Bagikan
))
This is the audio podcast version of Troy Hunt's weekly update video published here: https://www.troyhunt.com/tag/weekly-update/
…
continue reading
Nate Lawson: Part 1
Manage episode 340700091 series 2956114
Oleh Deirdre Connolly, Thomas Ptacek, David Adrian, Deirdre Connolly, Thomas Ptacek, and David Adrian ditemukan oleh Player FM dan komunitas kami — hak cipta dimiliki oleh penerbit, bukan Player FM, dan audio langsung didapatkan dari server mereka. Tekan tombol Berlangganan untuk mendapat setiap pembaharuan di Player FM, atau salin URL feed ke aplikasi podcast lainnya.
We bring on Nate Lawson of Root Labs to talk about a little bit of everything, starting with cryptography in the 1990s.
Transcript:
https://securitycryptographywhatever.com/2022/09/09/nate-lawson-part-1/
References
- IBM S/390: https://ieeexplore.ieee.org/document/5389176
- SSLv2 Spec: https://www-archive.mozilla.org/projects/security/pki/nss/ssl/draft02.html
- Xbox 360 HMAC: https://beta.ivc.no/wiki/index.php/Xbox_360_Timing_Attack
- Google Keyczar HMAC bug (reported by Nate): https://rdist.root.org/2009/05/28/timing-attack-in-google-keyczar-library/
Errata
- HMAC actually published in 1996, not 1997
- "That was one of the first, I think hardware applications of DPA was, was, um, satellite TV cards." Not true, they first were able to break Mondex, a MasterCard smart card
"Security Cryptography Whatever" is hosted by Deirdre Connolly (@durumcrustulum), Thomas Ptacek (@tqbf), and David Adrian (@davidcadrian)
32 episode
