https://github.com/jo-makar/matasano

Matasano (now NCC Group) crypto challenges' solutions
https://github.com/jo-makar/matasano

crypto-challenges cryptopals matasano

Last synced: 6 months ago
JSON representation

Matasano (now NCC Group) crypto challenges' solutions

• Host: GitHub
• URL: https://github.com/jo-makar/matasano
• Owner: jo-makar
• Created: 2018-07-05T13:33:15.000Z (almost 8 years ago)
• Default Branch: master
• Last Pushed: 2021-02-17T04:05:42.000Z (over 5 years ago)
• Last Synced: 2024-06-20T21:08:43.801Z (about 2 years ago)
• Topics: crypto-challenges, cryptopals, matasano
• Language: Go
• Homepage:
• Size: 2.7 MB
• Stars: 0
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

          
# matasano

Matasano (now NCC Group) crypto challenges' (https://cryptopals.com) solutions

Briefly, these are a collection of exercises that demonstrate attacks on real-world cryptography.

The exercises are derived from weaknesses in real-world systems and modern cryptographic

constructions covering topics from symmetric ciphers such as AES (in a variety of modes), padding

schemes such as PKCS#7, random number generators, hashing algorithmns, asymmetric ciphers such as

DSA and RSA, a variety of famous attacks, and so on.

- Problem set 1

  - [x] Convert hex to base64 and back

  - [x] Fixed XOR

  - [x] Single-character XOR Cipher

  - [x] Detect single-character XOR

  - [x] Repeating-key XOR Cipher

  - [x] Break repeating-key XOR

  - [x] AES in ECB Mode

  - [x] Detecting ECB

- Problem set 2

  - [x] Implement PKCS#7 padding

  - [x] Implement CBC Mode

  - [x] Write an oracle function and use it to detect ECB

  - [x] Byte-at-a-time ECB decryption, Full control version

  - [x] ECB cut-and-paste

  - [x] Byte-at-a-time ECB decryption, Partial control version

  - [x] PKCS#7 padding validation

  - [x] CBC bit flipping

- Problem set 3

  - [x] The CBC padding oracle

  - [x] Implement CTR mode

  - [x] Break fixed-nonce CTR mode using substitions

  - [x] Break fixed-nonce CTR mode using stream cipher analysis

  - [x] Implement the MT19937 Mersenne Twister RNG

  - [x] "Crack" an MT19937 seed

  - [x] Clone an MT19937 RNG from its output

  - [x] Create the MT19937 stream cipher and break it

- Problem set 4

  - [x] Break "random access read/write" AES CTR

  - [x] CTR bit flipping

  - [x] Recover the key from CBC with IV=Key

  - [x] Implement a SHA-1 keyed MAC

  - [x] Break a SHA-1 keyed MAC using length extension

  - [x] Break an MD4 keyed MAC using length extension

  - [x] Implement HMAC-SHA1 and break it with an artificial timing leak

  - [x] Break HMAC-SHA1 with a slightly less artificial timing leak

- Problem set 5

  - [x] Implement Diffie-Hellman

  - [x] Implement a MITM key-fixing attack on Diffie-Hellman with parameter injection

  - [x] Implement DH with negotiated groups, and break with malicious "g" parameters

  - [x] Implement Secure Remote Password

  - [x] Break SRP with a zero key

  - [x] Offline dictionary attack on simplified SRP

  - [x] Implement RSA

  - [x] Implement an E=3 RSA Broadcast attack

- Problem set 6

  - [x] Implement Unpadded Message Recovery Oracle

  - [x] Bleichenbacher's e=3 RSA Attack

  - [x] DSA Key Recovery From Nonce

  - [x] DSA Nonce Recovery From Repeated Nonce

  - [x] DSA Parameter Tampering

  - [x] Decrypt RSA From One-Bit Oracle

  - [x] Bleichenbacher's PKCS 1.5 Padding Oracle (Simple Case)

  - [x] Bleichenbacher's PKCS 1.5 Padding Oracle (Complete)

# License

This work is released to the public domain.