[Security] Practical attacks on web application crypto

December 27, 2011 - 15:32 UTC   -   Tags: security padding oracle hashing HackPra (@HackPra) was kind enough to invite me to do a talk. On the 7th of December I heald a talk called "Attacks on web application crypto".

The talk covered attacks on hashes (including length extension attacks on MD5 signatures), Padding oracle attacks and BEAST. I used some javascript demos to explain the different topics.

Here are some resources from the talk:

• Video of the presentation
• HTML5 slideset
• Java code for MD5/SHA1/SHA256 length extension

Many thanks to Mario Heiderich and Markus Niemietz for inviting me. I also enjoyed spending the rest of the evening at G-Data and meeting all the people there.