How NOT to apply encryption - an attacker's perspective
Ever wondered how systems look from an attacker's point-of-view? In our "How NOT to..." videos we explore how systems can be exploited - and how we can counter that with good engineering practices.
Cryptography is complex. We use mental models such as "encryption is like locking a secret in a box" to cope with this complexity. While such models are easy to memorize and grasp, they usually do not fully capture reality. Relying on them can lead to situations in which secure cryptography is applied wrongly and leads to unsecure systems. In this video, we illustrate this point based on an AES-CBC encryption example: whether a secure encryption scheme can provide protection for a product depends a lot on the relevant protection goals and the relevant attacker capabilities - two things that are often not captured in oversimplified mental models.
We want to produce videos that cover the topics most interesting to you. So do not hesitate to use the comment function and tell us which topics you would like to be covered.
Get in touch with us:
► Via Website: https://www.itk-engineering.de/expert...
► Via E-Mail: [email protected]
You want to know more about the person from the video? Click here to go to the LinkedIn profile: / jens-k%c3%b6hler-22abba143