23.07.2013 Views

EECS 354 Network Security - Network Penetration and Security

EECS 354 Network Security - Network Penetration and Security

EECS 354 Network Security - Network Penetration and Security

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Friday, October 22, 2010<br />

You Aren’t Smart Enough to<br />

Do Cryptography<br />

• DO NOT DO YOUR OWN<br />

CRYPTOGRAPHY<br />

• Use a library<br />

• Even that won’t save you<br />

• Google Keyczar<br />

• return self.Sign(msg) == sig_bytes<br />

• HMAC verification<br />

• Timing attack<br />

• SSL, Secure Mode cookies, correct certificate auth

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!