PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

NEAT and NES Algorithms

theori.io | research | #cryptography | #reverse-engineering | #block-cipher | #neat | #nes | #kisa
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Theori reverse-engineered NEAT and NES, two previously unpublished symmetric ciphers in South Korea's GPKI cryptography library, publishing full descriptions and working implementations.
Published
Collected

Related coverage

research · eshard.com
Unfolding obfuscated code with esReverse - Part I (full write-up)
We take the Grehack 2015's challenge scoring the highest number of points over all categories (cryptography, exploit, reverse engineering, etc.) using esReven.
research · blog.quarkslab.com
State of Post-Quantum Cryptography implementations
In this blogpost, we first review the landscape of Post-Quantum Cryptography implementations across some of the most popular cryptographic libraries. Following that, we present the results of a differential fuzzing campaign on few of the presented implementations.
research · github.com
php2shell: Pure HTTP Full-Chain RCE and ASLR Bypass on Stock PHP 8.4 Configurations
Overcomes historical constraints where PHP heap exploitation required display_errors=On, restricted memory limits, or target application vulnerabilities, demonstrating reliable pure-HTTP RCE and ASLR defeat against standard production ini configurations.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · eshard.com
Evaluating Botan’s Resistance to Physical Attacks: An End-to-End Study
We evaluated Botan 3.7.1’s ECC against side-channel attacks, from source code to real hardware. Three attack paths found. Accepted at HS3 2026.
research · eshard.com
A side-channel analysis of the Arm CryptoCell-310 AES
First public side-channel attack on the Arm CryptoCell-310: full AES key recovery via EM analysis and collision-correlation.
Back