48 Dirty Little Secrets Cryptographers Don’t Want You To Know
summary
A collection of 48 hands‑on crypto challenges yields per‑language exploit code and a Rosetta‑Code site, with 10,000 participants submitting solutions from x86 to Haskell and even Excel AES sheets. Concrete failures include SaltStack using public exponent 1, Cryptocat’s broken ECC Diffie‑Hellman from string/integer mistakes enabling baby‑step/giant‑step attacks on modest VM resources, and a practical RSA padding oracle (Bleichenbacher) exploited by multiplying ciphertexts; full challenge code and writeups appear at Cryptopals.
AI-written summary · about
chapters (29)
- 0:00Intro
- 0:39RSA
- 1:43Saltstack
- 2:42Motivation
- 7:13Languages
- 8:31Microsoft Excel
- 9:00Postscript
- 9:31CryptoCat
- 12:06DiffieHellman
- 13:26BigAnt
- 13:58Key Strength
- 15:05Babystep
- 16:51Crypto Cat
- 19:11Stream Ciphers
- 19:45CTR Mode
- 20:17Public Key Cryptography
- 20:44Daniel Blackmarks
- 22:14Padded RSA
- 26:55DragonBox
- 27:24Property of RSA
- 29:30Math
- 38:26Diffie Hellman
- 40:34How Clock Works
- 41:54Multiplication
- 42:29Curves
- 44:59Curve Generator
- 46:12Chinese remainder theorem
- 47:44Demo
- 49:07Extended GCD
related talks
42mBreak Crypto like a Pro!
55mThe secrets of Cryptography
54mYes, you too can break crypto Exploiting common crypto mistakes
44mCryptography Pitfalls
37mFrontiers in Cryptography
36mThe Art & Craft of Secrets: Using the Cryptographic Toolbox
36mSmall Leaks, Billions Of Dollars: Practical Cryptographic Exploits That Undermine Crypto Wallets
02h 27mHow hacking works (Workshop edition)