Post

Keyboards, browsers, analytics, ads, device data, etc— all fucked #realworldcrypto

These look like fun CTFs #realworldcrypto

"I can't sleep, knowing what I've seen" #realworldcrypto

#realworldcrypto

#realworldcrypto

lol wtf #realworldcrypto

😭 #realworldcrypto

#realworldcrypto

None of the schemes tried to provide cryptographic integrity or authenticity, except for MMTLS #realworldcrypto

#realworldcrypto

Are these backdoors?????? (No) #realworldcrypto

So, why? #realworldcrypto

#realworldcrypto

#realworldcrypto

Next up, 'Lessons Learned from Cryptography Shortcuts on the Example of TLS Session Tickets', presented by Sven Hebrok #realworldcrypto

TLS session resumption with tickets #realworldcrypto

Active impersonation of resumption possible in TLS 1.2 and 1.3 #realworldcrypto

Attacks were known in theory, many implementations vulnerable after years #realworldcrypto

Vulns happened due to API design and changes over time, easy to misuse #realworldcrypto

Protocol design: session ticket encryption key is freely chosen by the server, not auditable; all other keys in TLS are either asymmetric crypto or derived via a KDF from the key exchange #realworldcrypto

tickets, please #realworldcrypto

That was the last talk! #realworldcrypto

Real World Crypto 2027 will be in Seattle! Hosted at Amazon's Meeting Center #realworldcrypto