Learn how the good guys implement cryptography and how the bad guys exploit it.
Everything we do in the digital world is protected by cryptography. But when pure math and algorithms are implemented in code, vulnerabilities emerge and can be exploited by hackers and bad actors. Hacking Cryptography details dozens of practical cryptographic implementations and then breaks down the flaws that adversaries use to exploit them.
In Hacking Cryptography you’ll find unique guidance for understanding how cryptography has failed time and again, including:
• DUAL_EC_DRBG random number generation using backdoored constants
• Exploiting the RC4 stream cipher, as used in WEP
• Block ciphers for padding oracle attacks and manipulation of initialization-vectors
• Exploiting hash functions by using length extension and rainbow table attacks
• Implementing RSA key generation vulnerable to short private exponents and exploiting it using the Weiner attack
• Exploiting PKCS1.5 padding by using Bleichenbacher's signature-forgery attack
In Hacking Cryptography you’ll learn the common attack principles used against cryptographic security, and how to spot the implementation errors that make cryptography unsecure. Throughout, you’ll explore historical examples where popular cryptography has failed, such as the root key compromise for Sony PlayStation 3, and see what impact those failures have had on modern cryptography.
Purchase of the print book includes a free eBook in PDF and ePub formats from Manning Publications.
About the technology
Even the strongest cryptographic systems in code and hardware leave cracks and vulnerabilities a would-be attacker can exploit. In this book, you’ll learn to write cryptographically secure code, sidestep common pitfalls, and assess new bugs and vulnerabilities as they are discovered.
About the book
Hacking Cryptography helps you secure your systems by revealing the “lockpicks” bad actors use to break cryptographic security. It dives deep into each exploit, explaining complex concepts through real-world analogies, annotated examples, and pseudo-code—no advanced mathematical knowledge required. As you read, authors Kamran Khan and Bill Cox demystify opaque cryptography concepts and techniques so you’ll understand the “why” behind each best practice.
What's inside
• Random number generator and backdoor constants
• RC4 encryption and WiFi security
• Rainbow tables for cracking hashed passwords
• Length extension and padding oracle exploits
About the reader
For software and security engineers. Examples in Go.
About the author
Kamran Khan is a software engineer with more than a decade of experience at Salesforce, Google, and Microsoft. Bill Cox is a software engineer with nearly forty years of experience in securing hardware and software. He conducts the crypto-writing workshop at Google.
Table of Contents
1 Introduction
2 Random number generators
3 Implementing and exploiting RNGs
4 Stream ciphers
5 Block ciphers
6 Hash functions
7 Message authentication codes
8 Public-key cryptography
9 Digital signatures
10 Guidelines and common pitfalls for cryptographic implementations
Le informazioni nella sezione "Riassunto" possono far riferimento a edizioni diverse di questo titolo.
Kamran Khan is a software engineer with more than a decade of experience in the security industry. He currently works as a Software Engineering Architect at Salesforce, and his previous roles have included Google and Microsoft. He has worked in a variety of areas related to security engineering, including large-scale distributed services, embedded devices intended for multi-factor authentication, and cryptographically verifiable elections.
Bill Cox is a software engineer with nearly forty years of experience in securing hardware and software. He conducts the crypto-writing workshop at Google and loves teaching engineers the fundamentals of writing secure code.
Le informazioni nella sezione "Su questo libro" possono far riferimento a edizioni diverse di questo titolo.
Da: savehere619, San Diego, CA, U.S.A.
Condizione: good. Codice articolo SHM.5WIN
Quantità: 1 disponibili
Da: Gulf Coast Books, Cypress, TX, U.S.A.
paperback. Condizione: New. Codice articolo 1633439747-11-36316034
Quantità: 1 disponibili
Da: INDOO, Avenel, NJ, U.S.A.
Condizione: As New. Unread copy in mint condition. Codice articolo SS9781633439740
Quantità: Più di 20 disponibili
Da: INDOO, Avenel, NJ, U.S.A.
Condizione: New. Brand New. Codice articolo 9781633439740
Quantità: Più di 20 disponibili
Da: GreatBookPrices, Columbia, MD, U.S.A.
Condizione: New. Codice articolo 49209106-n
Quantità: 1 disponibili
Da: Rarewaves USA, OSWEGO, IL, U.S.A.
Hardback. Condizione: New. Learn how the good guys implement cryptography and how the bad guys exploit it. In Hacking Cryptography you'll find unique guidance for creating strong cryptography that can withstand attempts to exploit it including: DUAL_EC_DRBG random number generator using Go's elliptic curve libraryExploiting the RC4 stream cipher, as used in WEPBlock ciphers for padding oracle attacks and manipulation of initialization-vectorsExploiting hash functions by using extension and rainbow table attacksImplementing RSA key generation using the Miller-Rabin primality test and exploiting it using the Weiner attackExploiting PKCS1.5 padding by using Bleichenbacher's chosen-ciphertext attackImplementing Diffie-Hellman Key Exchange and breaking it using a MITM parameter injection attack Theoretically strong cryptography often becomes vulnerable to exploitation as soon as it's built into real applications and networks. Hacking Cryptography details dozens of practical cryptographic implementations and then breaks down the flaws that adversaries use to exploit them. You'll learn just what it takes to write cryptographically secure code, build an intuition for spotting potential vulnerabilities, and master techniques to avoid the pitfalls that leave your systems at risk. About the technology: Everything we do in the digital world is protected by cryptography. It is the final and most reliable defense of our data, and it is often impossible to break in its pure mathematical form. Unfortunately, life is different outside the lab. Implementing cryptography in code and hardware is never perfect, and any crack is an invitation for a would-be attacker's exploitation. Codice articolo LU-9781633439740
Quantità: 10 disponibili
Da: PBShop.store US, Wood Dale, IL, U.S.A.
HRD. Condizione: New. New Book. Shipped from UK. Established seller since 2000. Codice articolo PB-9781633439740
Quantità: 15 disponibili
Da: GreatBookPrices, Columbia, MD, U.S.A.
Condizione: As New. Unread book in perfect condition. Codice articolo 49209106
Quantità: 1 disponibili
Da: PBShop.store UK, Fairford, GLOS, Regno Unito
HRD. Condizione: New. New Book. Shipped from UK. Established seller since 2000. Codice articolo PB-9781633439740
Quantità: 15 disponibili
Da: Grand Eagle Retail, Bensenville, IL, U.S.A.
Hardcover. Condizione: new. Hardcover. Learn how the good guys implement cryptography and how the bad guys exploit it. In Hacking Cryptography you'll find unique guidance for creating strong cryptography that can withstand attempts to exploit it including: DUAL_EC_DRBG random number generator using Go's elliptic curve libraryExploiting the RC4 stream cipher, as used in WEPBlock ciphers for padding oracle attacks and manipulation of initialization-vectorsExploiting hash functions by using extension and rainbow table attacksImplementing RSA key generation using the Miller-Rabin primality test and exploiting it using the Weiner attackExploiting PKCS1.5 padding by using Bleichenbacher's chosen-ciphertext attackImplementing Diffie-Hellman Key Exchange and breaking it using a MITM parameter injection attack Theoretically strong cryptography often becomes vulnerable to exploitation as soon as it's built into real applications and networks. Hacking Cryptography details dozens of practical cryptographic implementations and then breaks down the flaws that adversaries use to exploit them. You'll learn just what it takes to write cryptographically secure code, build an intuition for spotting potential vulnerabilities, and master techniques to avoid the pitfalls that leave your systems at risk. About the technology: Everything we do in the digital world is protected by cryptography. It is the final and most reliable defense of our data, and it is often impossible to break in its pure mathematical form. Unfortunately, life is different outside the lab. Implementing cryptography in code and hardware is never perfect, and any crack is an invitation for a would-be attacker's exploitation. Learn how the good guys implement cryptography and how the bad guys exploit it. Shipping may be from multiple locations in the US or from the UK, depending on stock availability. Codice articolo 9781633439740
Quantità: 1 disponibili