Reverse engineering of CHIASMUS from GSTOOL

It hurts.

Jan Schejbal

Playlists: '30c3' videos starting here / audio / related events

We reverse-engineered one implementation of the non-public CHIASMUS cipher designed by the German Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik, short BSI). This did not only give us some insight on the cipher, but also uncovered serious implementation issues in GSTOOL which allow attackers to crack files encrypted with the GSTOOL encryption function with very little effort.

Download

Related

Embed

Share:

Tags