Breaking Crypto For Dummies

Recommendations

Info

Bonus: Attacking Regular Software <strong>Crypto</strong> • But… hardware acceleration? AES-NI, etc.? • Only for symmetric crypto. • Maybe forbidden by obfuscator/protector • Often not applicable due to platform diversity • E.g. standard crypto extensions for ARM are not there yet, etc. • Or, emulate & get the key from emulator’s implementation • Or, emulate & apply DCA on the whole emulator • Worst case, debug & get the key from registers, as usual
DEMO 2 • OLLVM-Obfuscated standard AES encryption • Side-channel leakage is memory accesses • Using Riscure Inspector to extract the key
Page 1 and 2:
Breaking Crypto For Dummies Nikita
Page 3 and 4:
Agenda Cryptography Crash Course At
Page 5 and 6:
Cryptography Crash Course • Some
Page 7 and 8:
Cryptography Crash Course • Grey
Page 9 and 10: Cryptography Crash Course • Black
Page 11 and 12: Unintended functionality Unintended
Page 13 and 14: Cryptography Crash Course • What
Page 15 and 16: Breaking Modern Cryptography The hi
Page 17 and 18: The brutal way: 1. Make assumptions
Page 19 and 20: Image source: www.wikihow.com Side-
Page 21 and 22: Side-channel Basics • Observe the
Page 23 and 24: Side-channel Basics • Every wire
Page 25 and 26: Side-channel Basics • How to perf
Page 27 and 28: Side-channel Basics • Acquisition
Page 29 and 30: Side-channel Basics • Statistical
Page 31 and 32: Side-channel Basics • Further rea
Page 33 and 34: Fault injection Basics • Cryptogr
Page 35 and 36: Fault injection Basics • Why asym
Page 37 and 38: White-box Cryptography Basics • A
Page 39 and 40: Breaking White-box Cryptography •
Page 47 and 48: Software Crypto Instrumentation •
Page 55 and 56: DEMO 1 • White-boxed AES in JS fr
Page 57 and 58: Software Crypto Instrumentation Cha
Page 59: Bonus: Attacking Regular Software C
Page 63 and 64: SCA & FI: Beyond Attacking Crypto
Page 69 and 70: Conclusions • It is still possibl
Page 71 and 72: References • http://langsec.org/p
show all

Breaking Crypto For Dummies

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?