ASSERT-KTH / slumps

Cool code analysis research for WebAssembly

Home Page:https://kth.github.io/slumps/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

add white box crypto into benchmark

monperrus opened this issue · comments

In his master's thesis, Alexander Koski @aeakoski has looked at white-box crypto, which is a sweet spot for randomization.

There is a reference repo containing white-box crypto implementations, together with the attack: https://github.com/SideChannelMarvels/Deadpool

How many of them would fit in our pipeline?

I think that we can start with the C/C++ codes. We can use emcc to generate the binaries and the exploit surfaces in the browser (maybe NodeJS too) like we did previously

Closing this issue, since the results over white-box crypto libraries attacks (Deadpool) are not relevant

For the record, we can now run CROW on crypto library libsodium.