PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Dark Phoenix: a new White-box Cryptanalysis Open Source Tool

blog.quarkslab.com | tool | #open-source | #cryptography | #cryptanalysis | #aes | #white-box | #tool
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Dark Phoenix, a new open-source white-box cryptanalysis tool from Quarkslab that defeats AES white-box implementations with external encodings — cases where regular DCA/DFA attacks fail.
Published
Collected

Related coverage

tool · blog.quarkslab.com
Blue Galaxy Energy: a new White-box Cryptanalysis Open Source Tool
Quarkslab releases Blue Galaxy Energy, an open-source tool implementing the BGE attack against AES white-box implementations, previously lacking any public implementation.
research · blog.quarkslab.com
BGE Attack on AES White-Boxes: Extending Blue Galaxy Energy for Decryption and Shuffled States
Quarkslab releases v2.0 of Blue Galaxy Energy, its open-source BGE attack tool for AES white-boxes, adding support for shuffled intermediate states and for decryption white-box implementations.
tool · github.com
Peach: Single-user, Local-first Personal Media Library and Management System
Offers a privacy-respecting, local-first alternative for media library indexing and playback, combining cloud-drive integration with automated scraping while keeping sensitive viewing data strictly local.
research · blog.quarkslab.com
Introduction to Whiteboxes and Collision-Based Attacks With QBDI
A beginner-friendly introduction to white-box cryptography and a collision-based attack, demonstrated against a public whitebox using QBDI to instrument the target and generate execution traces.
research · blog.quarkslab.com
When SideChannelMarvels meet LIEF
How LIEF lifted an Android x86_64 native library — a SECCON 2016 white-box AES challenge — to Linux, letting the SideChannelMarvels toolchain carry out its usual white-box attacks.
research · blog.quarkslab.com
Differential Fault Analysis on White-box AES Implementations
Applying differential fault analysis to white-box AES: faults are cheap and non-destructive in this model, so the classic 2002 DFA attack can be implemented and results filtered to recover keys.
Back