Cryptography

Efail and other Failures with Encryption and E-Mail Outdated Crypto Standards and HTML Mails as a Security Risk

Sep 2, 2019 · 3 min read · - editor mail encryption gnupg pgp smime cryptography html ·

Efail and other Failures with Encryption and E-Mail Outdated Crypto Standards and HTML Mails as a Security Risk Hanno Böck published in Magdeburger Journal zur Sicherheitsforschung (2019, #18, p. 952-959) Info The Efail bug against encrypted e-mails showed a variety of problems with the interaction of outdated …

Cryptographic Enforcement of Segregation of Duty

Sep 28, 2017 · 2 min read · Cryptography Segregation-of-Duty ·

Share on:

Cryptographic Enforcement of Segregation of Duty Thomas Maus published in Magdeburger Journal zur Sicherheitsforschung (2017, #14, p. 858-870) Info Workflows with Segregation-of-Duty requirements or involving multiple parties with non-aligned interests (typically mutually distrustful) pose interesting challenges in …

Why Android SSL was downgraded from AES256-SHA to RC4-MD5 in late 2010

Dec 1, 2013 · 2 min read · Android SSL AES MD5 cryptography cipher ·

Share on:

Why Android SSL was downgraded from AES256-SHA to RC4-MD5 in late 2010 Georg Lukas published in Magdeburger Journal zur Sicherheitsforschung (2013, #6, p. 385-393) Info Android is using the combination of broken RC4 and MD5 as the first default cipher on all SSL connections. This impacts all apps that did not change …