147 matches found
xortool
xortool.py Uno strumento per eseguire alcune analisi xor: indovinare la lunghezza della chiave basata sul conteggio dei caratteri uguali indovinare la chiave basata sulla conoscenza del carattere più frequente Nota: xortool ora funziona solo con Python 3. La vecchia versione per Python 2 è...
featherduster
FeatherDuster e Cryptanalib O FeatherDuster é uma ferramenta escrita principalmente por Daniel "unicornfurnace" Crowley, com contribuições da comunidade, para quebrar criptografia; ela tenta tornar o processo de identificação e exploração de criptossistemas fracos o mais fácil possível. O...
Bluetooth-Attacks-CVE-2025-27840
In diesem Artikel wird erörtert, wie ein Angreifer über Modul-Updates eine versteckte Liste von Schwachstellen einschleusen kann, die zu einer Kompromittierung von ESP32-Geräten und einem unbefugten Zugriff auf private Schlüssel führen können, was Milliarden von Geräten betrifft, die diesen...
bLaCk-eye-RSA-Attacking-Toolkit-v0.1f-compiled
bLaCk-eye RSA Attacking Toolkit v0.1f Descrizione RAT v0.1f compilato per Windows Dato che dal sito ufficiale puoi scaricare solo il codice sorgente e non un eseguibile. Se non hai tempo da perdere con il compilatore e la libreria miracl, questo è pronto all'uso...
cryptovenom
CryptoVenom CryptoVenom: O canivete suíço da Criptografia O que é o CryptoVenom? CryptoVenom é uma ferramenta Open Source que contém muitos sistemas criptográficos e métodos de criptoanálise todos em um, incluindo algoritmos clássicos, algoritmos de hash, algoritmos de codificação, portas lógicas...
quantum-zk-proof-poc
PoC per violare la prova a conoscenza zero di Google sulla crittanalisi quantistica Questa repository contiene le risorse per il post sul blog di Trail of Bits che descrive come abbiamo superato la prova a conoscenza zero di Google di possedere un circuito quantistico ad alta efficienza per la...
awesome-password-cracking
Awesome Cracking delle Password In crittoanalisi e sicurezza informatica, il cracking delle password è il processo di recupero delle password da dati che sono stati memorizzati o trasmessi da un sistema informatico in forma criptata. Un approccio comune brute-force attack è quello di provare...
break-golf
break-golf Ein Board für kryptanalytische Ergebnisse, die bewiesen , nicht ausgeführt werden. Eine Challenge legt zwei Welten und die Aussage fest, die du beweisen musst. Du schreibst einen Angreifer und einen Beweis, dass er die Welten unterscheidet. Der Sieg ist der Beweis: Nichts wird...
miLazyCracker
miLazyCracker Implementazione dell'attacco Hardnested per Mifare Classic Plus per lettori USB LibNFC SCL3711, ASK LoGO, ecc. Installazione: root@kitploit: ./miLazyCrackerFreshInstall.sh Esempio di utilizzo: appoggia una tag e divertiti root@kitploit: mkdir mydumps cd mydumps miLazyCracker Problem...
Tridium Niagara Use of a Broken or Risky Cryptographic Algorithm (CVE-2025-3938)
Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before...
AI-Accelerated Brute Force Cryptanalysis
Modern cryptography is hinged on "not learning from mistakes": trying numerous wrong keys, should not help one identify the right key. Indeed, it worked -- until recently when the surprising power of AI to see pattern in apparent randomness has turned the 'wrong plaintexts' generated by the 'wron...
CVE-2025-14505
The ECDSA implementation of the Elliptic package generates incorrect signatures if an interim value of 'k' as computed based on step 3.2 of RFC 6979 https://datatracker.ietf.org/doc/html/rfc6979 has leading zeros and is susceptible to cryptanalysis, which can lead to secret key exposure. This...
CVE-2025-14505 Elliptic Cryptanalysis vulnerability when `k` has leading zeros
The ECDSA implementation of the Elliptic package generates incorrect signatures if an interim value of 'k' as computed based on step 3.2 of RFC 6979 https://datatracker.ietf.org/doc/html/rfc6979 has leading zeros and is susceptible to cryptanalysis, which can lead to secret key exposure. This...
CVE-2025-14505 Elliptic Cryptanalysis vulnerability when `k` has leading zeros
The ECDSA implementation of the Elliptic package generates incorrect signatures if an interim value of 'k' as computed based on step 3.2 of RFC 6979 https://datatracker.ietf.org/doc/html/rfc6979 has leading zeros and is susceptible to cryptanalysis, which can lead to secret key exposure. This...
CVE-2025-14505
The CVE-2025-14505 entry concerns Elliptic’s ECDSA implementation. A fault in the ECDSA signing path occurs when the interim value of k (per RFC 6979 step 3.2) has leading zeros, causing the byte-length of k to be computed incorrectly and truncated. This can allow cryptanalytic leakage of the sec...
Cryptanalysis of Pseudorandom Error-Correcting Codes
Pseudorandom error-correcting codes PRC is a novel cryptographic primitive proposed at CRYPTO 2024. Due to the dual capability of pseudorandomness and error correction, PRC has been recognized as a promising foundational component for watermarking AI-generated content. However, the security of PR...
ALTCHA 安全漏洞
ALTCHA is a self-hosted CAPTCHA software from ALTCHA Open Source. A security vulnerability exists in ALTCHA that stems from a cryptanalysis flaw that could lead to the recovery of random numbers through mathematical derivation...
The Star Product of Uniformly Random Codes
We consider the problem of determining the expected dimension of the star product of two uniformly random linear codes that are not necessarily of the same dimension. We achieve this by establishing a correspondence between the star product and the evaluation of bilinear forms, which we use to...
