Are Our Systems Using up-to-Date Cryptography?
Talkat LinuxCon @ Open Source Summit Japan 2023 · on Tuesday, 2023-12-05· at 15:40· Conference Room 1 (3F Level), Ariake Central Tower Hall + Conference, 3-7-18, Ariake, Koto-ku·
summary
A system-wide auditor is built that instruments crypto libraries with USDT and eBPF, attaches an eBPF program to running processes, and exports events via an io_uring ringbuffer into a hierarchical, privacy-preserving log. It detects specific algorithm use (RSA key sizes, TLS extensions like Extended Master Secret), flagged a server missing EMS, and measures overhead: a 1.3 TLS handshake loop (10 runs) shows about 4% overhead on single‑core tests, negligible on 8 cores but one test spiked ~7×; overall it works and surfaces actionable findings.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 5:29Cryptography configuration review
- 8:58Maintaining cryptographic systems
- 11:19Cryptographic policies tool
- 17:15Tool demonstrations
- 21:59Performance impact and future work
- 25:33Conclusion and Q&A
related talks
25mAre our systems using up to date cryptography
26mChecking your cryptography usage with eBPF
44mCryptography in the age of Heartbleed
41mCryptographic speed, reliability & security
01h 26mTLS Cryptography for Programmers
33mTracing SSL/TLS Encrypted Microservices with eBPF
51mA Retrospective on the Use of Export Cryptography
14mWill eBPF Save Us From the Next Global Outage?