YoVDO

Examining DES-based Cipher Suite Support within the TLS Ecosystem

Offered By: BSidesLV via YouTube

Tags

Security BSides Courses Cybersecurity Courses Encryption Courses

Course Description

Overview

Explore the prevalence and implications of DES-based cipher suite support in the TLS ecosystem through this insightful conference talk. Delve into the background of DES encryption, understand its significance, and examine where it's still being used. Learn about passive analysis techniques, TLS connections, and DES ciphers. Discover findings from a comprehensive census using automated tools, revealing DES support across top websites and countries. Investigate Triple DES support and specific case studies, such as Canada's DES usage. Analyze the limitations of the study and key diagrams illustrating the ecosystem. Understand the reasons behind continued DES support and learn how to remove it from systems. Examine OpenSSL and browser support for DES, identifying key players still utilizing this outdated encryption method. Conclude with a summary of findings and engage in a Q&A session, with references to the accompanying research paper.

Syllabus

Introduction
Background on DES
Why Care
Where is DES
Passive analysis
TLS connection
DES ciphers
Census
Automator
DES Support
Top Sites
Top Countries
Triple DES Support
Canada DES Support
Limitations
Key Diagram
Why DES
How to remove DES
Open SSL DES support
Browser DES support
Who is supporting DES
Summary
Questions
Paper


Taught by

BSidesLV

Related Courses

Early Detection through Deception
YouTube
Hack for Show, Report for Dough - Brian King
YouTube
Blue Teamin on a Budget of Zero - Kyle Bubp
YouTube
Windows Event Logs - Zero to Hero
YouTube
Weaponizing Splunk - Using Blue Team Tools for Evil
YouTube