PDF Insecurity
  • PDF Signatures
    • Certification Attacks (May 2021)
    • Shadow Attacks (July 2020)
    • Incremental Saving Attacks (Februar 2019)
    • Signature Wrapping Attacks (Februar 2019)
    • Universal Signature Forgery (Februar 2019)
    • Security Evaluations
  • PDF Encryption
    • Breaking PDF Encryption
    • Evaluation
  • PDF Insecure Features
    • Attack Classes
    • Evaluation
  • Downloads
    • Exploits
    • Paper, Reports, and Theses
  • News
  • About
    • FAQ
    • Acknowledgements
    • GDPR
    • Contact
  • Attacks on PDF Signatures: Certification Attacks (2021)
  • Attacks on PDF Signatures: Shadow Attacks (2021)
  • Insecure Features in PDFs (2021)
  • Attacks on PDF Signatures: ISA, SWA, and USF (2019)
  • Attacks on PDF Encryption (2019)

Attacks on PDF Signatures: Certification Attacks (2021)

  • Paper "Breaking the Specification: PDF Certification (S&P'21)"
  • Master Thesis "Sicherheitsanalyse und Evaluierung von signierten PDF Dokumenten"
  • Vulnerability Report

Attacks on PDF Signatures: Shadow Attacks (2021)

  • Paper "Shadow Attacks:Hiding and Replacing Content in Signed PDFs" (NDSS'21)
  • Vulnerability Report
  • Youtube Video

Insecure Features in PDFs (2021)

  • Paper "Processing Dangerous Paths– On Security and Privacy of the Portable Document Format" (NDSS'21)
  • Vulnerability Report

Attacks on PDF Signatures: ISA, SWA, and USF (2019)

  • Paper "1 Trillion Dollar Refund– How To Spoof PDF Signatures" (CCS 2019)
  • Master Thesis "Security of PDF Signatures"
  • Vulnerability Report

Attacks on PDF Encryption (2019)

  • Paper "Practical Decryption exFiltration: Breaking PDF Encryption" (CCS 2019)
  • Vulnerability Report
  • Youtube Video