34C3 -  Squeezing a key through a carry bit
Channel: media.ccc.de
Date: 2017-12-28

https://media.ccc.de/v/34c3-9021-squeezing_a_key_through_a_carry_bit



The Go implementation of the P-256 elliptic curve had a small bug due to a misplaced carry bit affecting less than 0.00000003% of field subtraction operations. We show how to build a full practical key recovery attack on top of it, capable of targeting JSON Web Encryption.



Filippo Valsorda

https://fahrplan.events.ccc.de/congress/2017/Fahrplan/events/9021.html