jetlib.sec » Tags » cryptanalysis

Feeds

133341 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

8 items tagged "cryptanalysis"

Related tags: security [+], risk [+], real security [+], mac [+], jean philippe aumasson [+], incrypt [+], iclass [+], hid [+], cryptography [+], cryptographic algorithm [+], bridge theory [+], block ciphers [+], biclique [+], authentication protocol [+], aes [+], advanced encryption standard [+], abu dhabi [+], usa [+], steganography [+], steganalysis [+], spectator sport [+], slides [+], programmable [+], michael raggo [+], field programmable gate arrays [+], field [+], digilent [+], black hat [+]

• February 06, 2012
• 17:10

  Cryptanalysis Of INCrypt32 In HID's iCLASS Systems

   » ‎ Packet Storm Security Recent Files
  The cryptographic algorithm called INCrypt32 is a MAC algorithm to authenticate participants, RFID cards and readers, in HID Global's iCLASS systems. HID's iCLASS cards are widely used contactless smart cards for physical access control. Although INCrypt32 is a heart of the security of HID's iCLASS systems, its security has not been evaluated yet since the specification has not been open to public. In this paper, they reveal the specification of INCrypt32 by reverse engineering an iCLASS card and investigate the security of INCrypt32. As a result, we show that the secret key of size 64 bits can be recovered using only 218 MAC queries if the attacker can request MAC for chosen messages of arbitrary length. If the length of messages is limited to pre-determined values by the authentication protocol, the required number of MAC queries grows to 242 to recover the secret key.

  Tags:  hid iclass incrypt mac authentication-protocol cryptographic-algorithm cryptanalysis  

• 17:10

  Cryptanalysis Of INCrypt32 In HID's iCLASS Systems

   » ‎ Packet Storm Security Misc. Files
  The cryptographic algorithm called INCrypt32 is a MAC algorithm to authenticate participants, RFID cards and readers, in HID Global's iCLASS systems. HID's iCLASS cards are widely used contactless smart cards for physical access control. Although INCrypt32 is a heart of the security of HID's iCLASS systems, its security has not been evaluated yet since the specification has not been open to public. In this paper, they reveal the specification of INCrypt32 by reverse engineering an iCLASS card and investigate the security of INCrypt32. As a result, we show that the secret key of size 64 bits can be recovered using only 218 MAC queries if the attacker can request MAC for chosen messages of arbitrary length. If the length of messages is limited to pre-determined values by the authentication protocol, the required number of MAC queries grows to 242 to recover the secret key.

  Tags:  hid iclass incrypt mac authentication-protocol cryptographic-algorithm cryptanalysis  

• January 31, 2012
• 15:47

  [Slides] Cryptanalysis vs. Reality

   » ‎ SecDocs
  Authors: Jean-Philippe Aumasson
  Tags: cryptography
  Event: Black Hat Abu Dhabi 2011
  Abstract: It is commonplace to argue that academic cryptanalysis---whose "attacks" literally take billions of years to complete---has no relevance whatsoever to actual security, for real-world failures of crypto are most often due to: Side-channel leakage (padding oracle attacks, etc.) Attacks on the implementation (key extraction through fault attacks, etc.) Complete bypass (after theft of keys à la DigiNotar, etc.) Nevertheless, a number of new cryptanalytic attacks have appeared these last years with various degrees of sophistication and of objectives, from complex key-recovery attacks to efficient-yet-cryptical "distinguishingers". To better understand the risk (or absence thereof), this talk will go through technical subtleties of state-of-the-art cryptanalysis research, which we'll illustrate with concrete field examples. The topics discussed include related-key attacks, cube attacks, the real security of AES, the case of pay-TV encryption, or the risk of using SHA-1, SHA-2, or the future SHA-3. Finally, we will present a recent attempt to bridge theory and practice, with an introduction to leakage-resilient cryptography.

  Tags:  cryptography security risk jean-philippe-aumasson abu-dhabi bridge-theory cryptanalysis real-security  

• 15:46

  [Paper] Cryptanalysis vs. Reality

   » ‎ SecDocs
  Authors: Jean-Philippe Aumasson
  Tags: cryptography
  Event: Black Hat Abu Dhabi 2011
  Abstract: It is commonplace to argue that academic cryptanalysis---whose "attacks" literally take billions of years to complete---has no relevance whatsoever to actual security, for real-world failures of crypto are most often due to: Side-channel leakage (padding oracle attacks, etc.) Attacks on the implementation (key extraction through fault attacks, etc.) Complete bypass (after theft of keys à la DigiNotar, etc.) Nevertheless, a number of new cryptanalytic attacks have appeared these last years with various degrees of sophistication and of objectives, from complex key-recovery attacks to efficient-yet-cryptical "distinguishingers". To better understand the risk (or absence thereof), this talk will go through technical subtleties of state-of-the-art cryptanalysis research, which we'll illustrate with concrete field examples. The topics discussed include related-key attacks, cube attacks, the real security of AES, the case of pay-TV encryption, or the risk of using SHA-1, SHA-2, or the future SHA-3. Finally, we will present a recent attempt to bridge theory and practice, with an introduction to leakage-resilient cryptography.

  Tags:  cryptography security risk jean-philippe-aumasson abu-dhabi bridge-theory cryptanalysis real-security  

• November 30, 2011
• 21:53

  [Slides] Steganography, Steganalysis, & Cryptanalysis

   » ‎ SecDocs
  Authors: Michael Raggo
  Tags: cryptography steganography
  Event: Black Hat USA 2004
  

  Tags:  steganalysis cryptanalysis steganography michael-raggo usa black-hat slides  

• August 19, 2011
• 7:29

  Biclique Cryptanalysis Of The Full AES

   » ‎ Packet Storm Security Recent Files
  Whitepaper called Biclique Cryptanalysis of the Full AES. Since Rijndael was chosen as the Advanced Encryption Standard, improving upon 7-round attacks on the 128-bit key variant or upon 8-round attacks on the 192/256-bit key variants has been one of the most difficult challenges in the cryptanalysis of block ciphers for more than a decade. This paper discusses shortcut attacks on AES.

  Tags:  biclique aes cryptanalysis block-ciphers advanced-encryption-standard  

• 7:29

  Biclique Cryptanalysis Of The Full AES

   » ‎ Packet Storm Security Misc. Files
  Whitepaper called Biclique Cryptanalysis of the Full AES. Since Rijndael was chosen as the Advanced Encryption Standard, improving upon 7-round attacks on the 128-bit key variant or upon 8-round attacks on the 192/256-bit key variants has been one of the most difficult challenges in the cryptanalysis of block ciphers for more than a decade. This paper discusses shortcut attacks on AES.

  Tags:  biclique aes cryptanalysis block-ciphers advanced-encryption-standard  

• November 18, 2010
• 0:20

  [Video] Cryptanalysis with Field Programmable Gate Arrays

   » ‎ SecDocs
  Tags: cryptography cracking FPGA
  Event: PhreakNIC 11
  Abstract: This talk is an attempt to build a community around doing distributed computing with Field Programmable Gate Arrays. The first target is Cryptanalysis of DES. Most of the alloted time will be spent actually working on this, so bring your computer, and if you are really interested in this, order a Digilent Spartan 3-1000 prototyping board and bring it to the con. They can be obtained for about $150. Hacking is not a spectator sport. This talk is for people who actually want to roll up their sleeves and work on a cool technical project. This project is starting from scratch at PhreakNIC.

  Tags:  programmable field cryptanalysis field-programmable-gate-arrays digilent spectator-sport