YoVDO

Examining DES-based Cipher Suite Support within the TLS Ecosystem

Offered By: BSidesLV via YouTube

Tags

Security BSides Courses Cybersecurity Courses Encryption Courses

Course Description

Overview

Explore the prevalence and implications of DES-based cipher suite support in the TLS ecosystem through this insightful conference talk. Delve into the background of DES encryption, understand its significance, and examine where it's still being used. Learn about passive analysis techniques, TLS connections, and DES ciphers. Discover findings from a comprehensive census using automated tools, revealing DES support across top websites and countries. Investigate Triple DES support and specific case studies, such as Canada's DES usage. Analyze the limitations of the study and key diagrams illustrating the ecosystem. Understand the reasons behind continued DES support and learn how to remove it from systems. Examine OpenSSL and browser support for DES, identifying key players still utilizing this outdated encryption method. Conclude with a summary of findings and engage in a Q&A session, with references to the accompanying research paper.

Syllabus

Introduction
Background on DES
Why Care
Where is DES
Passive analysis
TLS connection
DES ciphers
Census
Automator
DES Support
Top Sites
Top Countries
Triple DES Support
Canada DES Support
Limitations
Key Diagram
Why DES
How to remove DES
Open SSL DES support
Browser DES support
Who is supporting DES
Summary
Questions
Paper


Taught by

BSidesLV

Related Courses

Computer Security
Stanford University via Coursera
Cryptography II
Stanford University via Coursera
Malicious Software and its Underground Economy: Two Sides to Every Story
University of London International Programmes via Coursera
Building an Information Risk Management Toolkit
University of Washington via Coursera
Introduction to Cybersecurity
National Cybersecurity Institute at Excelsior College via Canvas Network