Learn Generative AI, Prompt Engineering, and LLMs for Free
You’re only 3 weeks away from a new language
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
Explore a comprehensive analysis of Password Recovery Attacks against SRP Implementations in the Wild in this 29-minute conference talk from the Workshop on Attacks in Cryptography 2021. Delve into the intricacies of Password-Authenticated Key Exchange (PAKE) protocols, focusing on the Secure Remote Password (SRP) protocol. Examine the FLUSH+RELOAD technique, modular exponentiation in OpenSSL, and optimized square-and-multiply algorithms. Understand the attacker model, classical workflow, trace acquisition, and interpretation methods. Discover the impact on various projects and programming languages, and learn about potential mitigations and the patching process for enhanced security.
Syllabus
Intro
A Few Words About PAKES
Why Looking at PAKES?
What about SRP?
SRP Protocol Overview
Contributions
FLUSH+RELOAD
Our Main Result
Modular exponentiation in OpenSSL
Optimized Square-and-Multiply
Attacker Model
Classical Workflow
Trace Acquisition
Trace Interpretation
Dictionary Attack
Single Measurement Attack
Impacted Projects
Impacted Languages
Mitigations
Patching process
Conclusion
Taught by
TheIACR