Lessons From Two Years of Crypto Audits
summary
Findings include a hard-coded nonce that breaks ChaCha20-Poly1305 allowing ciphertext recovery, use of plain SHA-256 for password-derived keys instead of PBKDF2/scrypt/Argon2, 64-bit addresses with ~2^63 preimage risk enabling account takeover, ECB-mode image leaks, NFC hardware wallet sending short PIN hashes with a 3‑digit default, and a BIP32 implementation that silently truncates seeds. Rust audit workflow uses cargo test, cargo audit & Clippy, greps for unsafe and recommends zeroize and constant-time fixes; auditors often produce patches and verify fixes.
AI-written summary · about
chapters (7)
- 0:00Start
- 8:13Strong cipher yet weak encryption
- 10:22Weak key derivation from a password
- 12:14Hijacking accounts in a $3B cryptocurrency
- 15:23Weak encryption in credentials store
- 16:54Flaws in NFC cryptocurrency wallet
- 17:57Entropy data ignored in key generation
