34C3 - Squeezing a key through a carry bit

Title:: 34C3 - Squeezing a key through a carry bit
Description:: https://media.ccc.de/c/34c3/34c3-9021-squeezing_a_key_through_a_carry_bit

The Go implementation of the P-256 elliptic curve had a small bug due to a misplaced carry bit affecting less than 0.00000003% of field subtraction operations. We show how to build a full practical key recovery attack on top of it, capable of targeting JSON Web Encryption.

Filippo Valsorda

https://fahrplan.events.ccc.de/congress/2017/Fahrplan/events/9021.html

more » « less
Video Language:: English
Duration:: 50:02

	C3Subtitles edited English subtitles for 34C3 - Squeezing a key through a carry bit
	C3Subtitles edited English subtitles for 34C3 - Squeezing a key through a carry bit
	Bar Sch edited English subtitles for 34C3 - Squeezing a key through a carry bit
	Bar Sch edited English subtitles for 34C3 - Squeezing a key through a carry bit
	Bar Sch edited English subtitles for 34C3 - Squeezing a key through a carry bit
	harryfuchs edited English subtitles for 34C3 - Squeezing a key through a carry bit
	apo edited English subtitles for 34C3 - Squeezing a key through a carry bit
	Maximilian Marx edited English subtitles for 34C3 - Squeezing a key through a carry bit