Padding Oracle Attacks on Smart Cards
summary
The talk explains padding-oracle attacks against electronic smart cards, showing how an attacker can decrypt card communication without knowing the encryption key by exploiting padding validation responses. It presents concrete implementations of these attacks rather than relying on advanced mathematics, and demonstrates practical attack techniques on smart-card protocols.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 10:06Block cipher basics
- 17:36Padding Oracle assumptions
- 22:15First Padding Oracle attack
- 28:58Second Padding Oracle attack
- 35:42Initialization vector issue
- 42:13Defending against Padding Oracle attacks
related talks
40mBadge of Shame: Breaking into Secure Facilities with OSDP
23mPoint of Sale System Architecture and Security
40mExposing The Deep-Secure Elements Of Smartcards
01h 03mHack To Discover Weaknesses In A Series Of Smartcards
59mHow Smartcard Payment Systems Fail
42mBreak Crypto like a Pro!
37mContent-Type: multipart/oracle – Tapping Into Format Oracles in...
32mSecurity horror stories in payments