Publications

Here you will find our analyses, overviews and concepts on the security of new technologies – newest first. Older posts are in the archive.

2026

  1. Concept · Digital Identity · Mobile Security

    Self-Ident Proof of Concept

    Passport photo from the chip, guided portrait capture and face comparison – entirely on the smartphone.

  3. Concept · Transparency · Digital Identity

    Verifiable Monitoring for Transparency Logs

    Verifiable Indices give cryptographically complete answers to queries like “all certificates for this domain” in transparency logs.

  4. Analysis · Web & Cloud · Mobile Security

    Man-In-The-Middle Attacks against Wi-Fi

    Wireless network communication via Wi-Fi has today become a taken-for-granted part of everyday life.

2025

  1. Overview · Web & Cloud · Digital Identity

    Web APIs for Identity Management

    New browser interfaces such as DC API, FedCM and WebAuthn move identity management into the browser; the study evaluates their status.

  4. Concept · Transparency · Digital Identity

    Wallet Binary Transparency

    A public log of hashes makes tampered updates of digital identity wallets detectable and so strengthens trust in the code.

  6. Concept · Digital Identity · E-Government

    eIDAS Embedded Disclosure Policies

    Under eIDAS 2, issuers can define which services may access a credential; the study analyses the regulation and the ARF on this.

2024

  1. Analysis · Digital Identity · Web & Cloud

    Federated Credential Management (FedCM API)

    Browsers are blocking tracking via third-party cookies and redirects – can the FedCM API support e-government SSO such as ID Austria?

  4. Analysis · Mobile Security · Privacy & Crypto

    Analysis of Fingerprinting Libraries on Android

    Fingerprinting libraries recognise users across apps – which device data they collect and how changes to Android's API could prevent it.

  6. Overview · Privacy & Crypto · Digital Identity

    Privacy-preserving Identifiers

    Unique identifiers let services link users across sites – methods based on OPRF, MPC and ZKP against linkability and observability.

  7. Overview · Mobile Security · Privacy & Crypto

    Analysis of the Permission System of Android

    Android controls app access to camera, location and contacts through permissions – how this system is built and changed across versions.

  9. Analysis · Mobile Security · Privacy & Crypto

    Analysis of the Android Privacy Sandbox

    Android's SDK Runtime is meant to isolate ad libraries from apps – which data for device fingerprinting remains accessible?

  15. Overview · Privacy & Crypto

    Evaluation of MPC’s State of the Art

    MPC enables data analysis across sources while preserving privacy; the report surveys frameworks, threat models and use cases.

2023

  2. Concept · Digital Identity · Privacy & Crypto

    Identity Recovery in Case of Device Loss

    How can identities and keys stored in a TEE be securely backed up and restored when the device is lost?

  8. Analysis · Transparency · Mobile Security

    Analysis of Android Code Transparency

    Since AAB, Google Play signs the app packages itself; this analysis checks whether Code Transparency prevents manipulation by app stores.

  11. Analysis · Mobile Security · Privacy & Crypto

    Privacy comparison between paid and free apps

    A comparison of permissions and data safety declarations shows whether paid Android apps offer better privacy than free ones.

  14. Overview · AI · E-Government

    Secure development of AI services

    AI services carry risks with personal data; this study examines options for developing them securely and whether practice follows.

  17. Analysis · Mobile Security · Web & Cloud

    Prevalence of HTTP in Android applications

    Some Android apps still use unencrypted HTTP, letting man-in-the-middle attackers easily extract sensitive data such as account data.

Go to the archive →