معرفی
Tim Würtele is a Ph.D. researcher at the Institute of Information Security at the University of Stuttgart. His work focuses on formal security analysis of cryptographic protocols, particularly those underpinning critical web standards like OAuth 2.0, OpenID Connect, FAPI, ACME, and Web Payment APIs. He has contributed to identifying and mitigating vulnerabilities in these protocols, collaborating with standardization bodies such as the OpenID Foundation and W3C.
- University of Stuttgart
Würtele's research interests include web security, cryptographic protocol verification, and formal methods for analyzing real-world implementations. His work addresses both theoretical and practical security flaws in protocols used by billions of users globally, spanning high-risk sectors like open banking and healthcare. He has published extensively in top-tier venues such as IEEE S&P, CCS, and ESORICS, often uncovering critical vulnerabilities and proposing formally verified fixes.
In 2025, Würtele co-authored a paper introducing audience injection attacks, a novel class of vulnerabilities in Web-based authentication standards. His 2024 publications focused on fixing and verifying the FAPI 2.0 protocol, while 2023 papers addressed GNAP and layered protocol analysis. Earlier works (2021–2022) scrutinized the ACME certificate management standard and W3C Web Payment APIs, revealing over-charge vulnerabilities and formalizing security guarantees.
