Practical Crypto Attacks Against Web Applications

Explore practical cryptographic attacks against web applications in this Security BSides London conference talk. Delve into the fundamentals of encryption modes, including ECB and CBC, and learn about block swapping techniques. Witness a live demonstration of exploiting vulnerabilities, and gain insights into padding oracles, their effects, and the concept of padding. Discover the intricacies of flipping attacks, error handling, and the implications of signed data in cryptographic systems. Enhance your understanding of web application security through real-world examples and expert analysis.

Intro
Overview
The Basics
ECB Mode
Swapping Blocks
Live Example
CBC Mode
Padding Oracle
What is padding
Flipping
Errors
Oracle effect
Signed