Broken crypto is broken
summary
Concrete failure modes and fixes: poor randomness yields repeated keys and device-default keys; secrets leak in Git; an Android app truncated keys to one byte (256 keys) so encryption is trivial; CBC padding oracles allow decryption with ~2,087 requests (~131 per byte on average); RSA PKCS#1v1.5 padding enables million-message attacks reduced to ~15,000; GCM breaks if nonces repeat; 11 of 14 SAML libs had XML signature wrapping faults; common JWT issues include alg: none and key-type confusion; use vetted libraries, padding oracle protections, and avoid GCM nonce reuse.
AI-written summary · about
chapters (4)
- 0:00Start
- 12:41split the data into blocks at a given size
- 45:25validate a signature
- 51:05issue number five weak rsa keys
