Breaking RSA with Bleichenbacher's Oracle 🔓

In this video I explain a famous cryptographic attack known as Bleichenbacher's oracle that was found in 1998 by Daniel Bleichenbacher and that attacks vulnerable implementation of RSA encryption when used with a padding standard known as PKCS #1 v1.5 that expose a cryptographic padding oracle.

Btw after recording the video I realized that the way I pronounced “bleichenbacher” throughout the entire video is wrong.
Sorry for that :/

------------------------------------

ORIGINAL MATERIAL:

https://academy.leonardotamiano.xyz/video/HgrwrDMvRTI.html
https://archive.leonardotamiano.xyz/yt/crypto/01/

------------------------------------

EXTERNAL REFERENCES:

http://archiv.infsec.ethz.ch/education/fs08/secsem/bleichenbacher98.pdf
https://ethz.ch/content/dam/ethz/special-interest/infk/inst-infsec/appliedcrypto/education/theses/Experimenting%20with%20the%20Bleichenbacher%20Attack%20-%20Livia%20Capol.pdf
https://www.youtube.com/watch?v=iA6OevUmeHk
http://secgroup.dais.unive.it/wp-content/uploads/2012/11/Practical-Padding-Oracle-Attacks-on-RSA.html#eq1

------------------------------------

TIMESTAMPS:

00:00:00 introduction
00:06:30 brief recap of TLS and TLS handshake
00:11:15 brief recap on RSA
00:14:28 on the malleability of RSA
00:16:15 textbook RSA does not work
00:17:30 on the padding scheme PKCS #1 v1.5
00:21:48 what does it mean to have a bleichenbacher's oracle?
00:25:39 overview of the bleichenbacher's attack
00:30:08 on the consequences of PKCS #1 v1.5
00:33:27 start of decryption algorithm
00:35:35 step 1: search for next s_i
00:38:37 step 2: construction of M_i
00:56:11 step 2: code
00:57:30 after the step 2
00:58:50 classical optimization #1
01:02:30 classical optimization #2
01:08:15 further optimizations
01:09:00 the missing step
01:09:50 references
01:10:10 offline implementation in python

----------------------------------

FOR CONTACTS:

- Website: https://leonardotamiano.xyz
- Academy: https://academy.leonardotamiano.xyz
- Email: leonardotamiano95@gmail.com