filmov
tv
Playback: A TLS 1.3 Story

Показать описание
This talk will describe the technical details regarding the TLS 1.3 0-RTT feature and its associated risks. It will include Proof of Concepts (PoC) showing real-world replay attacks against TLS 1.3 libraries and browsers. Finally, potential solutions or mitigation controls would be discussed that will help to prevent those attacks when deploying software using a library with TLS 1.3 support.
By Alejo Murillo + Alfonso Garcia Alguacil
By Alejo Murillo + Alfonso Garcia Alguacil
DEF CON 26 - Alfonso Alguacil and Murillo Moya - Playback a TLS 1 point 3 story
Playback A TLS 1 3 Story
Playback: A TLS 1.3 Story
Playback A TLS 1 3 Story
Playback: a TLS 1.3 story
DEF CON 26 - Alguacil and Murillo Moya - Playback a TLS 1 point 3 story
TLS 1 3 Advantages wolfSSL
Implementing and Proving the TLS 1 3 Record Layer
Explaining TLS 1.3
TLS 1.3 and Di-section of TLS 1.3 protocol
Decryption In Action: TLS 1.3
The Advantages of Using TLS 1.3 2019
'TLSv1.3 from scratch' - Joel Sing (LCA 2021 Online)
Automated Analysis and Verification of TLS 1.3: 0-RTT, Resumption and Delayed Authentication
APPSEC Cali 2018 - What's New in TLS 1.3
TIL about Data Encryption: Diffie-Hellman Key Exchanges + TLS 1.3
Advantages of TLS 1.3
Key Confirmation in Key Exchange: A Formal Treatment and Implications for TLS 1.3
On the Security of TLS 1.3 and QUIC Against Weakness in PKCS#1 v1.5 Encryption - Tibor Jager
The DROWN Attack (33c3)
Verified Models and Reference Implementations for the TLS 1.3 Standard Candidate
When TLS Hacks You
RuhrSec 2017: '0-RTT Key Exchange with Full Forward Secrecy', Prof. Dr. Tibor Jager
Decryption In Action: Decrypted visibility with Wireshark for TLS 1.3 and TLS 1.2 with PFS and ECDHE
Комментарии