Testlab

Cryptanalysis tools

Notes on techniques

Introduction
- What?
- Why?
- How?
Classical ciphers
Brute force
Attack models
Security goals
Block ciphers
AES busting
Down streams
Hacking hashes
RSA puzzling
Diffie-Hellman
- What can possibly go wrong?
Elliptic curve balls

Coding classical ciphers

Introduction
- What?
- Why?
- How?
Caesar's cipher
Vigenere's cipher
Columnar transposition cipher
Rail fence transposition cipher

Coding modern ciphers

Introduction
- What?
- Why?
- How?
AES: A symmetric block cipher
LFSR: Linear feedback shift registers
RSA: An asymmetric key exchange

Classical cipher breaking

Introduction
- What?
- Why?
- How?
Mono-alphabetic substitution: Caesar
- Resources
Poly-alphabetic substitution: Vigenère
- Solution
Transposition: Rail Fence
Mono-alphabetic substitution: Polybe
- Solution
GEDEFU
- Resources
Enigma machine
- Enigma
- Resources
Poly-alphabetic substitution: One Time Pad

AES busting

Introduction
- What?
- Why?
- How?
CBC Bit-flipping attack
AES Electronic code book
Initialisation vector
AES 4 rounds
AES128 Counter mode attack
AES Fault attack #1
- Differential Fault attacks
- Resources
CBC padding attack
Side channel AES: CPA
Side channel AES: first round
- Resources
AES Weaker variant
AES Fault attack #2
AES PMAC forgery attack
- Resources

Down streams

Introduction
- What?
- Why?
- How?
LFSR - Known plaintext

Hash hacking

Introduction
- What?
- Why?
- How?
DCC Hash
DCC2 Hash
LM Hash
Message Digest 5
NT Hash
SHA-2 Hash
CISCO Salted Password
- Resources
Hash length extension attack
- Resources
SHA-3 Hash

RSA puzzling

Introduction
- What?
- Why?
- How?
RSA Factorisation
- Resources
RSA Decipher oracle
- Resources
RSA Corrupted key: Private exponent
- Resources
RSA Continued fractions
- Resources
RSA Common modulus
- Resources
RSA Padding
- Resources
RSA Signature
- Resources
RSA Corrupted key 2
- Resources
RSA Corrupted key 3
- Resources
RSA Multiple recipients
- Resources
RSA Lee cooper

Data dares

Introduction
- What?
- Why?
- How?
ELF64 PID encryption
- ELF
- Solution
Protected PKZIP file
- PKZIP
- Solution
- Resources
Known plaintext XOR
- Solution
File: Insecure storage Mozilla Firefox 14
- Solution
Android lock pattern
- Android lock pattern
- Solution

Diffie-Hellman

Introduction
- What?
- Why?
- How?

Elliptic curve balls

Introduction
- What?
- Why?
- How?
Discrete logarithm problem
ECDHE
- Resources
ECDSA: Conventional attack
- Elliptic curve digital signature algorithm
- Resources
ECDSA: Implementation error
- Resources

Beyond the readable

Ty Myrddin Home
Unseen University
Improbability Blog
About
Contact

Index

Unseen University, 2024, with a forest garden fostered by /ut7.