Главная
Study mode:
on
1
Intro
2
Textbook RSA signature
3
Beyond textbook RSA
4
PKCS#1 v1.5 Signature Scheme
5
Bleichenbacher's low exponent attack
6
A little brain teaser
7
Why was the attack possible?
8
To find these attacks
9
Automatically generate concolic test cases
10
Testing with Symbolic Execution
11
Implementations Tested
12
Leniency in Openswan 2.6.50
13
New unit test in Openswan
14
Leniency in strongSwan 5.6.3
15
strongSwan Security Update
16
Lessons Learned
Description:
Explore a Black Hat conference talk that delves into RSA signature forgery vulnerabilities persisting a decade after Bleichenbacher's 2006 attack. Learn about the researchers' use of dynamic symbolic execution to analyze signature verification logic across various implementations, resulting in 6 new CVEs. Discover the systematic approach used to uncover these flaws, including the release of a toolchain and relevant artifacts. Gain insights into why such vulnerabilities continue to exist and how to prevent similar mistakes in the future. Follow the presentation's structure, covering topics from textbook RSA signatures to PKCS#1 v1.5 Signature Scheme, Bleichenbacher's low exponent attack, and specific case studies involving Openswan and strongSwan implementations.

A Decade After Bleichenbacher '06, RSA Signature Forgery Still Works

Black Hat
Add to list