Smartcard security research at CRoCS – From testing to vulnerabilities and attacks

Thu 14Jan2021

Ján Jančár, Masaryk University

From 12:30 until 13:30

At Zoom: https://ethz.zoom.us/j/94150617023

https://ethz.zoom.us/j/94150617023

Abstract:

This talk presents our research into the security of programmable smartcards, which are widely used devices that implement a wide range of cryptosystems, yet are mostly black-box with hardly any public information about their workings. By the end of the talk, you will learn
 - How we find vulnerabilities in smartcards using our open-source tools, even though the smartcards are often certified.
 - How we recover information about them, specifically without signing NDAs.
 - How we found and exploited the Minerva group of side-channel vulnerabilities in implementations of ECDSA.
 - How security certifications fail and how they can help researchers in finding, fixing and disclosing vulnerabilities.

Join the Zoom meeting at 12:30 on Thursday, January 14th: https://ethz.zoom.us/j/94150617023

Download Event to Calendar