Identification: SC22105
Credits: None available.
Getting cryptography right is difficult. Unfortunately, smart professionals often create terrible cryptographic systems. This engaging session will provide failure modes of cryptography and the real reasons crypto systems fail. Algorithms will be harmed, mathematicians may be angered and pragmatists will be exonerated. This is not your Daddy's crypto. We will present case studies on commercial hash and database systems we broke, how commercial cryptosystems failed to consider environmental concerns (and violated Schneier's Law), help the participants recognized cryptographic snake oil and provide pragmatic steps to ensure your next crypto project is secure and successful. Bonus materials on hacking commercial cipher systems will be provided to participants, with a Q&A session.