Collected research

Web-based Attacks on Host-Proof Encrypted Storage

Karthikeyan Bhargavan and Antoine Delignat-Lavaud · usenix.org

The WOOT 2012 abstract page for an attack study on host-proof applications such as Wuala and LastPass, which encrypt data in the client and treat the server as a backup store. Ordinary web vulnerabilities in their browser interfaces defeat the cryptography, exposing flaws in encryption, authorization policy and key management.

Record

Researcher

Karthikeyan Bhargavan and Antoine Delignat-Lavaud

Published by

usenix.org

Topic

Other

In the archive

• Collected in the 2012 research round

Tags

• info-leak
• auth-bypass
• javascript
• same-origin-policy
• case-study
• owasp-a01-2021

This page is the archive's own catalogue record. The research is the work of Karthikeyan Bhargavan and Antoine Delignat-Lavaud, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 17 August 2026.