https://technology2.a-sit.at/en/publications/ Publications · A-SIT Technology · E-Government Innovation Center en-GB Mon, 09 Nov 2026 00:00:00 +0000 https://technology2.a-sit.at/en/publications/self-ident-proof-of-concept/ https://technology2.a-sit.at/en/publications/self-ident-proof-of-concept/ Mon, 09 Nov 2026 00:00:00 +0000 Digital Identity Mobile Security Passport photo from the chip, guided portrait capture and face comparison – entirely on the smartphone. https://technology2.a-sit.at/en/publications/power-side-channels-on-mobile-devices/ https://technology2.a-sit.at/en/publications/power-side-channels-on-mobile-devices/ Mon, 02 Nov 2026 00:00:00 +0000 Mobile Security How a public charging cable reveals what is happening on a smartphone. https://technology2.a-sit.at/en/publications/verifiable-monitoring-for-transparency-logs/ https://technology2.a-sit.at/en/publications/verifiable-monitoring-for-transparency-logs/ Thu, 29 Oct 2026 00:00:00 +0000 Transparency Digital Identity Verifiable Indices give cryptographically complete answers to queries like “all certificates for this domain” in transparency logs. https://technology2.a-sit.at/en/publications/man-in-the-middle-attacks-against-wi-fi/ https://technology2.a-sit.at/en/publications/man-in-the-middle-attacks-against-wi-fi/ Mon, 12 Jan 2026 00:00:00 +0000 Web & Cloud Mobile Security Wireless network communication via Wi-Fi has today become a taken-for-granted part of everyday life. https://technology2.a-sit.at/en/publications/web-apis-for-identity-management/ https://technology2.a-sit.at/en/publications/web-apis-for-identity-management/ Fri, 31 Oct 2025 00:00:00 +0000 Web & Cloud Digital Identity New browser interfaces such as DC API, FedCM and WebAuthn move identity management into the browser; the study evaluates their status. https://technology2.a-sit.at/en/publications/certificate-transparency-for-relying-party-certificates/ https://technology2.a-sit.at/en/publications/certificate-transparency-for-relying-party-certificates/ Wed, 27 Aug 2025 00:00:00 +0000 Digital Identity Transparency RP Certificate Transparency proposes a publicly verifiable log that shows which data relying parties may request under eIDAS 2. https://technology2.a-sit.at/en/publications/analysis-of-possible-applications-of-ai-in-code-refactoring/ https://technology2.a-sit.at/en/publications/analysis-of-possible-applications-of-ai-in-code-refactoring/ Thu, 31 Jul 2025 00:00:00 +0000 AI Four AI coding agents modernise a Java application: helpful but prone to hallucinations, so human control and tests remain essential. https://technology2.a-sit.at/en/publications/wallet-binary-transparency/ https://technology2.a-sit.at/en/publications/wallet-binary-transparency/ Tue, 24 Jun 2025 00:00:00 +0000 Transparency Digital Identity A public log of hashes makes tampered updates of digital identity wallets detectable and so strengthens trust in the code. https://technology2.a-sit.at/en/publications/implementation-and-evaluation-of-the-digital-credentials-api/ https://technology2.a-sit.at/en/publications/implementation-and-evaluation-of-the-digital-credentials-api/ Mon, 16 Jun 2025 00:00:00 +0000 Web & Cloud Digital Identity The Digital Credentials API retrieves credentials via the browser; the report shows its status and integration in the Valera Wallet. https://technology2.a-sit.at/en/publications/eidas-embedded-disclosure-policies/ https://technology2.a-sit.at/en/publications/eidas-embedded-disclosure-policies/ Mon, 28 Apr 2025 00:00:00 +0000 Digital Identity E-Government Under eIDAS 2, issuers can define which services may access a credential; the study analyses the regulation and the ARF on this. https://technology2.a-sit.at/en/publications/implementation-and-evaluation-of-novel-juice-jacking-attacks/ https://technology2.a-sit.at/en/publications/implementation-and-evaluation-of-novel-juice-jacking-attacks/ Tue, 22 Apr 2025 00:00:00 +0000 Mobile Security Juice jacking was deemed obsolete; this project bypasses user confirmation dialogs and extracts data even from current mobile devices. https://technology2.a-sit.at/en/publications/split-view-attack-protection-for-transparency-systems/ https://technology2.a-sit.at/en/publications/split-view-attack-protection-for-transparency-systems/ Thu, 27 Feb 2025 00:00:00 +0000 Transparency Split-view attacks show participants inconsistent views of transparency systems; the study evaluates gossiping and witnessing. https://technology2.a-sit.at/en/publications/security-analysis-of-native-cryptography-in-android-apps/ https://technology2.a-sit.at/en/publications/security-analysis-of-native-cryptography-in-android-apps/ Mon, 10 Feb 2025 00:00:00 +0000 Mobile Security Privacy & Crypto More and more Android apps embed native cryptography such as OpenSSL, yet existing tools only detect errors in Java code. https://technology2.a-sit.at/en/publications/authenticity-verifiability-in-federated-learning-overview-methods/ https://technology2.a-sit.at/en/publications/authenticity-verifiability-in-federated-learning-overview-methods/ Wed, 22 Jan 2025 00:00:00 +0000 Transparency Privacy & Crypto Trustworthy federated learning needs authenticity and correctness guarantees – methods for the six trust points in the FL process. https://technology2.a-sit.at/en/publications/federated-credential-management-fedcm-api/ https://technology2.a-sit.at/en/publications/federated-credential-management-fedcm-api/ Mon, 23 Dec 2024 00:00:00 +0000 Digital Identity Web & Cloud Browsers are blocking tracking via third-party cookies and redirects – can the FedCM API support e-government SSO such as ID Austria? https://technology2.a-sit.at/en/publications/design-considerations-of-ex-post-tets-for-credential-transparency/ https://technology2.a-sit.at/en/publications/design-considerations-of-ex-post-tets-for-credential-transparency/ Thu, 21 Nov 2024 00:00:00 +0000 Transparency Digital Identity Ex-post transparency tools show data subjects what happens to their credential data – key design choices from logging to auditing. https://technology2.a-sit.at/en/publications/security-analysis-of-data-migration-solutions-for-mobile-devices/ https://technology2.a-sit.at/en/publications/security-analysis-of-data-migration-solutions-for-mobile-devices/ Mon, 11 Nov 2024 00:00:00 +0000 Mobile Security Data migration apps from two major vendors are deeply integrated into the OS – the analysis found security issues and reported exploits. https://technology2.a-sit.at/en/publications/analysis-of-fingerprinting-libraries-on-android/ https://technology2.a-sit.at/en/publications/analysis-of-fingerprinting-libraries-on-android/ Mon, 30 Sep 2024 00:00:00 +0000 Mobile Security Privacy & Crypto Fingerprinting libraries recognise users across apps – which device data they collect and how changes to Android's API could prevent it. https://technology2.a-sit.at/en/publications/mpc-based-secure-aggregation-and-gboard/ https://technology2.a-sit.at/en/publications/mpc-based-secure-aggregation-and-gboard/ Thu, 26 Sep 2024 00:00:00 +0000 Privacy & Crypto E-Government With MPC-based secure aggregation, the server sees only the sum of ML parameters – an overview, protocol comparison and Google's Gboard. https://technology2.a-sit.at/en/publications/privacy-preserving-identifiers/ https://technology2.a-sit.at/en/publications/privacy-preserving-identifiers/ Wed, 04 Sep 2024 00:00:00 +0000 Privacy & Crypto Digital Identity Unique identifiers let services link users across sites – methods based on OPRF, MPC and ZKP against linkability and observability.