Главная
Study mode:
on
1
Intro
2
Outline
3
Hardware-security mechanisms are pervasive
4
What is remote attestation?
5
Attestation requirements
6
Attestation Protocol
7
Attestation in practice
8
Desiderata for messaging protocols
9
The limits of deniability?
10
When is (cryptographic) deniability useful?
11
A new kind of attack
12
The dangers of undeniable communications
13
What do deniable protocols look like?
14
Deniable protocols: Off-the-Record (OTR)
15
Deniable protocols: Signal Protocol
16
An overview of our attack
17
Key point: TEEs let us prove that a key was secret
18
Modifying a Signal client
19
The result: an attested transcript
20
Demo
21
Switch to online-deniable protocols
22
Defensive remote attestation
23
Put the human in the loop
24
Countermeasures
25
Not just messaging protocols
26
Black Hat Sound Bytes
Description:
Explore the intricacies of secure messaging protocols and the challenges posed by remote attestation in this 50-minute Black Hat conference talk. Delve into the design of protocols that resist attackers using remote attestation, examining both cryptographic methods like on-line deniable key establishment and Trusted Execution Environment (TEE) approaches. Understand the concept of remote attestation, its requirements, and practical applications. Investigate the desirable features of messaging protocols and the limitations of deniability. Analyze the potential dangers of undeniable communications and examine examples of deniable protocols such as Off-the-Record (OTR) and Signal Protocol. Discover a new type of attack that exploits TEEs to prove key secrecy, and witness a demonstration of an attested transcript. Learn about defensive strategies, including online-deniable protocols and human-in-the-loop approaches. Consider the broader implications beyond messaging protocols and gain valuable insights into the evolving landscape of secure communication. Read more

The Undeniable Truth - How Remote Attestation Circumvents Deniability Guarantees in Secure Messaging Protocols

Black Hat
Add to list