Deadpool
Our hero took the name Deadpool during the time he was experimented on:
The guards had a dead pool and gambled on which test subject would die next...
By the way, in the comics, the white boxes are Deadpool's crazy alternative inner voice.
Deadpool is a repository of various public white-box cryptographic implementations and their practical attacks.
Attacks
Differential Computation Analysis
Differential Fault Analysis
White-box implementations
Wyseur 2007 challenge
A Linux binary implementing a DES.
Hack.lu 2009 challenge
A Windows binary implementing an AES 128.
Karroumi 2010 challenge
A Linux binary implementing an AES 128.
SSTIC 2012 challenge
A Python serialized object implementing a DES.
NoSuchCon 2013 challenge
A Windows binary implementing an AES 128 with uncompensated external encodings.
NoSuchCon 2013 variants
Variants of the NoSuchCon 2013 challenge, using the same white-box generator but compiled for Linux, without obfuscation and with compensated external encodings.
PlaidCTF 2013 challenge
A Linux binary implementing an AES 128.
CHES 2015 challenge
A GameBoy ROM implementing an AES 128.
OpenWhiteBox AES Chow
An implementation of Chow written in Go, implementing an AES 128.
OpenWhiteBox AES Xiao-Lai
An implementation of Xiao-Lai written in Go, implementing an AES 128.
OpenWhiteBox AES Full
An implementation of OpenWhiteBox paper written in Go, implementing an AES 128.
CHES 2016 challenge
A Linux binary (and source) implementing an AES 128.
Kryptologik challenge
A JavaScript implementing an AES 256 with diversified round keys.
Lee CASE1 challenge
A Linux binary implementing an AES 128.
RHME3 prequal whitebox challenge
A Linux binary implementing an AES 128.
White Magic challenge
A linux binary implementing ... (CTF still open)