Asia-24-Beery-BadRandomness

#BHASIA @BlackHatEventsBad Randomness: Protecting Against Cryptography's Perfect CrimeTal Be’ery, CTO & Co-Founder Zengo●Co-Founder, CTO @ ZenGo●20+ years cyber security●9th time BH Speaker●1st time BHASIA speaker! ●@talbeerysec👋Hi, I’m Tal Be’eryAgenda●The Perfect Crime: Why bad randomness is crypto’sperfect crime?●True Crime(s) →Bad private key: Bitcoin, gone in milliseconds→Bad Nonce: Ethereum, gone in milliseconds→Bad DH parameters: TLS malware, even more powerful than previously known●Solutions→Avoiding single point of failure with MPC The perfect crimeRandomness in cryptographyThe perfect crime●Lethal ●Undetectable”Randomness in cryptography is like the air we breathe. You can’t do anything without it,-Prof. Yevgeniy Dodishttps://cs.nyu.edu/~dodis/courant-article.pdfRandomness is vital●Kerckhoffs' principle: the security of a cryptographic system should be based on the secrecy of the cryptographic key ●Keys values should be unguessable→created in random●But also other crypto it