Academic publications

Find the list of my publications at my University’s page, at Google Scholar, or at DBLP.

Press coverage

My group’s University page lists some appearances in TV and print media .

Two prominent publications I co-authored are the DROWN attack against TLS (2016 Pwnie Award For Best Cryptographic Attack) and the EFAIL vulnerabilities against OpenPGP and S/MIME email encryption.


I regularly speak at academic and industry conferences about computer security-related topics. Some conferences record presentations and make them public after the conferences. Below is a selection of those talks, but Google lists more.

37rd Chaos Communication Congress (37C3), 2023

35rd Chaos Communication Congress (35C3), 2018

33rd Chaos Communication Congress (33C3), 2016

RuhrSec, 2016

31st Chaos Communication Congress (31C3), 2014

28th Chaos Communication Congress (28C3), 2011

Contact and Imprint