PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Performing Concolic Execution on Cryptographic Primitives

blog.trailofbits.com | blog | #cryptography | #symbolic-execution | #manticore | #unit-testing | #concolic-testing
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Sandshrew, a Manticore-based concolic testing prototype, analyzes C crypto primitives under mixed symbolic and concrete execution, building strong unit tests that catch bignum and implementation bugs.
Published
Collected

Related coverage

blog · blog.trailofbits.com
Fuzzing an API with DeepState (Part 1)
Part 1 shows how DeepState turns a handwritten red-black tree fuzzer into a full test generator with regression replay, test reduction, and Manticore/angr/libFuzzer/AFL backends, catching missed bugs.
blog · blog.trailofbits.com
Trail of Bits @ Devcon IV Recap
Recap of Trail of Bits' Devcon IV contributions: talks on finding smart contract bugs with Manticore and symbolic execution, blockchain autopsies, and security training.
blog · blog.trailofbits.com
Fault Analysis on RSA Signing
A Trail of Bits intern modeled RSA-CRT fault attacks at the machine level, using Manticore to flip bits and show how a faulty partial signature lets attackers factor n and recover private keys.
blog · blog.trailofbits.com
Videos from Ethereum-focused Empire Hacking
Videos from the December 2017 Empire Hacking meetup—150+ attendees—cover smart contract security history, Ethereum CTF techniques, and symbolic execution of EVM bytecode with Manticore.
blog · blog.trailofbits.com
Manticore: Symbolic execution for humans
Manticore helps us quickly take advantage of symbolic execution, taint analysis, and instrumentation to analyze binaries.
vulnerability · blog.trailofbits.com
Magic with Manticore
Solving Magic, a DEF CON CTF qualifier with 200 key-protected binaries, using Manticore symbolic execution plus Binary Ninja hooks to automate key extraction instead of manual reversing.
Back