1 Trillion Dollar Refund – How To Spoof PDF Signatures
summary
Examines security of digital signatures in PDF files by analyzing 22 PDF viewers (including Adobe Reader DC and Foxit) and 8 online validation services, finding widespread vulnerabilities due to inconsistent verification algorithms. Presents three new attack classes that let an attacker modify signed PDF content despite cryptographic signatures, documents responsible disclosures and resulting CVEs, and proposes a standardized secure verification algorithm.
AI-written summary · about
related talks
40mFinding Secrets in PDF Files
44mHow to Break PDF Encryption
33mPDF - Mess With The Web
23mBADPDF: Stealing Windows Credentials via PDF Files
18mBuild Your First zkPDF Proof
01h 06mPDF Attack: A Journey from the Exploit Kit to the Shellcode (Part 2/2)
47mDigital Signatures of Files in Windows
46mHow (Not) To Implement Secure Digital Identity: Study Of Poland's Digital ID System