Cats in My Certificate Transparency Logs
Explore Certificate Transparency logs: their purpose, functionality, and potential misuse. Learn about SCTs, public keys, and novel applications, including finding cat pictures online.
Break Crypto like a Pro
Explore common cryptographic vulnerabilities and learn practical exploitation techniques in this engaging talk on breaking crypto systems effectively.
Formally Verifying Everybody's Cryptography
Explore formal verification in cryptography: its application, challenges, and impact on securing real-world systems through mathematical reasoning and advanced techniques.
Hunting Invisible Salamanders - Cryptographic Insecurity with Attacker-Controlled Keys
Explore cryptographic vulnerabilities in authenticated encryption when attackers control keys. Learn about potential risks and mitigation strategies for secure implementation.
Practical Attacks Against Attribute-based Encryption
Explore practical attacks on attribute-based encryption, examining vulnerabilities in multi-authority schemes and their implications for cloud security and IoT applications.
DBREACH - Database Reconnaissance and Exfiltration via Adaptive Compression Heuristics
Explore database vulnerabilities through compression side-channel attacks, learning techniques to extract encrypted content and strategies for prevention and patching.
Attacks on the Curl-P Hash Function Leading to Signature Forgeries in the IOTA Signature Scheme
Análisis de vulnerabilidades en la función hash Curl-P de IOTA, revelando debilidades criptográficas que permiten falsificar firmas digitales en esta criptomoneda de alto perfil para el Internet de las Cosas.
Finding a Needle in an Encrypted Haystack
Discover new techniques to exploit NTLM authentication, including a critical zero-day vulnerability enabling domain-wide machine takeover, even with strict security configurations.
A Decade After Bleichenbacher '06, RSA Signature Forgery Still Works
Explores RSA signature forgery vulnerabilities, revealing new CVEs and discussing prevention strategies through dynamic symbolic execution analysis of signature verification implementations.
In Search of CurveSwap - Measuring Elliptic Curve Implementations in the Wild
Comprehensive survey of elliptic curve implementations in TLS, SSH, and IPsec protocols, analyzing support and behaviors across internet-wide scans and passive measurements.
Black Box is Dead - Long Live Black Box!
Explore the evolution of ATM security against logic attacks, focusing on black box devices and encryption measures implemented to protect cash dispensers.
Efail - Breaking S-MIME and OpenPGP Email Encryption Using Exfiltration Channels
Explore vulnerabilities in S/MIME and OpenPGP email encryption standards, focusing on outdated cryptographic primitives and potential attack vectors using exfiltration channels.
Squeezing a Key through a Carry Bit
Explore a practical key recovery attack on Go's P-256 elliptic curve implementation, targeting JSON Web Encryption through a subtle carry bit bug.
Quantum Security and Cryptography - You Are - Probably - Doing it Wrong
Explore quantum cryptography beyond basic qubit exchange, delving into exotic applications and quantum effects for securing information that traditional cryptography cannot achieve.
My Ticks Don't Lie - New Timing Attacks for Hypervisor Detection
Explore new timing attacks for hypervisor detection, crucial for sandbox evasion in malware analysis. Learn about hardware-assisted virtualization vulnerabilities and low-level measurement techniques.
Off-Path Attacks Against PKI
Explore vulnerabilities in Certificate Authorities and learn how off-path attackers can compromise PKI security, undermining the foundation of Internet application trustworthiness.
The Undeniable Truth - How Remote Attestation Circumvents Deniability Guarantees in Secure Messaging Protocols
Explore protocol design to resist remote attestation attacks in secure messaging, covering cryptographic methods and TEE-based approaches for enhanced deniability and security.
Applied Self-Driving Car Security
Explore self-driving car security with industry experts, covering technology, potential attacks, and defense strategies for this emerging field.
Demystifying Key Stretching and PAKEs
Explore key stretching and PAKEs: their history, best practices, and applications in encrypted cloud services. Learn to create toy algorithms and understand their importance in cybersecurity.
Most Ransomware Isn't As Complex As You Might Think
Análisis de más de 1.300 muestras de ransomware revela que la mayoría no son tan sofisticados como se cree. Se discuten técnicas de detección y prevención, así como la evolución y características comunes de diferentes familias de ransomware.
Cloning 3G - 4G SIM Cards With A PC And An Oscilloscope - Lessons Learned In Physical Security
Reveals vulnerabilities in 3G/4G SIM cards, demonstrating how to clone them using differential power analysis. Discusses implications for mobile network security and showcases practical experiments.