantz; Juraj Somorovsky; Jörg Schwenk (Zenodo, 2024)

Transport Layer Obscurity: Circumventing SNI Censorship on the TLS-Layer. - Niklas Niere; Felix Lange; Robert Merget; Juraj Somorovsky (SP, 2025)

Opossum Attack: Application Layer Desynchronization using Opportunistic TLS. - Robert Merget; Nurullah Erinola; Marcel Maehren; Lukas Knittel; Sven Hebrok; Marcus Brinkmann; Juraj Somorovsky; Jörg Schwenk (IACR Cryptol. ePrint Arch., 2025)

SILENT: A New Lens on Statistics in Software Timing Side Channels. - Martin Dunsche; Patrick Bastian; Marcel Maehren; Nurullah Erinola; Robert Merget; Nicolai Bissantz; Holger Dette; Jörg Schwenk (CoRR, 2025)