Examining DES-based Cipher Suite Support within the TLS Ecosystem
Offered By: BSidesLV via YouTube
Course Description
Overview
Explore the prevalence and implications of DES-based cipher suite support in the TLS ecosystem through this insightful conference talk. Delve into the background of DES encryption, understand its significance, and examine where it's still being used. Learn about passive analysis techniques, TLS connections, and DES ciphers. Discover findings from a comprehensive census using automated tools, revealing DES support across top websites and countries. Investigate Triple DES support and specific case studies, such as Canada's DES usage. Analyze the limitations of the study and key diagrams illustrating the ecosystem. Understand the reasons behind continued DES support and learn how to remove it from systems. Examine OpenSSL and browser support for DES, identifying key players still utilizing this outdated encryption method. Conclude with a summary of findings and engage in a Q&A session, with references to the accompanying research paper.
Syllabus
Introduction
Background on DES
Why Care
Where is DES
Passive analysis
TLS connection
DES ciphers
Census
Automator
DES Support
Top Sites
Top Countries
Triple DES Support
Canada DES Support
Limitations
Key Diagram
Why DES
How to remove DES
Open SSL DES support
Browser DES support
Who is supporting DES
Summary
Questions
Paper
Taught by
BSidesLV
Related Courses
Early Detection through DeceptionYouTube Hack for Show, Report for Dough - Brian King
YouTube Blue Teamin on a Budget of Zero - Kyle Bubp
YouTube Windows Event Logs - Zero to Hero
YouTube Weaponizing Splunk - Using Blue Team Tools for Evil
YouTube