Efficient Padding Oracle Attacks on Cryptographic Hardware

A really good post here. Follow the link and read the long version....

http://blog.cryptographyengineering.com/2012/06/bad-couple-of-years-for-cryptographic.html

There was a time just a few weeks ago when it seemed like the CRYPTO
2012 accepted papers list might not be posted in time for, well,
CRYPTO 2012. Fortunately the list is public now, which means (1) we've
avoided the longest rump session in the history of cryptography, and
(2) I get to tell you about a particularly neat paper.

The paper in question is 'Efficient Padding Oracle Attacks on
Cryptographic Hardware' by Bardou, Focardi, Kawamoto, Simionato, Steel
and Tsay. This is a typically understated academic title for a
surprisingly nifty result.

Here's the postage stamp version: due to a perfect storm of (subtle,
but not novel) cryptographic flaws, an attacker can extract sensitive
keys from several popular cryptographic token devices. This is
obviously not good, and it may have big implications for people who
depend on tokens for their day-to-day security. If that describes you,
I suggest you take a look at this table:

[Table (Inline Image) Removed]

That's the headline news, anyway. The more specific (and important)
lesson for cryptographic implementers is: if you're using PKCS#1v1.5
padding for RSA encryption, cut it out. Really. This is the last
warning you're going to get.

So much for the short version. Keep reading for the long one.

Re: .lib file

On Jun 28, 4:39 pm, Randy <randy.eastl... <at> gmail.com> wrote:
> I just downloaded crypto++ library (5.6.1) and am trying to install it with
> code::blocks on a Windows 7 64-bit machine. According to my code::blocks
> instructions, I need to link to a .lib file. However, when I look for such
> a file among the folders that were downloaded, no such file exists. Does
> anybody know how to get code::blocks to recognize this library or where I
> can find a .lib file for crypto++.
You have to build the library.

I'm not sure what Codeblocks on Windows looks like, so I can't suggest
how to build the library.

--

-- 
You received this message because you are subscribed to the "Crypto++ Users" Google Group.
To unsubscribe, send an email to cryptopp-users-unsubscribe <at> googlegroups.com.
More information about Crypto++ and this group is available at http://www.cryptopp.com.

while trying to compile all projects in the solution

Re: while trying to compile all projects in the solution

Re: How can I convert Integer to string

Re: How can I convert Integer to string

#include <sstream> and use std::ostringstream instead.

Chris

On Sat, 7 Jul 2012 18:47:29 -0700 (PDT)
Mo-Che Chan <chryslerwrangler <at> gmail.com> wrote:

> The following message appears when I tried your method. How can I do?
> thank you.
> 
> /usr/include/c++/4.6/backward/backward_warning.h:33:2: warning:
> #warning This file includes at least one deprecated or antiquated
> header which may be removed without further notice at a future date.
> Please use a non-deprecated interface with equivalent functionality
> instead. For a listing of replacement headers and interfaces, consult
> the file backward_warning.h. To disable this warning use
> -Wno-deprecated. [-Wcpp]
> 
> 
> On Sunday, December 3, 2006 7:48:56 AM UTC+8, Wei Dai wrote:
> >
> > Use std::ostrstream and the << operator:
> >
> > #include <strstream>
> >
> > std::ostrstream oss;

Build Problems

g++ -DNDEBUG -g -O2 -march=native -pipe -c 3way.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c adler32.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c algebra.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c algparam.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c arc4.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c asn.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c authenc.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c base32.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c base64.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c basecode.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c bfinit.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c blowfish.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c blumshub.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c camellia.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c cast.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c casts.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c cbcmac.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c ccm.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c channels.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c cmac.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c cpu.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c crc.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c cryptlib.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c cryptlib_bds.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c default.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c des.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c dessp.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c dh.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c dh2.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c dll.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c dsa.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c eax.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c ec2n.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c eccrypto.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c ecp.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c elgamal.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c emsa2.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c eprecomp.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c esign.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c files.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c filters.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c fips140.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c fipstest.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c gcm.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c gf256.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c gf2_32.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c gf2n.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c gfpcrypt.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c gost.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c gzip.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c hex.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c hmac.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c hrtimer.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c ida.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c idea.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c integer.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c iterhash.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c luc.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c mars.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c marss.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c md2.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c md4.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c md5.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c misc.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c modes.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c mqueue.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c mqv.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c nbtheory.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c network.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c oaep.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c osrng.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c panama.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c pch.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c pkcspad.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c polynomi.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c pssr.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c pubkey.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c queue.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c rabin.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c randpool.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c rc2.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c rc5.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c rc6.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c rdtables.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c rijndael.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c ripemd.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c rng.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c rsa.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c rw.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c safer.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c salsa.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c seal.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c seed.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c serpent.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c sha.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c shacal2.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c shark.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c sharkbox.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c simple.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c skipjack.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c socketft.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c sosemanuk.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c square.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c squaretb.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c strciphr.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c tea.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c tftables.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c tiger.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c tigertab.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c trdlocal.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c ttmac.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c twofish.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c vmac.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c wait.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c wake.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c whrlpool.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c winpipes.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c xtr.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c xtrcrypt.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c zdeflate.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c zinflate.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c zlib.cpp
ar -cr	 libcryptopp.a 3way.o adler32.o algebra.o algparam.o arc4.o asn.o authenc.o base32.o base64.o
basecode.o bfinit.o blowfish.o blumshub.o camellia.o cast.o casts.o cbcmac.o ccm.o channels.o
cmac.o cpu.o crc.o cryptlib.o cryptlib_bds.o default.o des.o dessp.o dh.o dh2.o dll.o dsa.o eax.o
ec2n.o eccrypto.o ecp.o elgamal.o emsa2.o eprecomp.o esign.o files.o filters.o fips140.o fipstest.o
gcm.o gf256.o gf2_32.o gf2n.o gfpcrypt.o gost.o gzip.o hex.o hmac.o hrtimer.o ida.o idea.o integer.o
iterhash.o luc.o mars.o marss.o md2.o md4.o md5.o misc.o modes.o mqueue.o mqv.o nbtheory.o network.o
oaep.o osrng.o panama.o pch.o pkcspad.o polynomi.o pssr.o pubkey.o queue.o rabin.o randpool.o rc2.o
rc5.o rc6.o rdtables.o rijndael.o ripemd.o rng.o rsa.o rw.o safer.o salsa.o seal.o seed.o serpent.o
sha.o shacal2.o shark.o sharkbox.o simple.o skipjack.o socketft.o sosemanuk.o square.o squaretb.o
strciphr.o tea.o tftables.o tiger.o tigertab.o trdlocal.o ttmac.o twofish.o vmac.o wait.o wake.o
whrlpool.o winpipes.o xtr.o xtrcrypt.o zdeflate.o zinflate.o zlib.o
ranlib libcryptopp.a
g++ -DNDEBUG -g -O2 -march=native -pipe -c bench.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c bench2.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c test.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c validat1.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c validat2.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c validat3.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c adhoc.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c datatest.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c regtest.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c fipsalgt.cpp
g++ -DNDEBUG -g -O2 -march=native -pipe -c dlltest.cpp
g++ -o cryptest.exe -DNDEBUG -g -O2 -march=native -pipe bench.o bench2.o test.o validat1.o validat2.o
validat3.o adhoc.o datatest.o regtest.o fipsalgt.o dlltest.o -L. -lcryptopp  
test.o: In function `Z14ForwardTcpPortPKcS0_S0_':
c:\libs\cryptopp561/test.cpp:712: undefined reference to `setsockopt <at> 20'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP12SocketSender13GetSendResultEv':
c:\libs\cryptopp561/socketft.cpp:467: undefined reference to `WSAGetOverlappedResult <at> 20'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP14SocketReceiver16GetReceiveResultEv':
c:\libs\cryptopp561/socketft.cpp:370: undefined reference to `WSAGetOverlappedResult <at> 20'
c:\libs\cryptopp561/socketft.cpp:377: undefined reference to `WSAGetLastError <at> 0'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP12SocketSender4SendEPKhj':
c:\libs\cryptopp561/socketft.cpp:416: undefined reference to `WSASend <at> 28'
c:\libs\cryptopp561/socketft.cpp:423: undefined reference to `WSAGetLastError <at> 0'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP14SocketReceiver7ReceiveEPhj':
c:\libs\cryptopp561/socketft.cpp:335: undefined reference to `WSARecv <at> 28'
c:\libs\cryptopp561/socketft.cpp:342: undefined reference to `WSAGetLastError <at> 0'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket6CreateEi':
c:\libs\cryptopp561/socketft.cpp:71: undefined reference to `socket <at> 12'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket11CloseSocketEv':
c:\libs\cryptopp561/socketft.cpp:83: undefined reference to `closesocket <at> 4'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket4BindEPK8sockaddri':
c:\libs\cryptopp561/socketft.cpp:120: undefined reference to `bind <at> 12'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket4BindEjPKc':
c:\libs\cryptopp561/socketft.cpp:102: undefined reference to `inet_addr <at> 4'
c:\libs\cryptopp561/socketft.cpp:111: undefined reference to `htons <at> 4'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket12SetLastErrorEi':
c:\libs\cryptopp561/socketft.cpp:298: undefined reference to `WSASetLastError <at> 4'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket4BindEjPKc':
c:\libs\cryptopp561/socketft.cpp:99: undefined reference to `htonl <at> 4'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket6ListenEi':
c:\libs\cryptopp561/socketft.cpp:126: undefined reference to `listen <at> 8'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket7ConnectEPK8sockaddri':
c:\libs\cryptopp561/socketft.cpp:158: undefined reference to `connect <at> 12'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket12GetLastErrorEv':
c:\libs\cryptopp561/socketft.cpp:289: undefined reference to `WSAGetLastError <at> 0'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket7ConnectEPKcj':
c:\libs\cryptopp561/socketft.cpp:136: undefined reference to `inet_addr <at> 4'
c:\libs\cryptopp561/socketft.cpp:150: undefined reference to `htons <at> 4'
c:\libs\cryptopp561/socketft.cpp:140: undefined reference to `gethostbyname <at> 4'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket12SetLastErrorEi':
c:\libs\cryptopp561/socketft.cpp:298: undefined reference to `WSASetLastError <at> 4'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket6AcceptERS0_P8sockaddrPi':
c:\libs\cryptopp561/socketft.cpp:168: undefined reference to `accept <at> 12'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket12GetLastErrorEv':
c:\libs\cryptopp561/socketft.cpp:289: undefined reference to `WSAGetLastError <at> 0'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket11GetSockNameEP8sockaddrPi':
c:\libs\cryptopp561/socketft.cpp:179: undefined reference to `getsockname <at> 12'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket11GetPeerNameEP8sockaddrPi':
c:\libs\cryptopp561/socketft.cpp:185: undefined reference to `getpeername <at> 12'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket4SendEPKhji':
c:\libs\cryptopp561/socketft.cpp:191: undefined reference to `send <at> 16'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket7ReceiveEPhji':
c:\libs\cryptopp561/socketft.cpp:199: undefined reference to `recv <at> 16'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket8ShutDownEi':
c:\libs\cryptopp561/socketft.cpp:207: undefined reference to `shutdown <at> 8'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP12SocketSender7SendEofEv':
c:\libs\cryptopp561/socketft.cpp:435: undefined reference to `WSAEventSelect <at> 12'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket5IOCtlElPm':
c:\libs\cryptopp561/socketft.cpp:215: undefined reference to `ioctlsocket <at> 12'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket9SendReadyEPK7timeval':
c:\libs\cryptopp561/socketft.cpp:232: undefined reference to `select <at> 20'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket12ReceiveReadyEPK7timeval':
c:\libs\cryptopp561/socketft.cpp:249: undefined reference to `select <at> 20'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket12SetLastErrorEi':
c:\libs\cryptopp561/socketft.cpp:298: undefined reference to `WSASetLastError <at> 4'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP12SocketSender7EofSentEv':
c:\libs\cryptopp561/socketft.cpp:444: undefined reference to `WSAEnumNetworkEvents <at> 12'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket12GetLastErrorEv':
c:\libs\cryptopp561/socketft.cpp:289: undefined reference to `WSAGetLastError <at> 0'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket15ShutdownSocketsEv':
c:\libs\cryptopp561/socketft.cpp:280: undefined reference to `WSACleanup <at> 0'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket12StartSocketsEv':
c:\libs\cryptopp561/socketft.cpp:271: undefined reference to `WSAStartup <at> 8'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket16PortNameToNumberEPKcS2_':
c:\libs\cryptopp561/socketft.cpp:261: undefined reference to `getservbyname <at> 8'
c:\libs\cryptopp561/socketft.cpp:264: undefined reference to `ntohs <at> 4'
./libcryptopp.a(socketft.o): In function `ZN8CryptoPP6Socket12GetLastErrorEv':
c:\libs\cryptopp561/socketft.cpp:289: undefined reference to `WSAGetLastError <at> 0'
collect2: ld returned 1 exit status
make: *** [cryptest.exe] Error 1

Re: .lib file

Re: .lib file

Re: Build Problems