PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

You're Doing IoT RNG

bishopfox.com | blog | #def-con | #hardware-security | #cryptography | #iot | #research | #random-number-generator
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox research from DEF CON 29: IoT hardware random number generators are commonly misused, unchecked error codes, even zero keys, weakening cryptography across an estimated 35 billion devices.
Published
Collected

Related coverage

blog · bishopfox.com
You're (Still) Doing IoT RNG
A follow-up on systemic RNG misuse in IoT devices, tracking how major IoT operating systems have progressed toward centralized CSPRNG subsystems since the original DEF CON 29 research.
research · eshard.com
Scared': Better, Faster, Stronger
We shed light on the journey that led us to enhance the speed, efficiency, and reliability of 'scared', our open-source side-channel library.
research · eshard.com
Masked and Shuffled Dataset for Side-channel Researchers - Part II
Introducing a groundbreaking technique that unlocks the potential of spatial dependency analysis to tackle challenging and disruptive side-channel signals.
research · eshard.com
PicoCTF: SRA Challenge
Write-up for SRA challenge of the PicoCTF 2023. These challenge is part of the Cryptography category.
research · eshard.com
What does the EU Cyber Resilience Act (CRA) mean for connected device manufacturers?
The Cyber Resilience Act is a new legislation proposed by the European Commission to improve the cybersecurity posture of organisations using digital assets.
research · eshard.com
Masked and Shuffled Dataset for Side-channel Researchers
eShard publishes side-channel analysis research in the Journal of Cryptographic Engineering, with an open EM trace dataset of a masked and shuffled AES implementation on STM32F4 for hardware security researchers.
Back