Secure Application Design (SS 2026)

Course Number 705056 and 705057 | Sommersemester 2026

Content

In this lecture, we will translate the cryptographic groundwork of your Bachelor's studies into the real world. We will discuss how cryptographic keys are managed, how trust in them is established, and how protocols are built. Additionally, we will review various real-world applications, and investigate how they use cryptographic tools to address the challenges they set out to solve. The course is held on campus (HS i11); lecture recordings will be available on request. At the end of the semester, a written exam will be offered on campus. After the main exam date, further exams will be oral, offered on demand. The initial KU presentations are on campus (HS i11). A recording will be available. All other KU tasks can be undertaken remotely. Discord is the primary means of communication. Private questions may be addressed via email.

Material

 
Date Who Lecture 14:00–16:00 (HS i11) Recording
06.03.2026 JH Intro & Recap: Cryptography
13.03.2026 JH Common Attacks & Vulnerabilities
27.03.2026 JH Trust & Privacy
17.04.2026 TZ Identity
24.04.2026 JH Authentication
08.05.2026 JH OpenID Connect & FedCM
22.05.2026 TZ ID Austria & eIDAS
29.05.2026 BP Trust in Keys & Software
12.06.2026 EF Transparency
19.06.2026 PT EU Digital Identity Wallet
26.06.2026 You! Seminar Talks
03.07.2026 VO Exam

Practicals

Date What?
06.03.2026 Introduction to the Practicals (HS i11, from 15:15; slides)
06.03.2026 Assignment Sheet
06.03.2026 Intro Challenges available
≤ 19.03.2026 Solve Intro Challenges
20.03.2026 Introduction to Challenge Creation (HS i11, from 14:00)
20.03.2026
Plan & Implement Your Challenge (start of P2)
≤ 25.03.2026 Group Formation
≤ 01.04.2026 Submit Design Concept
≤ 19.04.2026 Implement your challenges (pre-evaluation)
≤ 26.04.2026 Finalize your challenges
~ 01.05.2026 Challenges Available (start of P3)
≤ 21.06.2026 Solve Others' Challenges & Submit Write-Up

Administrative Information


Getting a Grade (VO)

There are two ways to obtain a grade for the VO. You can either take an exam or give a seminar talk. The standard way to get a grade is to take a written 60-minute exam at the end of the semester. There will be one scheduled exam date. After this date, exams will default to being oral unless there is significant coordinated student demand. To arrange an oral exam date, email us at least two weeks in advance and offer at least three potential timeslots. Both written and oral exams are partial open-book. You may bring one two-sided, hand-written, A4 sheet containing whatever information you think you will need during the exam. Only hand-written sheets are permitted. Print-outs, photocopies, etc. are not permitted. You can find & register for upcoming written exam dates in TUGRAZonline. For very motivated students, it is also possible to give a seminar talk. To do this, choose a subject related to real-world use of cryptography that you are passionate about, or find particularly interesting. Submit a brief outline of your proposal via email by March 20th. We will communicate with you to agree on a topic. You will then submit a ≥7 page report by May 29th, and give a seminar talk in the lecture on June 26th. If these tasks are completed satisfactorily, you will receive a passing VO grade without the need for an exam. The range of acceptable topics is very broad, from case studies of particularly clever cryptographic protocols to usability analyses or ethical discussions. If you are unsure about a potential topic, do not hesitate to get in touch.

Practicals (KU)

The practicals are divided into three phases. In phase 1, you will solve pre-made Capture-the-Flag (CTF) challenges from last year's course, to familiarize yourself with the concept. This is done by yourself. In phase 2, you will design and implement your own challenge. This is done in groups. In phase 3, you will solve challenges posed by the other teams. This is done by yourself. Phase 1 awards 10 points. Phase 2 awards 30 points. Phase 3 awards 60 points. You need at least 50% of points in each phase to pass the course. If you pass all phases, your grade will be determined as follows:
  • ≥ 87½ points: Sehr Gut (1)
  • ≥ 75 points: Gut (2)
  • ≥ 62½ points: Befriedigend (3)
  • ≥ 50 points: Genügend (4)
For the full details, please see the KU assignment sheet.

Contact and Communication

For questions regarding the courses we have the following communication channels:
  • Discord: ISEC server, channels #sead-*-announcements for any necessary announcements and reminders.
  • Discord: ISEC server, channel #sead for all questions regarding lectures and exercises.
  • Discord: ISEC server, channel #sead-looking-for-team to find team members for the exercises.
  • sead.isec@tugraz.at for administrative questions specific to your situation. Please use Discord for questions that might be of interest for other students.

Lecture Dates

Date Begin End Location Event Type Comment
2026/03/27 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/
2026/04/17 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/
2026/04/24 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/
2026/05/08 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/
2026/05/08 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/
2026/05/22 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/
2026/05/29 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/
2026/06/12 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/
2026/06/19 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/
2026/06/26 14:00 16:00 HS i11 "SIEMENS Hörsaal" Abhaltung VO fix/

Lecturers

Jakob Heher
Jakob
Heher

Researcher

View more
Lena Heimberger
Lena
Heimberger

PhD Student

View more
Hannes Weissteiner
Hannes
Weissteiner

PhD Student

View more
Peter Teufl
Peter
Teufl

A-SIT+

View more
Thomas Zefferer
Thomas
Zefferer

SIC, A-SIT+

View more
Edona Fasllija
Edona
Fasllija

PhD Student

View more
Bernd Prünster
Bernd
Prünster

Senior Staff - A-SIT Plus

View more