Assessing And Exploiting BigNum Vulnerabilities

Channel:
United States All Hacking Cons
Subscribers:
5,970
Published on ● Video Link: https://www.youtube.com/watch?v=x2zW8M5ARlo


Duration: 49:01
5 views
1

The majority of deployed asymmetric cryptography implementations (RSA, DH, ECDH/ECDSA with GF(p) curves) need to perform calculations on integers that are larger than a single machine word. Just like every software package, implementations of multi-precision integer arithmetic sometimes have bugs. This talk investigates the implications of these bugs and shows how they can be used by attackers to exploit asymmetric cryptographic primitives. Isolating bug patterns and understanding exploitation requirements allows us to develop strategies for automated bug hunting.

PRESENTED BY
Ralf-Philipp Weinmann

Black Hat - USA - 2015 Hacking conference
#hacking, #hackers, #infosec, #opsec, #IT, #security



Other Videos By All Hacking Cons


2022-01-04Panel How The Wassenaar Arrangement s Export Control Of Intrusion Soft Affect
2022-01-04Winning The Online Banking War
2022-01-04Optimized Fuzzing IOKit In IOS
2022-01-04The Memory Sinkhole Unleashing An X86 Design Flaw Allowing Universal Privilege
2022-01-04My Bro The ELK Obtaining Context From Security Events
2022-01-04Why Security Data Science Matters & How It's Different Pitfalls And Promises
2022-01-04Social Engineering The Windows Kernel Finding & Exploiting Token Handling Vulnerabilities
2022-01-04Most Ransomware Isn t As Complex As You Might Think
2022-01-03Switches Get Stitches
2022-01-03Repurposing OnionDuke A Single Case Study Around Reusing Nation State Malware
2022-01-03Assessing And Exploiting BigNum Vulnerabilities
2022-01-03Bypass Control Flow Guard Comprehensively
2022-01-03Dom Flow Untangling The DOM For More Easy Juicy Bugs
2022-01-03How Vulnerable Are We To Scams
2022-01-03Bypass Surgery Abusing Content Delivery Networks With Ser Side Request Forgery
2022-01-03Information Access And Information Sharing Where We Are And Where We Are Going
2022-01-03Attacking ECMAScript Engines With Redefinition
2022-01-03Certifi gate Front Door Access To Pwning Millions Of Androids
2022-01-03Emanate Like A Boss Generalized Covert Data Exfiltration With Funtenna
2022-01-03Attacking Hypervisors Using Firmware And Hardware
2022-01-03Cloning 3G4G SIM Cards With A PC And An Oscilloscope Lessons Learned


Tags:
data
hacker
security
computer
cyber
internet
technology
hacking
attack
digital
information
hack
online
password
code
concept
protection
network
malware
secure
identity
software
access
firewall
communication
business
privacy
binary
account
spy
programmer
program
spyware
hacked
hacking conference
conference
learn
how to
2022
2021
cybersecurity
owned
break in
google
securing
exploit
exploitation
recon
social engineering
Ralf-Philipp Weinmann
assessing
exploiting
BigNum
vulnerabilities