Seminar special SI

Prezentare

1. Security protocol checkers:

  • ### Scyther
  • ### Isabelle
  • ### AVISPA
  • ### McMAS

1. Prezentare tool-uri pt verificarea protocoalelor de securitate:

Scyther is a tool for the formal analysis of security protocols under the perfect cryptography assumption, in which it is assumed that all cryptographic functions are perfect: the adversary learns nothing from an encrypted message unless he knows the decryption key.

The tool can be used to find problems that arise from the way the protocol is constructed. This problem is undecidable in general, but in practice many protocols can be either proven correct or attacks can be found.

pg. 7, Scyther manual

2. Lenstra's attack - implementation and protection

Cracking RSA with CRT
Recover RSA private key from public keys - rhme2 Key Server (crypto 200)
rhme.riscure.com/3/news
github.com/Riscure/Rhme-2016
github.com/win0x86/Lab/tree/master/mitm

More links:

TOOLS Tutorial SPAN+AVISPA - https://www.youtube.com/watch?v=YvgHw5pr5bA Avispa-EKE protocol tutorial - https://www.youtube.com/watch?v=uAU-pFOIWW8 AVISPA Tutorial PART -1 - https://www.youtube.com/watch?v=sGeZcRmLyFI Enhancement of the Authentication and Key Agreement Protocol in 4G Mobile Networks - https://www.youtube.com/watch?v=JlOK6LeZ9oM

Scyther install

sudo pip3 install wxpython

sudo pip3 install \ -f https://extras.wxpython.org/wxPython4/extras/linux/gtk3/ubuntu-16.04 \ WxPython

sudo pip3 install \ -f https://extras.wxpython.org/wxPython4/extras/linux/gtk3/ubuntu-14.04/ \ wxPython

sudo apt-get install gtk2.0
sudo apt-get install gtk3.0

https://wxpython.org/pages/downloads/index.html

http://seclab.stanford.edu/pcl/mc/mc.html