Skip to content
Hallway
0:00 / 0:00

#rsa#paddingoracle#bleichenbacher

Fuck RSA @ SummerCon 2019

trailofbits

3.2K subscribers • 1 video on Hallway

YouTube
  • Recommended by 1 person: 1 on Lobsters.
  • Presented by Ben Perez, Security Engineer at Trail of Bits
  • An opinion. It argues one side of a question engineers disagree on.

Intermediate. Assumes working knowledge.

18K views7 years ago1 recommendation

SecuritySoftware designCryptographyWeb and application security

Ben Perez argues that RSA is too fragile and prone to implementation errors, advocating for modern alternatives instead.

RSA no longer sparks joy. It is an intrinsically fragile crypto system containing countless foot-guns which the average software engineer cannot be expected to avoid. Bad parameters are extremely difficult - if not impossible - to check, and its relatively poor performance encourages developers to take risky shortcuts. Even worse, padding oracle attacks remain rampant 20 years after Bleichenbacher's seminal paper. Folks, it's time to accept it - the only way to securely use RSA is to not use it at all. Ben Perez is a Security Engineer at Trail of Bits

Why it's here

1 person recommends this

What people say. Recommended as a compelling and entertaining argument against using RSA in modern software systems.