quantum-zk-proof-poc

破解Google量子密码分析零知识证明的概念验证 本仓库包含了Trail of Bits博客文章的资源，该文章详细介绍了我们如何破解Google声称拥有用于椭圆曲线密码分析的高效量子电路的零知识证明。它包含我们的伪造证明、验证说明以及生成量子电路的代码，该代码利用了未修补的zkVM模拟器代码中的漏洞。 完整的证明二进制文件位于此处，以下是Google的证明与我们的证明的结果对比。 资源类型| Google低门数| Google低量子比特| 我们的证明 ---|---|---|--- 总操作数| 17,000,000| 17,000,000| 8,300,000 量子比特数量| 1,425...

featherduster

FeatherDuster（与 Cryptanalib） FeatherDuster 是一款主要用于破解密码学算法的工具，由 Daniel "unicornfurnace" Crowley 编写，并得到了社区贡献者的支持；它致力于让识别和利用弱密码系统的过程尽可能简单。Cryptanalib 是 FeatherDuster 背后的核心组件，也可以独立于 FeatherDuster 使用。 为什么叫...

awesome-password-cracking

Awesome Password Cracking 在密码分析和计算机安全中，密码破解是指从以加扰形式存储在计算机系统中或由其传输的数据中恢复密码的过程。一种常见方法（暴力攻击）是重复尝试密码猜测，并将其与可用的密码加密哈希进行比对。 这是由 @[email protected] 整理的一份精选列表，包含与密码破解和密码安全相关的优秀工具、研究、论文及其他项目。 贡献前请阅读 CONTRIBUTING.md！简要说明如下： 列表按字母顺序排序 如有疑问，请使用 awesome-lint 如果你认为某个项目不应在此列出，请提交问题 目录 Awesome Password...

bLaCk-eye-RSA-Attacking-Toolkit-v0.1f-compiled

bLaCk-eye RSA 攻击工具包 v0.1f 描述 RAT v0.1f 为 Windows 编译 由于官方网站只提供源代码，不提供可执行文件。 如果你不想浪费时间在编译器和 miracl 库上，这个版本可直接使用。...

cryptovenom

CryptoVenom CryptoVenom：密码学瑞士军刀 CryptoVenom 是什么？ CryptoVenom 是一个开源工具，包含多种密码系统和密码分析方法，集于一身，涵盖经典算法、哈希算法、编码算法、逻辑门、数学函数、现代对称与非对称加密等。 CryptoVenom 的目的是什么？ 简化密码分析或密码系统的使用与操作。 如果你是一名 CTF 玩家，或只是一个出于学习目的的好奇学生，这就是你的工具！ 错误？更新？ 由于这是一个非常大的工具，且由我独自创建，可能存在一些错误。如果你遇到错误，或某些功能无法正常工作，请尽快通过 Telegram @LockedByte、电子邮件...

Bluetooth-Attacks-CVE-2025-27840

本文讨论了攻击者如何通过模块更新引入隐藏的漏洞列表，从而导致 ESP32 设备被入侵并获取未授权的私钥访问权限，影响了数十亿使用该微控制器的设备。关键问题之一是在 ESP32 架构中发现的 CVE-2025-27840 漏洞。为确保比特币网络的安全性，我们识别了以下漏洞：由于函数 hasinvalidprivkey 中缺少下限检查而可能使用无效私钥的可能性；函数 electrumsighash 中因与 BIP-137 不兼容导致的交易签名伪造漏洞；密钥生成函数 randomkey 中的弱 PRNG 问题，使加密货币钱包的个人私钥变得可预测；函数 multiply 中缺少对 ECC...

xortool

xortool.py 一个用于进行异或（xor）分析的工具： 猜测密钥长度（基于相同字符的数量） 猜测密钥（基于对最常见字符的了解） 注意： xortool 现在仅支持 Python 3。旧的 Python 2 版本可在 py2 分支获取。pip 包已更新。 安装 root@kitploit: $ pip3 install xortool 开发或构建本仓库需要 poetry。 root@kitploit: poetry build pip install dist/xortool.whl 用法 root@kitploit: xortool A tool to do some xor...

break-golf

break-golf A board for cryptanalysis results that are proved , not run. A challenge fixes two worlds and the statement you must prove. You write an adversary and a proof that it distinguishes them. The win is the proof: nothing is executed, sampled, or replayed, and no human reads the submission ...

miLazyCracker

miLazyCracker Implementación de ataque Hardnested para tarjetas Mifare Classic Plus para lectores USB LibNFC SCL3711, ASK LoGO, etc. Instalación: root@kitploit: ./miLazyCrackerFreshInstall.sh Ejemplo de uso: coloca una tarjeta y disfruta root@kitploit: mkdir mydumps cd mydumps miLazyCracker Posib...

Claude Fable Solves a Historical Cipher

Claude Fable 5.1 solved a 370-year-old cipher in forty-four minutes. This tracks with what I wrote about AIs doing mathematics: It's good at things that involve lots of searching and testing. EDITED TO ADD 9/14: I'm not sure if this result is correct. The blog comments have more discussion...

CVE-2026-6217

Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1...

EUVD-2026-70952

Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1...

CVE-2026-6217 Information Disclosure in Pik Online Software's Portal

Use of a One-Way hash without a salt vulnerability in Pik Online Software Solutions Inc. Pik Online Portal allows Cryptanalysis. This issue affects Pik Online Portal: through 3.5.1...

CVE-2026-6217

Pik Online Portal (by Pik Online Software Solutions Inc.) is vulnerable to information disclosure via use of a one-way hash without a salt , allowing cryptanalysis of hashed data. The issue affects versions through 3.5.1 . The CVSS 3.1 score is 6.3 (MEDIUM) , with a network attack vector, low com...

Tridium Niagara Use of a Broken or Risky Cryptographic Algorithm (CVE-2025-3938)

Missing Cryptographic Step vulnerability in Tridium Niagara Framework on Windows, Linux, QNX, Tridium Niagara Enterprise Security on Windows, Linux, QNX allows Cryptanalysis. This issue affects Niagara Framework: before 4.14.2, before 4.15.1, before 4.10.11; Niagara Enterprise Security: before...

AI-Accelerated Brute Force Cryptanalysis

Modern cryptography is hinged on "not learning from mistakes": trying numerous wrong keys, should not help one identify the right key. Indeed, it worked -- until recently when the surprising power of AI to see pattern in apparent randomness has turned the 'wrong plaintexts' generated by the 'wron...

CVE-2025-14505

The ECDSA implementation of the Elliptic package generates incorrect signatures if an interim value of 'k' as computed based on step 3.2 of RFC 6979 https://datatracker.ietf.org/doc/html/rfc6979 has leading zeros and is susceptible to cryptanalysis, which can lead to secret key exposure. This...

CVE-2025-14505 Elliptic Cryptanalysis vulnerability when `k` has leading zeros

The ECDSA implementation of the Elliptic package generates incorrect signatures if an interim value of 'k' as computed based on step 3.2 of RFC 6979 https://datatracker.ietf.org/doc/html/rfc6979 has leading zeros and is susceptible to cryptanalysis, which can lead to secret key exposure. This...

CVE-2025-14505 Elliptic Cryptanalysis vulnerability when `k` has leading zeros

The ECDSA implementation of the Elliptic package generates incorrect signatures if an interim value of 'k' as computed based on step 3.2 of RFC 6979 https://datatracker.ietf.org/doc/html/rfc6979 has leading zeros and is susceptible to cryptanalysis, which can lead to secret key exposure. This...

CVE-2025-14505

The CVE-2025-14505 entry concerns Elliptic’s ECDSA implementation. A fault in the ECDSA signing path occurs when the interim value of k (per RFC 6979 step 3.2) has leading zeros, causing the byte-length of k to be computed incorrectly and truncated. This can allow cryptanalytic leakage of the sec...