Beyond the readable

Come backstage with us to discover what is usually not seen concerning encoded and encrypted data in rest, underway, and in use. Witness the strategic decisions, the designing of algorithms, the complex implementations, the innovative (yet old and not really changing) technological solutions, the endless resources invested into research and development of security and privacy … and everything that isn’t, and everything that is, but gets hacked.

---

Testlab

• Cryptanalysis tools

Notes on techniques

• Introduction
• Classical ciphers
• Brute force
• Attack models
• Security goals
• Block ciphers
• AES busting
• Down streams
• Hacking hashes
• RSA puzzling
• Diffie-Hellman
• Elliptic curve balls

---

Coding classical ciphers

• Introduction
• Caesar's cipher
• Vigenere's cipher
• Columnar transposition cipher
• Rail fence transposition cipher

Coding modern ciphers

• Introduction
• AES: A symmetric block cipher
• LFSR: Linear feedback shift registers
• RSA: An asymmetric key exchange

---

Classical cipher breaking

• Introduction
• Mono-alphabetic substitution: Caesar
• Poly-alphabetic substitution: Vigenère
• Transposition: Rail Fence
• Mono-alphabetic substitution: Polybe
• GEDEFU
• Enigma machine
• Poly-alphabetic substitution: One Time Pad

AES busting

• Introduction
• CBC Bit-flipping attack
• AES Electronic code book
• Initialisation vector
• AES 4 rounds
• AES128 Counter mode attack
• AES Fault attack #1
• CBC padding attack
• Side channel AES: CPA
• Side channel AES: first round
• AES Weaker variant
• AES Fault attack #2
• AES PMAC forgery attack

Down streams

• Introduction
• LFSR - Known plaintext

Hash hacking

• Introduction
• DCC Hash
• DCC2 Hash
• LM Hash
• Message Digest 5
• NT Hash
• SHA-2 Hash
• CISCO Salted Password
• Hash length extension attack
• SHA-3 Hash

RSA puzzling

• Introduction
• RSA Factorisation
• RSA Decipher oracle
• RSA Corrupted key: Private exponent
• RSA Continued fractions
• RSA Common modulus
• RSA Padding
• RSA Signature
• RSA Corrupted key 2
• RSA Corrupted key 3
• RSA Multiple recipients
• RSA Lee cooper

Data dares

• Introduction
• ELF64 PID encryption
• Protected PKZIP file
• Known plaintext XOR
• File: Insecure storage Mozilla Firefox 14
• Android lock pattern

Diffie-Hellman

• Introduction

Elliptic curve balls

• Introduction
• Discrete logarithm problem
• ECDHE
• ECDSA: Conventional attack
• ECDSA: Implementation error

---

Books