Raccoon Attack - Finding and Exploiting Most-Significant-Bit-Oracles in TLS-DH(E)
Explore the Raccoon Attack on TLS-DH(E), its impact on cryptographic protocols, and potential countermeasures. Learn about side-channel vulnerabilities in key derivation processes.
Golang and Cryptography - Part 1
Explore cryptography fundamentals in Go, covering encryption types, ciphers, hashing, key derivation, and digital signatures for secure coding practices.
Applied Cryptography and Trust - Hashing
Explore hashing methods, digital certificates, password security, and key derivation in this comprehensive overview of cryptographic techniques for data integrity and authentication.
Leftover Hash Lemma, Revisited
Explores improvements to the Leftover Hash Lemma, reducing entropy loss and seed length in cryptographic key derivation. Discusses the expand-then-extract approach and its security implications.
Secure Channels - Building Real World Crypto Systems
Explore secure channel cryptography, including key establishment, data protection, and essential properties. Learn about famous security bugs and recent improvements in SSH and TLS implementations.
I Am AD FS and So Can You - Attacking Active Directory Federated Services
Explore Active Directory Federated Services (AD FS) security, including claims pipeline, tokens, and vulnerabilities. Learn attack techniques, defense strategies, and best practices for securing AD FS deployments.
What We've Learned with Two-Secret Key Derivation
Explore two-secret key derivation for enhanced password security. Learn about count keys, server storage, and team management in this insightful presentation on advanced cryptographic techniques.
Breaking the Bluetooth Pairing - Fixed Coordinate Invalid Curve Attack
Explore Bluetooth vulnerabilities and the Invalid Curve Attack on pairing protocols. Learn about elliptic curve cryptography, attack phases, and mitigation strategies for secure connections.
TLSv1.3 from Scratch
Explore the development of a new TLSv1.3 stack from scratch, including design decisions, challenges, and implementation complexities. Learn about interoperability, testing, and pitfalls in protocol implementation.
Keeping Secrets with JavaScript - An Introduction to the WebCrypto API
Explore the Web Cryptography API, its implementation, and potential for browser-based encryption. Learn about NaCl-inspired API and the future of web security.
A Hierarchical Deterministic Wallets Without Seeds
Explore the innovative concept of hierarchical deterministic wallets operating without traditional seed systems in blockchain technology and cryptocurrency management.