OpenPGP is one of the two major standards for end-to-end email security. Several studies
showed that serious usability issues exist with tools implementing this standard. However, a …

OpenPGP and S/MIME are two major standards for securing email communication
introduced in the early 1990s. Three recent classes of attacks exploit weak cipher modes …

User deception in emails is still one of the biggest security risks companies and end-users
face alike. Attackers try to mislead their victims when assessing whether emails are …

OOXML and ODF are the de facto standard data formats for word processing, spreadsheets,
and presentations. Both are XML-based, feature-rich container formats dating back to the …

The Portable Document Format, better known as PDF, is one of the most widely used
document formats worldwide, and in order to ensure information confidentiality, this file …

Pretty Good Privacy (PGP) has long been the primary IETF standard for encrypting email, but
suffers from widespread usability and security problems that have limited its adoption. As …

Cybersecurity: A Practical Engineering Approach introduces the implementation of a secure
cyber architecture, beginning with the identification of security risks. It then builds solutions …

OpenPGP and S/MIME are the two major standards for email end-to-end encryption. We
show practical attacks against both encryption schemes in the context of email. First, we …

Email is among the cornerstones of our online lives. It has evolved from carrying text-only
messages to delivering well-designed HTML contents. The uptake of web protocols into …

This work describes vulnerabilities in the specification of the AEAD packets as introduced in
the novel LibrePGP specification that is implemented by the widely used GnuPG application …