well looked like coolest one of the most things they needed a surname so I just
in time to talk a lot actually stands for the arithmetic unit control so it's
nice to be here and see all your ladies and gentlemen it's it's awesome to be on
this conference and I want to just think those killers of trainings for
organizing this great event it's a big honor to be here
tributary we want to talk about pgp actually we don't want to talk about PHP
and particular bunch more about what is broken publicly crypto this lecture goes
and several parts so in the first part of the lecture I decided to make sure we
all speak the same language so we have a little recap of what are so here's just
a lot of stuff like this
the second part we gonna talk about the fun stuff how to a tacit and in the
third part we're going to talk about
model of trust we live in the moment so and I tolerant of my job as break things
so I'm hacker sure always terrible always drinking and still learning as
all of us there are some little attention for the stalk don't worry it's
not gonna be heavy on math but few formulas in the talk so we have to
recognize notations which all of you know so explain to us why the ciphertext
Easter encryption function digital equipment function and we have 2k the
key and sure enough a case-based but I don't think we need to send this letter
the questions while we do that well that's the reason why actually it's a
funny pictures you know that as tus embassy in Berlin and actually project
at on the embassy
Yahoo last year actually order year before last year Mr Snowdon decided to
have a little talk with the public and the public found out what we don't never
knew that secret services doing Secret Service and spice are spying not just in
the movie's producers because I get paid for it and you know who's gonna pay them
us and so we now decide that's not cool and the question is what can we do
against it and I always see rule to encrypt your message that secure so well
we do and Krypton matches message and see how secure others who have you ever
played for public key crypto and the rest of us on HTTPS site
well
founding paper public equipped was done by actually treat people shouldn't have
to feel Helmand and Merkel they had two founding paper which was actually
published 1976 and was probably the first scheme which was introduced of
public-key cryptography so what we do is we have some public power made us we
take a journey group I G
we have some pictures which we might do some prime soil or whatever and then we
have some generator of the group and what happens this we exchange keys Alice
answer key or her message eg today a race to the g2 race neutral palette hey
Mike P what does the same before he departs be than both of them gonna
compute their private message and what kind of happiness we have two problem to
compute G today be out of GTA and GDP from public information that is now
since 1976 the case and we still have two underlying
other ambitious discrete logarithm and we still think these problems heart we
use our assay who have a used car sales you guys so you know how it works
shared key public key and you have a private key and those kids are actually
a product of a of a of a NES the multiplication of people like you more
or less the encryption exponent all the decryption exponent so we exchange our
keys to send a message and other one can decrypt to keep the stalkers not about
how r say works as just a quick overview I expect you actually to no doubt so
given that and see compute sold out so i computer attacks attacks to the rest of
the politics opponent as the same like seem odd and is a problem which we think
as heart if you have to find out of public information so we have a math
program which caused sage who know sage such as awesome so we can do to sinn
sage and that's actually how it looks like so we have here a random crime
which we have to keep our 512 the computer to raise the two actually most
used exponent and the internet and we encrypt a message from Monday's equation
is wrong what is it does anybody know what is the status bar say but what is
wrong with it which is used it the way it is okay let's raise the to the power
of 2024 which is used to waitress why not have no idea what
why
I'm not talking about us i'm talking about the bigger problem we have no
padding and the seclusion don't want to do this and and and and real world there
is no padding so what we do there as we factor actually are primes and reduces
the attacks I i talked up may be reduced to factorization maybe not all factors
should not be np-complete on unless something really strange happens and we
just ran into it but now we got to the Real Talk the question is what is the
attack types what do you think how we attacked us so we have a public key
crypto and we supposed to be the attacker what could we do which social
engineering yes this is all what else could we do what
what is mine and the Middle how can you man in the middle of one day have
encrypted channel you have to fast break down quickly before it can really man in
the middle or you do an attack which are mentioned much later in this talk but
what else do we have no more through theoretical models of attack what could
we do he said social engineering very right I want one
planning implementation we have to implementation floor and we have to
social engineering is there anything else we could use we could start trying
to steal the private key which social engineering if we still got that has
actually social engineering because he go to his place and you attack the
machine directly so you have to go to the machine try to go to my machine
without my permission to have to sort in January according to your way to the
machine down more attacks then we have proved false as an attack would you
agree no yes no yes
and we can do another think we can analyze as an attack so we just gather a
lot of staff and we analyze what we find and that's actually what we're doing so
I talked two types is proved false analyzing social engineering and using
implementation floss right clinton metaxas very funny but the moment we're
not as ready yet but we're getting there don't worry so which type of attack do
we have for sure enough the most juice 22 attack are safe for example is
factoring so there are different ways of factoring it so you have some some other
reason which are used for specific cases you have some random Algeria so you know
that our algorithm like Paula troll poverty minus one serving I think the
most used in the moment as number fill serving papers published so we don't
need to go into that that is what we in the moment currently used to brute force
does things we use number field sieve into factor to find common factor which
we maybe can divide to calculator computes the private key but there was a
paper which came out I think 2013 from last page I think a computer too much
does it cost to factor and if you could look at it like the 512 bits is quite
easy going over 20 becomes more expensive but it still is still doable
and here we go out thing tolerant on three-letter service is capable of doing
so I think they get the money are under review time which means it's a
non-muslim ranting on Amazon we don't talk about their own networks I mean if
you look at Anastasia piles of computers are thinking of like hold stocks of all
the computers so
they they have enough power to compute that right but if we look at this maybe
it's too much right yeah so that means we just use a large key and we say but
sure we're safe so that takes out a brute-force attack but we still can
analyze stuff to social engineering and juice implementation floss let's go for
that task will look like in the Praxis what what we gonna have what we find on
the wild to be really find the perfect round the last we will find everything
perfect and place we have find a lot of random generation plus we find repeat
his keys and key collisions we find or actually the we don't find but we have a
very funny trust model so we do trust people we do not know for any reason our
secret keys so random number generation flaws what can we do we can collect a
lot of taters which you find on the internet you find keys you find Cyprus
you find websites with their search to find all kinds of stuff on the internet
and if you want to shop for it we just go to her and find everything want to
sign and cook two sessions signs we try to cyber loss that's a password is not
cool site in my conference when you say site where you have to drink as you get
my stuff
so i'm good for twins rings already so you can stop what you find everywhere
for the question is how do we do that we can actually go back to projects that
did it already so if we don't wanna work we can be lazy and we can use the eff
you can download these boxes but the results are not new I think the results
of the 2010-12 something like this but most of the service still use the same
key so that's not really a big problem we could sure enough to get us 23 ec2
instances and run them through and not the internet that takes a while we can
use disposable internet study in 2008 but I think that's kind of all too soon
after hackers of you can use a botnet you just wait till dollar and important
attacks are not working take it over and use this for and we're eating what we
can do in the US much faster as anybody played with you from you guys played
this season I already did you like it they have some flaws in the beginning I
mean
attempt to crush always feel session widened and the moment implementation I
worked quite well so I tried to some you don't like it
that's all that's awesome I mean I use it alot the last time i used i didnt
juicy tomato internet but I was I try to sleep it wasn't talking in a hotel I try
to sleep in there was a lady on the floor and she was skyping all the time
and I could not sleep so what I did was to us like instantly amazing thing about
it even in the plaza hotel in 10 hours I had like the whole internet so I told
goal of us like I think twenty to go back to port 443 to make sure I can
sleep
the question is what do we find one we when we play a round over 200 + find
like 30 million open ports I didn't 2013 maybe we need to update the numbers
right so just numbers are a little bit older we have had like a six million or
say Keyes you'll find about 6,000 to use a 10 and two hundred kids are you as you
know I know you need to know
Russian Standard why we are on Russian Standard vodka that's my problem I'm my
most favorite brand of Russian Standard yes it's a russian standards do you know
when they introduced it no I mean when they introduced it actually it was
introduced and that's funny because I'm voting numbers of its John McCarthy
always like this was introduced on May 20 30 1994 so we have a 323 as you could
see before I that's why I always too much computation study have a
twenty-three in there
yes yes sure what do we find we find SSH keys we find PGP GPG stuff if I get
caught and there are some national issue documents as a result of yourself what
you can do it on white year because they were questioned that walk when everybody
try to do that maybe you want to do with the university or at home a few other
bigger lying 1 gigabit line it should be done in a few hours so that's that's ok
so what you find on as ages before we had to say now we have to as a church we
have 25 million open ports which we fall million hace keys to us numbers you can
read it by yourself that's not really important for the talk so the question
is how do we find we want to we want we want to play with PGP and we sat as as
an attack type analytics would be ok then we say so so how do we analyze the
PGP what's about doing your own case over that's nadia is not so you start
your own ski service just analyze what's on it to start your case over you just
downloaded and then you can look into it what you find in this case over numbers
are down here at such a place over 2013 last two years were too busy to to play
that we had a talk about Bitcoin ten o'clock today I think there was two
awesome people talking about Bitcoin right
so it can uses electric elliptical to feel at ease while she is a kind of
security and you have a good ass but if you notice fucked up you're not really
secure and trust me the gnosis really fucked up the most people since taking
some snake also produces so if you want to get a stick on change you just open
yourself a pic on account and you download to change the locks changed
there and then we can start on player but you will have a download which is
found about 76 and that gives you one million 870,000 keys roundabout about 24
million transactions there was to research from the guise of Palestine and
a few other guys and they actually made a paper and what it did
taiwan they had some government issued ID cards and you could do transactions
with them and they had a trip on them and they actually brokered to find the
paper we found the paper right that's awesome paper in his readers are you
guys should read this paper that's awesome
flights will be online soon you just copy pasted all of the slights and you
can download it interpreted it as they actually took over identities they could
do transactions so we really need to think about what we doing because that
now goes into our private sector and into our entire families when we have
IDs installing what we look for sure enough we look for repeated case we look
on public which are not really got well made and we look for a four-shot factors
so sharp factors the formula would say would look like this
because those guys who have shared factors use the same product key so
that's what we're looking for
so what can we do whatever we could either fraud are instances and trial
number for cheering serving on it if the key 768 bet he would take 2.5 calendar
years on ec2 units which use but if you used to achieve city but if we take the
same key almost 50 90 seconds I talk talk about all around them laptop so ok
that's ok I'm choosing to you say anyway fact that we paid off of DSA not really
so if we look at it and yes I is too long skirts known the private key is
computable so in the beginning on the same like on the beginning of a few case
you need something to be done and and he has ever started in on sunday scapes
known
we can compute its over if you find two years the same as such that the same
Lance case easy to compute but case unknown right if we have to
message to actually who share the same los que que Cambie computers from the
signature of those two messages so one way to reduce with obstructive
signatures South K and worse because that's all you ok can be computed
private keys then who knows about the paradox are right for us who don't know
about the paradox of osteoporosis protect my which says if you want to
compute if we have 23 people in a room the chances are fifty 50 that we have a
coalition right we have we have a higher chance of 99.2% as people have a
different birthday but we have already a 50% collision chance that means that we
have a coalition that's actually what we're looking for in the end
crypto crypto if you too crypto analyze the script analysis of most of the time
it's guessing looking for collisions looking for repetition so that we find
repeated cason stuff that's the way you which are probably due to sinn sage if
you wanna play but so why do we talk about it because the randomness we maybe
have a floor some random this there was this paper fact about natural strict
about that so you're in the crypto and you definitely can tell so that you can
find all kinds of stuff and Bernstein again he had actually this little theory
where he say we stopped and ate our same module and 1924 5 and so on
and computer product of this module loss on a binary tree and we model the
product by the Square after containing box containing notes and then our goal
is to go and 12 13 14 March and to the power to about and want to power to and
so on and divider to fire find purchase city some non-trivial devised advisers
that's what we want to find out if you find some non-trivial devices by using
the GCT if you go by the results we found you'll find out that you have to
stay city maybe in ten hours if you walk this way undermine Eritrea it's it's
well written on the website did you find it while you're looking on at all anyway
did you find this article from him
you should check our chats about the binary tree sits very awesome because
what we do right now is more statistics 10 attack type b2 analyst we analyze and
what we do here is a statistic way of analyzing our factoring case instead of
doing the hard way and you should be using our cities so if you look at our
results will find about and now we're talking about private case we talk about
privacy case from 64,000 HP servers so we talking about here
private case once you have privately assured of can decrypt stuff but you
also can look for their secrets and the key because of what I found was that guy
who had a really weak private key
US passports and and that of a day his new key is very strong but the same
password they don't help the same dose of the arse des annonces you have to do
you have a lot of the HD's a service who has a coalition announces a profound 158
conferences which too much about money so why is that with the TSA you have to
remember if a key is not well created most of the machines have both so you
can figure if the US is fucked up the ass fucked up to
so we have some repeated caisson as they chose so why do we have repeatedly sure
enough to companies who issue 1 keep all their websites and you have like virtual
hosting all kinds of stuff corporate so its default device with the fall case
but well
where do we have to most problems the most problems so called industrial grade
firewalls we're talking about the stuff from Cisco John apart from Sophos
machines stuff like this all we do have actually a problem are embedded devices
I did the research with heavy and pittsburgh has anybody knows this box
it's very very common in Germany and that's a little router which connected
to the Internet
they really suck so we have to pay issues you know how the centerpiece
generator who doesn't know everybody know how to answer beyond your limits
devices generated right at least you think you don't know how right you know
at least you think you know because there's some surprises normally it
should be like this you have two tough random and that takes some key what time
in mouse movement network traffic whatever rights and we have to touch you
random one is a good website another number generator one is a good one do
you want us one is that actually that you want to have that thing yet but
there's actually a real world application would I say it have to be
there for security I'm not talking about for not security i'm talking bout for
security and real world application where we need to absolute number
generator for security
do you think you know which one is this what could it be
what for passing what else padding for what else could we use it
everybody's of you guys using a telephone to use of one part time and
what it do you go i play now you go from your little cell phone to at our cat
decrypt it get an encrypted to the other tower and get back and put it in other
cell phone and what happens on this encryption has to sort out using a
one-time pad and they have a pseudorandom generator because they need
to generate the same number on both sides understanding of receiving such if
you have a true random generator that that would be paying so that's that's a
useful way of using absolute are now running on generator but for everything
else we might not want to do it
the problem of the random generator is blocking behavior so just figure you
have dollar and a little rude approved device and the three wise wanna boot up
or not boot up because it doesn't have a random generator because i dont have
entropy so want to put up so to generator to need some software like
OpenSSL liberals or whatever you prefer to use right but the problem is not a
set of the random last saw your device don't have anything to seat randomness
in the use the default an open-access which is who knows it
what is a smart people in in actually implement their to use our instead of
having like real seat what to use the time which is awesome so this is
actually a coat here for some people who wear doesn't boot up and the little the
router devices so we used to time while the time timing problem
you know which time they use a lot of time Unix time so what about we have a
lot of little fits boxes using all unix time are we switching on the same time
so if you remember we have we created our psyche if we have too little for its
boxers and we switch among all the same time we can compute all possible seats
of the pseudo random generation I do to us
works so little girl goes back to brute-force actually she broke into
massage my mother so just that we have run on the dollar and the device which
boots up and unix time and that's just so let's talk about private trust who
have you guys know how many actually artists little the little talk with
secure person he said I should ask this question to ask the question if you are
the browser and the default install process and all around them
operation system how many seats do you trust was a boy opinions 100 but I trust
what a couple dozen 100 couple dozens what if I think
300 alright so we go to hundreds of first- second- and 300 cattle
well it's not probably not accept 300 but we have a few hundred and probably
to us we trust a few hundred so you trust a few hundred companies you never
had a business both i mean you trust like a few hundred dollar and Rudy pool
companies you don't know which country they are which lost due to have a good
data protection law and you go far enough for many people go far enough to
say oh well I need a start for my website so I go to it all around on that
and I create my private key and even better
going back to implementation plus there was before they had engine x10 think
what's called a paci remember back in the days and they like I don't put up
you have a password so if you look up to in the internet you'll find alternative
forms where people find out how to remove the password of your search
because otherwise I put someone's . check it out i mean that's awesome
that's the best Nicole you can get so why not trust well who's using talk to
you guys who are not well-known network right cool why do you store just to
check it out
other opinions why do you store
ok so often pawn
or something real pong
what else could use your store for ya buying drugs but kind since I'm not a
couple bomb I'm not going to tell you it was something good I'm sorry ok next
question what makes you trust people and machines you don't know if you don't
have control off I mean since your store you trust foreign people you never met
and you don't have control of the machines so what makes a trusting guy
right did you know that about 58 percent of all the tour notes are vulnerable to
the timing attack which is heavily used by our friends in Great Britain United
States on everybody else was playing perfect timing attacks no yes yes that's
a paper which is came out a few days ago and I figure it's well we have a problem
of timing attacks a serious one and set up my cat week water softener to our
network is monitor what about the timing attack what does anybody know how the
timing attack works well
timing attack the attacker just need to take control of an accident we note
help you can do some statistical analysis and find where you from the
matter of minutes there's a new there's a new paper out which cost measuring and
migrating
advertise what advisories I can store and others former University I will put
us under the notes when I when I upload just because it's quite fresh the paper
will put a link up and actually created by some people from United States which
reduces the problem 25.8% but the way to us mates you will not be safe against
timing attacks which moves even though it's reduced to 5% of 6% you still
vulnerable again tight timing attacks that's just what what it is so if you
want to hide your identity
maybe twice not anymore what you want to use maybe you just want some service in
China maybe maybe you're just a stroll down for iOS four intolerant of my
country and
later actually incorporated into the problem always after while we don't know
the whole problem child she's so if you look at my location it's not in revoking
that was that was so the idea is actually two first verify the Trust's
before we start exchanging keys we should probably a first barry five-word
is what ideas why that is maybe the question and
stake so there are so few people from Germany they have a little company right
now packing ideas
mainly for my facts they work on actually on new model where you can
verify before you trust me i'm not i'm not entitled to speak about it yet
because they cannot deliver but there will be some in the pipe we all should
ask yourself about the trust we all should ask yourself do you really trust
us instant we really trust us over even though the service run by a friend of
you the question is does he maintains the stuff right does he have a good seat
does he generates two keys properly all these questions on stake of it starts
with trust so I think this very moment are crypto leaks a lot on implementation
floss be computers with analyzing and the trust model we should definitely
working out west model to make things better
have to say trust me i'm open for questions
no questions there yes if you have a trustworthy notes that would help the
problem
timing attack I think it's like 58 percent of the notes belong to the rest
of the Chinese government so it's just a question you trust more yeah that's
right that's actually what a new client is doing I guess but you need to read
the paper first I think ago answer your question I was put up the paperwork also
some my research I should be more careful to talk about it
about research other people that so I think if you read the paper will answer
your question I will put up the link on the question how many serious do you
trust in your browser
me actually revoked a lot of kicked out a lot of serious because you cannot
really trust them it's a but it's all about always a hassle with links to to
do it anyway
GPS is always a hassle understand your last name is an evil bomb but still
wouldn't artificial delays help fight that I'm attacked think that's what I
try to do I'm not totally sure what it is right now cause I just read the paper
yesterday
but before I before I make comments about this paper I prefer to read a
twenty times and fully understand what the personals doing good commander
otherwise our first have to do with deep research before talk about it do you
think they're really coming down the model of trust in the internet because
everything in life you have to trust you trust that when he woke the pavement you
want to get to ride bike bike are you trust Dr the hospital and so on and so
on so on so life entirely realize somehow contrast to the people who don't
know discussing the internet and was certificates is just one presentation of
trust in real life you choose to talk to you go to that doesn't mean I mean let's
say you're going to a dentist he has a very very good reputation which you take
as a model of trust for yourself and there's another example doctor who has a
really bad reputation because it always hurts right you would choose your model
of trust and go to the good doctor but the good doctor at dr. they play
together goals so we could talk to a trusted that doctor about dr. trust the
good doctor by implication that means just because there's a trust in between
those guys and it's an implemented into your chief you can go to both of them
what I'm saying it's not not trusting I'm saying very fiber for trust and
trust model in the moment was like this you trust all of these opportunities
need to trust each other otherwise I wouldn't work and look at Apple's they
like to keynote long did it take to take it out i three weeks or two weeks until
he took it out of their trust chain I mean the shit out of it all look at look
at Apple you know this is little devices you might hear them a call I think and
they establish a connection to whatever server in the cloud and to some ass
contralateral that the devices control you know who don't have control over
device diluted with owner who paid for it that's not a model of trust me we
should use we should verify or sources and maybe reduce or sources because they
are countries they have something like a Patriot Act III some countries to do
something like the US and by this I company may be entitled or even asked to
publish private information because they are some people became guns and how to
use them and and now we post about it so if you trust goes to a to a comment or
two to a company who works in the government is pressed by the law to give
out information is your trust company yes no no
for the government yes but maybe not for you because I unclipped at all it
doesn't mean it is not but anyway it has your life why do we want our equipment
why do you want to encrypt there's another case so if you want to use your
information to go out why not posting on twitter piston it's much easier but not
but maybe you want to the final but other two but you see where I'm going to
you need to verify who you trust more questions yes you have or maybe you know
where we can find some advice on which says should not be trusted at all like
those that are cheney's so that we don't have to do it by hand
going through hundreds of CA's an hour I'll post some recommendations in the
holes and the notes but also gonna be recommendations because of who I am that
you trust me what I recommend you should actually stick with these guys for
package and you should follow up report a doing a published maybe next year or
so they say on it since 2013 I think he will do a lot of talks about it and you
should stick with those guys on the community likes a community wanna make
programs parenting 101 to the packy does wanna make security better so maybe we
should just stick with those guys and find out what you gonna do question was
a scalable and he said yes so maybe we should check this out I gotta post a
list where smart people that you cannot trustees on thursday saw that and that's
reason
lots you're free to implement or don't implemented just how you feel more
questions so that ladies and gentlemen that's a great audience I think you're
firing me wish you a nice lunch