Break Crypto like a Pro!
summary
Shows concrete exploits and working demos: Github code reproduces an attack that decrypts a ciphertext via a padding oracle demo in seconds, an RC4 image XOR that reveals plaintext by reusing a keystream, and a cookie key recovery that extracts an AES key when the key is misused as an IV. Also reproduces bit‑flip attacks to escalate a cookie to admin and measures password hashing speeds (≈60,000 guesses/sec for SHA vs ≈85/sec for PBKDF2), all successfully executed live.
AI-written summary · about
chapters (25)
- 0:00Introduction
- 1:03Why Cryptography is Hard
- 2:50General Recommendations
- 3:40Mistakes
- 4:53Exclusiveor
- 5:32Randomness
- 6:36Ransomware
- 6:58Decrypter
- 7:15Demo
- 8:40Advice
- 9:00Onetime Pad
- 10:07XOR
- 10:47Stream ciphers
- 12:05Reusing keys
- 14:36Block cipher
- 17:27CBC mode
- 22:59Padding
- 24:53Parent Oracle
- 27:44Oracle Attack
- 28:53Bit flippant Attack
- 31:53Bit flipping Attack
- 34:32Authentication
- 36:19Hash Functions
- 38:53Summary
- 40:12Further Learning
related talks
54mYes, you too can break crypto Exploiting common crypto mistakes
54mBroken Crypto is Broken
42mEverything I always wanted to know about crypto
30mMy code is being hacked!
01h 06mHow hacking works
51m48 Dirty Little Secrets Cryptographers Don’t Want You To Know
02h 27mHow hacking works (Workshop edition)
44mCryptography Pitfalls