About this episode
We bring on Nate Lawson of Root Labs to talk about a little bit of everything, starting with cryptography in the 1990s.
Transcript:
https://securitycryptographywhatever.com/2022/09/09/nate-lawson-part-1/
References
- IBM S/390: https://ieeexplore.ieee.org/document/5389176
- SSLv2 Spec: https://www-archive.mozilla.org/projects/security/pki/nss/ssl/draft02.html
- Xbox 360 HMAC: https://beta.ivc.no/wiki/index.php/Xbox_360_Timing_Attack
- Google Keyczar HMAC bug (reported by Nate): https://rdist.root.org/2009/05/28/timing-attack-in-google-keyczar-library/
Errata
- HMAC actually published in 1996, not 1997
- "That was one of the first, I think hardware applications of DPA was, was, um, satellite TV cards." Not true, they first were able to break Mondex, a MasterCard smart card
"Security Cryptography Whatever" is hosted by Deirdre Connolly (@durumcrustulum), Thomas Ptacek (@tqbf), and David Adrian (@davidcadrian)
Get every episode summarized
Each time Security Cryptography Whatever publishes, we email you a written briefing from the transcript — the topics, who appeared, and any specific claims, with the ad reads skipped.
Email me new episodesFree for 3 shows. No card needed.
Hosts & guests
No transcript yet
This episode has not been transcribed. Request it and it moves to the front of the queue.
More episodes
More from Security Cryptography Whatever
Standardizing Pure PQC
Security Cryptography Whatever
Python Cryptography Breaks Up with OpenSSL with Paul Kehrer and Alex Gaynor
Security Cryptography Whatever
The IACR Can't Decrypt with Matt Bernhard
Security Cryptography Whatever
Apple’s Memory Integrity Enforcement
Security Cryptography Whatever