Black Hat USA 2008 Training

Caesars Palace Las Vegas • August 4-5

Cryptographic Primitives, A Close Look Inside

Andrew Lindell

Overview

Every security professional knows the basics of encryption, but does everyone really understand what a block cipher for example is supposed to achieve? The fact is that we often look at cryptographic primitives as mystical black boxes. This is sometimes advantageous but can also lead to misunderstandings and mistakes. For example, a deep understanding of how block ciphers work and how sophisticated attacks (like differential and linear cryptanalysis) work makes it clear why it is so important to only used standardized ciphers like 3DES and AES and why modes of encryption are so essential. Similarly, how many of us know what key lengths must be used for public-key encryption and why. To properly understand this, we need to know what the best algorithms are for factoring RSA moduli and for solving the discrete log problem, and what the difference is in elliptic curves. Furthermore, we need to look at the history and development of these attacks in order to make safe predictions for the coming decade. In this course, students will gain an in-depth understanding of how cryptographic primitives are constructed and broken. The course is comprised of two main units. In the first, we study block ciphers. In addition to basic construction and attack paradigms, we will study the DES and AES ciphers and the methods of differential and linear cryptanalysis, with a focus on how to apply them.

In the second unit, we will study asymmetric primitives, and in particular RSA and cryptosystems based on the discrete-log problem. In addition to understanding the schemes themselves and the main algorithmic issues that arise, we present some important attacks on RSA and study algorithms for factoring and discrete log. We conclude with an intensive session on how key lengths should be set, based on the material studied throughout the course. In addition to frontal lectures, this course includes multiple interactive and exercise sessions where students will be challenged to apply the material learned to new problems. This course is essential to developers who need to understand cryptographic primitives in depth in order to properly use them and also to security professionals who need to make decisions about what products to use and why.

Duration

2 days

Prerequisistes

This course will assume mathematical maturity, but no specific mathematical knowledge. For example, it is not assumed that the students know modular arithmetic and number theory, but it is assumed that if explained, they will catch on fairly quickly (this is mainly needed for the second unit covering asymmetric primitives). In addition, participants should be familiar and comfortable with very basic probability, with the notions of algorithms and with basic notions of computer science. Some basic programming knowledge is helpful, but not necessary.

Trainer:

Andrew Lindell is the Chief Cryptographer at Aladdin Knowledge Systems and an Assistant Professor at Bar-Ilan University in Israel. Andrew attained a Ph.D. at the Weizmann Institute of Science in 2002 and spent two years at the IBM T.J.Watson research lab as a Postdoctoral fellow in the cryptography research group. Andrew has carried out extensive research in cryptography, and has published more than 50 conference and journal publications, as well as an undergraduate textbook on cryptography and a book detailing secure protocols. Andrew has presented at numerous international conferences, workshops and university seminars, and has served on program committees for top international conferences in cryptography. In addition to Andrew's notable academic experience, he joined Aladdin Knowledge Systems in 2004. In his position as Chief Cryptographer, he has worked on the cryptographic and security issues that arise in the design and construction of authentication schemes, smartcard applications, software protection schemes and more. Offering a unique combination of academic and industry experience, Andrew brings a fresh and insightful perspective on many of the crucial security issues that arise today.

Early: Ends May 1	Regular: Ends July 1	Late: Ends July 31	Late/Onsite: Begins August 1
$1800 USD	$2000 USD	$2200 USD	$2500 USD