Secure Application Design (SS 2025)

Course Number 705056 and 705057 | Sommersemester 2025

Content

In this lecture, we will translate the cryptographic groundwork of your Bachelor's studies into the real world. We will discuss how cryptographic keys are managed, how trust in them is established, and how protocols are built. Additionally, we will review various real-world applications, and investigate how they use cryptographic tools to address the challenges they set out to solve. The course is held on campus (HS i11); lecture recordings will be available on request. At the end of the semester, a written exam will be offered on campus. After the main exam date, further exams will be oral, offered on demand. The initial KU presentations are on campus (HS i11). A recording will be available. All other KU tasks can be undertaken remotely. Discord is the primary means of communication. Private questions may be addressed via email.

Material

 
Date Who Lecture 14:00–16:00 (HS i11) Recording
07.03.2025 JH Intro & Recap: Cryptography
14.03.2025 JH Common Attacks & Vulnerabilities
28.03.2025 JH Trust & Privacy
04.04.2025 TZ Identity
11.04.2025 JH Authentication
02.05.2025 JH OpenID Connect & FedCM
09.05.2025 EF Transparency
16.05.2025 BP Trust in Keys & Software
23.05.2025 LH TLS Handshake & Protocol
06.06.2025 TZ ID Austria & eIDAS
13.06.2025 PT EU Digital Identity Wallet
20.06.2025 You! Seminar Talks
27.06.2025 A-SIT Current Topics Spotlight no recording
04.07.2025 VO Exam

Practicals

Date What?
07.03.2025 Introduction to the Practicals (HS i11, from 15:15) (slides)
07.03.2025 Assignment Sheet (link)
07.03.2025 Intro Challenges Available
≤ 20.03.2025 Solve Intro Challenges
21.03.2025 Introduction to Challenge Creation (HS i11, from 14:00) (slides)
21.03.2025
Plan & Implement Your Challenge (start of P2)
≤ 28.03.2025 Group Formation
≤ 04.04.2025 Submit Design Concept
≤ 02.05.2025 Implement Your Challenges
~ 09.05.2025 Challenges Available (start of P3)
≤ 20.06.2025 Solve Others' Challenges & Submit Write-Up

Administrative Information


Getting a Grade (VO)

There are two ways to obtain a grade for the VO. You can either take an exam or give a seminar talk. The standard way to get a grade is to take a written 60-minute exam at the end of the semester. There will be one scheduled exam date. After this date, exams will default to being oral unless there is significant coordinated student demand. To arrange an oral exam date, email us at least two weeks in advance and offer at least three potential timeslots. Both written and oral exams are partial open-book. You may bring one two-sided, hand-written, A4 sheet containing whatever information you think you will need during the exam. Only hand-written sheets are permitted. Print-outs, photocopies, etc. are not permitted. You can find & register for upcoming written exam dates in TUGRAZonline. For very motivated students, it is also possible to give a seminar talk. To do this, choose a subject related to real-world use of cryptography that you are passionate about, or find particularly interesting. Submit a brief outline of your proposal via email by March 23rd. We will communicate with you to agree on a topic. You will then submit a ≥7 page report by May 25th, and give a seminar talk in the lecture on June 20th. If these tasks are completed satisfactorily, you will receive a passing VO grade without the need for an exam. The range of acceptable topics is very broad, from case studies of particularly clever cryptographic protocols to usability analyses or ethical discussions. If you are unsure about a potential topic, do not hesitate to get in touch.

Practicals (KU)

The practicals are divided into three phases. In phase 1, you will solve pre-made Capture-the-Flag (CTF) challenges from last year's course, to familiarize yourself with the concept. This is done by yourself. In phase 2, you will design and implement your own challenge. This is done in groups. In phase 3, you will solve challenges posed by the other teams. This is done by yourself. Phase 1 awards 10 points. Phase 2 awards 30 points. Phase 3 awards 60 points. You need at least 50% of points in each phase to pass the course. If you pass all phases, your grade will be determined as follows:
  • ≥ 87½ points: Sehr Gut (1)
  • ≥ 75 points: Gut (2)
  • ≥ 62½ points: Befriedigend (3)
  • ≥ 50 points: Genügend (4)
For the full details, please see the KU assignment sheet.

Contact and Communication

For questions regarding the courses we have the following communication channels:
  • Discord: ISEC server, channels #sead-*-announcements for any necessary announcements and reminders.
  • Discord: ISEC server, channel #sead for all questions regarding lectures and exercises.
  • Discord: ISEC server, channel #sead-looking-for-team to find team members for the exercises.
  • sead.isec@.tugraz.at for administrative questions specific to your situation. Please use Discord for questions that might be of interest for other students.

Lecture Dates

Date Begin End Location Event Type Comment
2025/04/11 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/
2025/05/02 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/
2025/05/02 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/
2025/05/09 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/
2025/05/16 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/
2025/05/23 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/
2025/06/06 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/
2025/06/13 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/
2025/06/20 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/
2025/06/27 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/

Lecturers

Jakob Heher
Jakob
Heher

PhD Student

View more
Lena Heimberger
Lena
Heimberger

PhD Student

View more
Hannes Weissteiner
Hannes
Weissteiner

PhD Student

View more