RSSAmplifier

ROT256. · Nov 15, 2016

PAKE @ Hitcon 2016

0
Sign in to vote or save

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

Writeup of a challenge completed some time ago. Modified challenge code here The challenge The protocol is essentially SPEKE , but rather than use one large password, a number of smaller passwords are used and combined to avoid online bruteforce. Talking to yourself The first observation is that two sessions with the same server can convince each other that they know the passwords. This may not…

Read on rot256.dev

Comments

Nothing yet. Say the first thing.

    Sign in to join the conversation.