Crypto For the Masses_

Transcript

1. BRINGING
   CRYPTO
   TO THE MASSES_
2. H E AD AC HE ? http://www.moserware.com/2009/09/stick-figure-guide-to-advanced.html
6. CRYPTOGRAPHY
7. THE UNKNOWN SCARES US
8. COMPLICATED SCARES US
9. FAILURE
10. FUCKING
11. SCARES US
12. This
    TERRIFIED
    Me // my second program in C++! ! #include <iostream>! ! using namespace std;! ! int main ()! {! cout << "Hello World! ";! cout << "I'm a C++ program";! return 0;! }!
13. IF I WAS WRONG THIS WOULD HAPPEN
14. Secretly I st i l l f e e l th at way
16. D E S SCARY WITHOUT CONTEXT T W O F I S H I D E A A E S
17. BLACK MAGIC
18. THIS IS A NORMAL RESPONSE
19. BUT WE DON’T HAVE THE LUXURY TO STAY IGNORANT
20. NSA PRISM BULLRUN
21. THEY ARE ONLY THE BIGGEST WORRY
22. KLEPTOGRAPHY CREATING SECURITY ! IN NAME ONLY
23. I THOUGH WE COULD ALL SHARE AN SSH KEY ISN’T DES INDUSTRY STANDARD
24. WE ARE PROGRAMMERS
25. WE STRIVE TO LEARN WE STRIVE TO UNDERSTAND WE STRIVE TO BUILD
26. WE CAN’T HIDE FROM CRYPTOGRAPHY
27. CRYPTOGRAPHY ≠ SECURITY
28. CRYTPOGRAPHY ≠ NON-REPUDIATION AUTHENTICATION AUTHORIZATION
29. T O O
 
 M
 U
 C
 H J
 A
 R
 G
 O
 N
30. CRYPTOGRAPHY 
 KEEPING INFORMATION SECRET
 TILL IT’S NO LONGER OF USE TO ADVERSARIES
31. YOU ARE THE WEAKEST LINK
32. BECAUSE CRYPTOGRAPHY JOKE ASSOCIATION REQUIRES IT
33. CRYPTOGRAPHY ≠ SUPERPOWERS
34. CRYPTOGRAPHY ≠ ENCRYPTION
35. PART OF CRYPTOGRAPHY
36. PART OF CRYPTOGRAPHY ENCRYPTION
37. PART OF CRYPTOGRAPHY ENCRYPTION ONE WAY HASHES
38. PART OF CRYPTOGRAPHY ENCRYPTION ONE WAY HASHES KEY EXCHANGES
39. PART OF CRYPTOGRAPHY ENCRYPTION ONE WAY HASHES KEY EXCHANGES DIGITAL SIGNATURES
40. ALL ENCRYPTION WORKS ON T W O PRINCIPLES
41. ALL ENCRYPTION WORKS ON T W O PRINCIPLES CONFUSION MY HAT IS AWESOME ZL UNG VF NJRFBZR MILTARY GRAD ROT13
42. ALL ENCRYPTION WORKS ON T W O PRINCIPLES DIFFUSION M Y H A T I S A W E S O M E MTWM YIEE HSS AAO COLUMN TRANSPOSITION
43. ALGORITHMS USE THESE TWO PRINCIPALS TO EFFICIENTLY CHANGE THE OUTPUT DRAMATICALLY 
 WITH LITTLE CHANGE TO THE INPUT AVALANCHE EFFECT MY HAT IS AWESOME YOUR HAT IS OK WAIT NO, I’M SORRY DON’T SHOOT YOUR HAT IS AWESOME U2FsdGVkX1+hE1zfHfxcMSOwrgW1lX +HA8zPDV7+8ZGwB2fmqyAjRVkp1QrQajJ7 U2FsdGVkX19JtdyxoZKImk56v6/ ku9ym2JBgA7ruLM44tqyuOLlaHS12bqIVCF6V U2FsdGVkX1+8HaOoyYBI3FIhT42gZbz V4ftxt329JK2rfTQuqsd6ZuS9GL+Yo8Su U2FsdGVkX188HuKoReR750+RF/fNup5T1OpHkRttVsp WBFYfQgi2WVW5xsKH9CS2nh6TwfHuiCyf6O5HtjHsAA==
44. HOW DOES THIS ALL PLAY OUT DIGITALLY
45. IT’S FULL OF BINARY 01100110 01110101 01100011 01101011
46. CIPHER OUTPUTS BASE64 OR HEX U2FsdGVkX188HuKoReR750 +RF/fNup5T1OpHkRttVsp WBFYfQgi2WVW5xsKH9CS2nh6T wfHuiCyf6O5HtjHsAA== 00105e0 e6b0 343b 9c74 0804 e7bc 0804 e7d5 0804 SAFER FOR TRANSPORTATING OVER THE WIRE
47. ALGORITHM NO LONGER NEEDS TO BE KEPT SECRET JUST THE KEY
48. KEY DEFINES THE CIPHER OUTPUT ALONG WITH THE ALGORITHM GENERATED RANDOMLY MUST BE KEPT SECRET
49. KEYSPACE Number of possible keys 128 OR 256 BYTES USUAL SPECIFIED 80 BYTES CONSIDERED SECURE
50. APPROXIMATES PROPERTIES OF RANDOMIZED NUMBER STRINGS COMPUTERS ARE NOT TRUELY RANDOM PRNG - PSEUDORANDOM NUMBER GENERATOR
51. XOR IS THE CAESER CIPHER OF THE DIGITAL WORLD 0 0 0 0 0 0 0 0 1 1 1 1 1 1 A A b b
52. CRYPTO <3 XOR JUST NOT ON IT’S OWN
53. BLOCK CIPHERS ONE OF THE SIMPLEST
 METHODS FOR ENCRYPTING BULK DATA 
 VIA AN ALGORITHM USING
 A SYMMETRICAL KEY ECB KEY CIPHER PLAINTEXT
54. BLOCK CIPHERS CAN HAVE MANY MODES
 COMMON ONES FOR DES / AES
 ECB & CBC ECB KEY CIPHER PLAINTEXT
55. ECB MODE NOT SO RANDOM
56. MOAR RANDOMNESS NEEDED!
57. IV - INITIALIZATION VECTOR ADD ADDITIONAL RANDOMNESS TO CIPHER OUTPUT
58. CBC MODE CIPHER BLOCK CHAINING CBC KEY CIPHER PLAINTEXT CBC KEY CIPHER PLAINTEXT IV + +
59. CBC MODE NOT TRUELY RANDOM BUT
 CLOSE ENOUGH
60. MY HAT IS AWESOME
61. CRYPTOGRAPHY AND JAVASCRIPT THERE IS MUCH DEBATE http://www.matasano.com/articles/ javascript-cryptography/
62. THE PREVALENCE OF CONTENT CONTROLLED CODE
63. THE MALLEABILITY OF JAVASCRIPT RUNTIME
64. THE LACK OF NEEDED PRIMITIVES
65. THE CRUSHING WEIGHT OF OLDER BROWSERS
66. MATASANO ARE MOST WORRIED ABOUT A MAN IN THE MIDDLE ATTACK AND THINK THAT SSL IS GOOD ENOUGH
67. BULLSHIT
68. SSL IS PROTECTION FROM OTHER PEOPLE ON THE WIRE CRYPTOGRAPHY IS PROTECTION FOR YOU ON THE WIRE

69. WHY SHOULD YOU TRUST ME TO STORE YOUR DATA WITHOUT READING IT
70. CRYPTOGRAPHERS HAVE ISSUES GIVING CONSTRUCTIVE CRITICISM http://tobtu.com/ decryptocat-old.php
71. WE NEED TO STOP BEING SCARED OF CRYPTOGRAPHY
72. IT’S NOT THAT SCARY
73. IF YOU WANT TO LEARN MORE BUY THIS BOOK
74. MATASANO CRYPTO CHALLENGE http://www.matasano.com/articles/crypto-challenges/ 48 PROBLEMS TO GET BETTER AT CRYPTO WITH
75. HOPEFULLY YOU 
 GET THIS JOKE
 NOW
76. I’M MATTHEW BERGMAN MY HAT IS AWESOME! @ F O T O V E R I T E AND REMEMBER