{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:09:48Z","timestamp":1750219788908,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":24,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,6,27]],"date-time":"2023-06-27T00:00:00Z","timestamp":1687824000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,6,27]]},"DOI":"10.1145\/3583678.3596899","type":"proceedings-article","created":{"date-parts":[[2023,6,26]],"date-time":"2023-06-26T20:21:36Z","timestamp":1687810896000},"page":"151-156","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["Preventing EFail Attacks with Client-Side WebAssembly: The Case of Swiss Post's IncaMail"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-7826-9489","authenticated-orcid":false,"given":"Pascal","family":"Gerig","sequence":"first","affiliation":[{"name":"University of Bern, Bern, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2470-2827","authenticated-orcid":false,"given":"J\u00e4mes","family":"M\u00e9n\u00e9trey","sequence":"additional","affiliation":[{"name":"University of Neuch\u00e2tel, Neuch\u00e2tel, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0001-1736-0315","authenticated-orcid":false,"given":"Baptiste","family":"Lanoix","sequence":"additional","affiliation":[{"name":"Swiss Post, Neuch\u00e2tel, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-8417-2449","authenticated-orcid":false,"given":"Florian","family":"Stoller","sequence":"additional","affiliation":[{"name":"Swiss Post, Neuch\u00e2tel, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1574-6721","authenticated-orcid":false,"given":"Pascal","family":"Felber","sequence":"additional","affiliation":[{"name":"University of Neuch\u00e2tel, Neuch\u00e2tel, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3064-5315","authenticated-orcid":false,"given":"Marcelo","family":"Pasin","sequence":"additional","affiliation":[{"name":"HES-SO University of Applied Sciences, Neuch\u00e2tel, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1493-6603","authenticated-orcid":false,"given":"Valerio","family":"Schiavoni","sequence":"additional","affiliation":[{"name":"University of Neuch\u00e2tel, Switzerland, Neuch\u00e2tel, Switzerland"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2023,6,27]]},"reference":[{"key":"e_1_3_2_1_1_1","unstructured":"Apple. 2023. WebKit. https:\/\/webkit.org.  Apple. 2023. WebKit. https:\/\/webkit.org."},{"key":"e_1_3_2_1_2_1","unstructured":"Chromium project. 2023. Blink. https:\/\/www.chromium.org\/blink\/.  Chromium project. 2023. Blink. https:\/\/www.chromium.org\/blink\/."},{"key":"e_1_3_2_1_3_1","unstructured":"Chromium project. 2017. Open-sourcing Chrome on iOS. https:\/\/blog.chromium.org\/2017\/01\/open-sourcing-chrome-on-ios.html.  Chromium project. 2017. Open-sourcing Chrome on iOS. https:\/\/blog.chromium.org\/2017\/01\/open-sourcing-chrome-on-ios.html."},{"key":"e_1_3_2_1_4_1","unstructured":"DFINITY. 2022. The internet computer for geeks. Cryptology ePrint Archive Paper 2022\/087.  DFINITY. 2022. The internet computer for geeks. Cryptology ePrint Archive Paper 2022\/087."},{"volume-title":"CCGRID '22","author":"Gackstatter P.","key":"e_1_3_2_1_5_1","unstructured":"P. Gackstatter Pushing serverless to the edge with Web-Assembly runtimes . In CCGRID '22 . P. Gackstatter et al. Pushing serverless to the edge with Web-Assembly runtimes. In CCGRID '22."},{"volume-title":"Middleware '20","author":"Gadepalli P. K.","key":"e_1_3_2_1_6_1","unstructured":"P. K. Gadepalli : a serverless-first, light-weight Wasm runtime for the edge . In Middleware '20 . P. K. Gadepalli et al. Sledge: a serverless-first, light-weight Wasm runtime for the edge. In Middleware '20."},{"volume-title":"PLDI '17","author":"Haas A.","key":"e_1_3_2_1_7_1","unstructured":"A. Haas Bringing the web up to speed with WebAssembly . In PLDI '17 . A. Haas et al. Bringing the web up to speed with WebAssembly. In PLDI '17."},{"key":"e_1_3_2_1_8_1","unstructured":"H. Halpin. The W3C web cryptography API: motivation and overview. In WWW'14.  H. Halpin. The W3C web cryptography API: motivation and overview. In WWW'14."},{"key":"e_1_3_2_1_9_1","volume-title":"USENIX Security","author":"Katz J.","year":"2000","unstructured":"J. Katz A chosen ciphertext attack against several e-mail encryption protocols . In USENIX Security 2000 . J. Katz et al. A chosen ciphertext attack against several e-mail encryption protocols. In USENIX Security 2000."},{"key":"e_1_3_2_1_10_1","unstructured":"LambdaTest. 2023. Devices testing. https:\/\/www.lambdatest.com.  LambdaTest. 2023. Devices testing. https:\/\/www.lambdatest.com."},{"volume-title":"CGO '04","author":"Lattner C.","key":"e_1_3_2_1_11_1","unstructured":"C. Lattner : A compilation framework for lifelong program analysis & transformation . In CGO '04 . C. Lattner et al. LLVM: A compilation framework for lifelong program analysis & transformation. In CGO '04."},{"volume-title":"USENIX Security '20","author":"Lehmann D.","key":"e_1_3_2_1_12_1","unstructured":"D. Lehmann Everything old is new again: binary security of WebAssembly . In USENIX Security '20 . D. Lehmann et al. Everything old is new again: binary security of WebAssembly. In USENIX Security '20."},{"volume-title":"ICDE '21","author":"M\u00e9n\u00e9trey J.","key":"e_1_3_2_1_13_1","unstructured":"J. M\u00e9n\u00e9trey : an embedded trusted runtime for Web-Assembly . In ICDE '21 . J. M\u00e9n\u00e9trey et al. Twine: an embedded trusted runtime for Web-Assembly. In ICDE '21."},{"volume-title":"ICDCS '22","author":"M\u00e9n\u00e9trey J.","key":"e_1_3_2_1_14_1","unstructured":"J. M\u00e9n\u00e9trey : A trusted WebAssembly runtime environment with remote attestation for TrustZone . In ICDCS '22 . J. M\u00e9n\u00e9trey et al. WaTZ: A trusted WebAssembly runtime environment with remote attestation for TrustZone. In ICDCS '22."},{"volume-title":"FRAME '22","author":"M\u00e9n\u00e9trey J.","key":"e_1_3_2_1_15_1","unstructured":"J. M\u00e9n\u00e9trey WebAssembly as a common layer for the cloud-edge continuum . In FRAME '22 . J. M\u00e9n\u00e9trey et al. WebAssembly as a common layer for the cloud-edge continuum. In FRAME '22."},{"volume-title":"ACNS '19","author":"M\u00fcller J.","key":"e_1_3_2_1_16_1","unstructured":"J. M\u00fcller : what's up Johnny? - covert content attacks on email end-to-end encryption . In ACNS '19 . J. M\u00fcller et al. Re: what's up Johnny? - covert content attacks on email end-to-end encryption. In ACNS '19."},{"key":"e_1_3_2_1_17_1","unstructured":"OpenSSL. 2023. Cryptography library. https:\/\/www.openssl.org.  OpenSSL. 2023. Cryptography library. https:\/\/www.openssl.org."},{"volume-title":"USENIX Security '18","author":"Poddebniak D.","key":"e_1_3_2_1_18_1","unstructured":"D. Poddebniak : breaking S\/MIME and OpenPGP email encryption using exfiltration channels . In USENIX Security '18 . D. Poddebniak et al. Efail: breaking S\/MIME and OpenPGP email encryption using exfiltration channels. In USENIX Security '18."},{"volume-title":"Symposium on Security and Privacy '19","author":"Protzenko J.","key":"e_1_3_2_1_19_1","unstructured":"J. Protzenko Formally verified cryptographic web applications in WebAssembly . In Symposium on Security and Privacy '19 . J. Protzenko et al. Formally verified cryptographic web applications in WebAssembly. In Symposium on Security and Privacy '19."},{"volume-title":"CCS '20","author":"Schwenk J.","key":"e_1_3_2_1_20_1","unstructured":"J. Schwenk Mitigation of attacks on email end-to-end encryption . In CCS '20 . J. Schwenk et al. Mitigation of attacks on email end-to-end encryption. In CCS '20."},{"volume-title":"ACSAC '09","author":"Stark E.","key":"e_1_3_2_1_21_1","unstructured":"E. Stark Symmetric cryptography in Javascript . In ACSAC '09 . E. Stark et al. Symmetric cryptography in Javascript. In ACSAC '09."},{"key":"e_1_3_2_1_22_1","unstructured":"Swiss Post. 2023. IncaMail: encrypt confidential e-mails. https:\/\/www.post.ch\/en\/business-solutions\/e-mail-encryption.  Swiss Post. 2023. IncaMail: encrypt confidential e-mails. https:\/\/www.post.ch\/en\/business-solutions\/e-mail-encryption."},{"volume-title":"ASE '21","author":"Wang W.","key":"e_1_3_2_1_23_1","unstructured":"W. Wang . Empowering web applications with WebAssembly: are we there yet? In ASE '21 . W. Wang. Empowering web applications with WebAssembly: are we there yet? In ASE '21."},{"volume-title":"OOPSLA '11","author":"Zakai A.","key":"e_1_3_2_1_24_1","unstructured":"A. Zakai . Emscripten : an LLVM-to-JavaScript compiler . In OOPSLA '11 . A. Zakai. Emscripten: an LLVM-to-JavaScript compiler. In OOPSLA '11."}],"event":{"name":"DEBS '23: 17th ACM International Conference on Distributed and Event-based Systems","sponsor":["SIGMOD ACM Special Interest Group on Management of Data","SIGSOFT ACM Special Interest Group on Software Engineering"],"location":"Neuchatel Switzerland","acronym":"DEBS '23"},"container-title":["Proceedings of the 17th ACM International Conference on Distributed and Event-based Systems"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3583678.3596899","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T16:37:55Z","timestamp":1750178275000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3583678.3596899"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,6,27]]},"references-count":24,"alternative-id":["10.1145\/3583678.3596899","10.1145\/3583678"],"URL":"https:\/\/doi.org\/10.1145\/3583678.3596899","relation":{},"subject":[],"published":{"date-parts":[[2023,6,27]]},"assertion":[{"value":"2023-06-27","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}