Главная
Study mode:
on
1
Intro
2
About me
3
JS crypto history
4
Doomed to fail?
5
Action plan
6
Language issues matter
7
Javascript in a glance
8
Bit quirks
9
Magic properties
10
Silent errors
11
16 snowmen attack!
12
AES - SubBytes
13
Encrypting...
14
Implicit type coercion
15
Decrypting...
16
Web platform
17
XSS
18
Poor randomness
19
Timing side-channels
20
Compiler optimisation
21
Direct memory access
22
Browser extension
Description:
Explore the controversial world of JavaScript cryptography in this thought-provoking conference talk from BruCON 0x06. Delve into the history of JS crypto, examine its perceived flaws, and challenge the notion that it's inherently insecure. Discover real-world examples of high-profile crypto libraries, applications, and systems tested for vulnerabilities. Compare JavaScript cryptography to established implementations like OpenSSL, BouncyCastle, and GnuPG. Analyze various security aspects, including XSS, man-in-the-middle attacks, PRNGs, and timing side-channels. Gain insights into language-specific issues, browser quirks, and platform-related challenges. Leave with a comprehensive, updated, and opinionated view on the state of JavaScript cryptography, equipped to question long-held beliefs and make informed decisions about its use in modern web applications.

Biting into the Forbidden Fruit

BruCON Security Conference
Add to list