Slide 1

Slide 1 text

Secure Networking Bolot Kerimbaev, Big Nerd Ranch

Slide 2

Slide 2 text

No content

Slide 3

Slide 3 text

History

Slide 4

Slide 4 text

Caesar Cipher https://en.wikipedia.org/wiki/Caesar_cipher En(x) = (x + n) mod 26 Dn(x) = (x - n) mod 26

Slide 5

Slide 5 text

Four Square https://en.wikipedia.org/wiki/Four-square_cipher a b c d e E X A M P f g h i j L B C D F k l m n o G H I J K p r s t u N O R S T v w x y z U V W Y Z K E Y W O a b c d e R D A B C f g h i j F G H I J k l m n o L M N P S p r s t u T U V X Z v w x y z Plaintext: he lp me ob iw an ke no bi Ciphertext: FY GM KY HO BX MF KK KI MD

Slide 6

Slide 6 text

Substitution

Slide 7

Slide 7 text

https://en.wikipedia.org/wiki/Scytale

Slide 8

Slide 8 text

Transposition | | | | | | | | I | a | m | h | u | | __| r | t | v | e | r |__| | | y | b | a | d | l | | | y | H | E | L | P | | | | | | | | IryyatbHmvaEhedLurlP I am hurt very badly HELP

Slide 9

Slide 9 text

No content

Slide 10

Slide 10 text

https://en.wikipedia.org/wiki/al-Khwarizmi https://en.wikipedia.org/wiki/Al-Kindi

Slide 11

Slide 11 text

https://en.wikipedia.org/wiki/Coffee

Slide 12

Slide 12 text

Mechanized https://en.wikipedia.org/wiki/Jefferson_disk https://en.wikipedia.org/wiki/Cipher_disk

Slide 13

Slide 13 text

Polyalphabetic https://en.wikipedia.org/wiki/Vigenère_cipher Key: ABCDABCDABCDABCDABCDABCDABCD Plaintext: CRYPTOISSHORTFORCRYPTOGRAPHY Ciphertext: CSASTPKVSIQUTGQUCSASTPIUAQJB

Slide 14

Slide 14 text

No content

Slide 15

Slide 15 text

No content

Slide 16

Slide 16 text

Enigmatic https://en.wikipedia.org/wiki/C-36_(cipher_machine) https://en.wikipedia.org/wiki/CD-57 https://en.wikipedia.org/wiki/Kryha https://en.wikipedia.org/wiki/M-209 https://en.wikipedia.org/wiki/Enigma_machine

Slide 17

Slide 17 text

Padding https://en.wikipedia.org/wiki/The_world_wonders TURKEY TROTS TO WATER GG FROM CINCPAC ACTION COM THIRD FLEET INFO COMINCH CTF SEVENTY-SEVEN X WHERE IS RPT WHERE IS TASK FORCE THIRTY FOUR RR THE WORLD WONDERS DEAR SIR, THIS IS A SECRET MESSAGE YOURS SINCERELY

Slide 18

Slide 18 text

No content

Slide 19

Slide 19 text

Diffie Hellman Key Exchange Alice Bob Beyonce Beatrice Bruce

Slide 20

Slide 20 text

Public Key Cryptography https://en.wikipedia.org/wiki/Diffie–Hellman_key_exchange

Slide 21

Slide 21 text

RSA https://en.wikipedia.org/wiki/RSA_(cryptosystem) https://ivokoller.com/rsa-part-3/ c ≡ me (mod n) cd ≡ (me)d ≡ m (mod n) n = pq d * e ≡ 1 (mod n) n, d – private key n, e – public key d = (k * ɸ(n) + 1)/e

Slide 22

Slide 22 text

RSA n = 161,521,746,670,640,296,426,473,658,228,859,984, 306,663,144,318,152,681,524,054,709,078,245,736,590, 366,297,248,377,298,082,656,939,330,673,286,493,230, 336,261,991,466,938,596,691,073,112,968,626,710,792, 148,904,239,628,873,374,506,302,653,492,009,810,626, 437,582,587,089,465,395,941,375,496,004,739,918,498, 276,676,334,238,241,465,498,030,036,586,063,929,902, 368,192,004,233,172,032,080,188,726,965,600,617,167 http://jensign.com/JavaScience/dotnet/CSPPrimes/index.html p = 13,144,131,834,269,512,219,260,941,993,714,669,605, 006,625,743,172,006,030,529,504,645,527,800,951,523, 697,620,149,903,055,663,251,854,220,067,020,503,783, 524,785,523,675,819,158,836,547,734,770,656,069,477 q = 12,288,506,286,091,804,108,262,645,407,658,709,962, 803,358,186,316,309,871,205,769,703,371,233,115,856, 772,658,236,824,631,092,740,403,057,127,271,928,820, 363,983,819,544,292,950,195,585,905,303,695,015,971 FA F7 2D 97 66 5C 47 66 B9 BB 3C 33 75 CC 54 E0 71 12 1F 90 B4 AA 94 4C B8 8E 4B EE 64 F9 D3 F8 71 DF B9 A7 05 55 DF CE 39 19 3D 1B EB D5 FA 63 01 52 2E 01 7B 05 33 5F F5 81 6A F9 C8 65 C7 65 EA A0 F7 B0 11 D8 58 BC 1F E7 D9 EA E6 2B E3 68 48 39 7A 0C 16 5D E3 58 95 DB B7 CB E8 F0 24 B4 65 62 5A EB 28 08 79 0A 30 53 18 C5 36 35 DC 5C F6 66 77 44 F2 B4 BA 46 CF 30 0A DF 05 AE 40 23 E6 03 BC F9 FA 9B 40 5C D8 51 AC 0A 3D 33 F9 12 0C 89 57 E7 98 25 C2 A5 BD AE 35 00 0C 5E 6B 1D 30 21 62 20 0D D3 56 59 C2 AE 13 8E FF 1E 6B B3 94 A7 45 F0 F8 71 B8 AF 86 13 71 10 6F A0 DB 08 7C 74 AC 64 DF 7C 8B 41 F3 36 3F 7A 79 1D 83 3D 68 02 90 52 3F C7 4D 0B 99 26 07 44 68 1B FE 8C C7 0B 67 7D 15 D1 54 6A 34 F2 F4 D3 61 A4 3F ED 28 55 52 39 47 14 20 E4 1A 82 E7 4D 57 69 82 CF

Slide 23

Slide 23 text

RSA d = 41,898,007,131,862,688,851,336,682,940,790, 999,484,463,332,978,448,747,820,451,501,508,005,821, 475,444,818,243,471,841,362,973,098,686,565,541,150, 570,146,885,787,493,140,609,789,099,942,329,777,897, 729,009,552,119,041,834,459,756,156,737,774,704,660, 390,263,044,954,441,300,965,889,554,289,955,246,646, 459,293,357,418,064,290,859,538,858,002,497,217,075, 149,520,884,160,660,726,287,315,820,627,693,535,591 e = 65537

Slide 24

Slide 24 text

AES https://en.wikipedia.org/wiki/Advanced_Encryption_Standard http://www.moserware.com/2009/09/stick-figure-guide-to-advanced.html Big idea #1: Confusion Big idea #2: Diffusion Big idea #3: Secrecy only in the key

Slide 25

Slide 25 text

Cryptanalysis • Faulty key generation • Random number generator • Timing attacks • Adaptive chosen cipher text attacks • Side-channel analysis attacks

Slide 26

Slide 26 text

ECB CBC CTR

Slide 27

Slide 27 text

Block Cipher Uses • Stream ciphers • Cryptographic hash functions • Cryptographically secure PRNG • Message authentication codes • Authenticated encryption

Slide 28

Slide 28 text

Hash https://en.wikipedia.org/wiki/Cryptographic_hash_function https://en.wikipedia.org/wiki/SHA-1

Slide 29

Slide 29 text

OTP vs ITP https://en.wikipedia.org/wiki/Gilbert_Vernam + = https://en.wikipedia.org/wiki/One-time_pad

Slide 30

Slide 30 text

TCP/IP

Slide 31

Slide 31 text

TCP/IP Stack Application Presentation Session Transport Network Datalink Physical HTTP, IRC, FTP, TFTP, SSH, Telnet, SMTP, POP, IMAP, SNMP NFS XDR RPC TCP, UDP IP / ICMP ARP, RARP, Ethernet CAT5 https://en.wikipedia.org/wiki/Internet_protocol_suite

Slide 32

Slide 32 text

Data Encapsulation Frame Header IP Header TCP Header Data Frame Footer Application Transport Internet Link IP Header TCP Header Data TCP Header Data Data https://en.wikipedia.org/wiki/Internet_protocol_suite

Slide 33

Slide 33 text

TCP Connection https://en.wikipedia.org/wiki/Transmission_Control_Protocol

Slide 34

Slide 34 text

TLS

Slide 35

Slide 35 text

Certificate

Slide 36

Slide 36 text

PKI

Slide 37

Slide 37 text

TLS Handshake https://blog.cloudflare.com/keyless-ssl-the-nitty-gritty-technical-details/

Slide 38

Slide 38 text

Wireshark

Slide 39

Slide 39 text

TLS Versions https://en.wikipedia.org/wiki/Transport_Layer_Security

Slide 40

Slide 40 text

Attacks on TLS https://en.wikipedia.org/wiki/Transport_Layer_Security

Slide 41

Slide 41 text

okhttp

Slide 42

Slide 42 text

okhttp

Slide 43

Slide 43 text

OWASP

Slide 44

Slide 44 text

Questions? • @bolot • @bignerdranch • BNR Android Security Course – coming soon