PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Blue Galaxy Energy: a new White-box Cryptanalysis Open Source Tool

blog.quarkslab.com | tool | #open-source | #cryptography | #aes | #white-box | #tool | #bge
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab releases Blue Galaxy Energy, an open-source tool implementing the BGE attack against AES white-box implementations, previously lacking any public implementation.
Published
Collected

Related coverage

research · blog.quarkslab.com
BGE Attack on AES White-Boxes: Extending Blue Galaxy Energy for Decryption and Shuffled States
Quarkslab releases v2.0 of Blue Galaxy Energy, its open-source BGE attack tool for AES white-boxes, adding support for shuffled intermediate states and for decryption white-box implementations.
tool · blog.quarkslab.com
Dark Phoenix: a new White-box Cryptanalysis Open Source Tool
Dark Phoenix, a new open-source white-box cryptanalysis tool from Quarkslab that defeats AES white-box implementations with external encodings — cases where regular DCA/DFA attacks fail.
tool · github.com
Peach: Single-user, Local-first Personal Media Library and Management System
Offers a privacy-respecting, local-first alternative for media library indexing and playback, combining cloud-drive integration with automated scraping while keeping sensitive viewing data strictly local.
research · blog.quarkslab.com
Introduction to Whiteboxes and Collision-Based Attacks With QBDI
A beginner-friendly introduction to white-box cryptography and a collision-based attack, demonstrated against a public whitebox using QBDI to instrument the target and generate execution traces.
research · blog.quarkslab.com
When SideChannelMarvels meet LIEF
How LIEF lifted an Android x86_64 native library — a SECCON 2016 white-box AES challenge — to Linux, letting the SideChannelMarvels toolchain carry out its usual white-box attacks.
tool · blog.quarkslab.com
From P-Code to GNN: extract binary code semantics
This coverage gives security teams current context for monitoring, validation, and remediation.
Back