Praveen Vadnala

Security analyst and trainer at @riscure.

[Praveen Vadnala @side_channels]

My paper titled "Time-Memory Trade-offs for Side-channel Resistant Implementations of Block Ciphers" has been accepted to CT-RSA 2017.

[Praveen Vadnala @side_channels]

I will be talking about controlling program counter on RISC-V using fault injection. Register below if you are interested.

[Keysight Device Security Testing @Riscure]

Two days.
Seventeen technical presentations.
One transformative workshop.

Still haven’t registered? There’s still time now! Click here to sign up: https://t.co/R8gW2klYOo

[Eric Bahn 💛 @ericbahn]

1/ There is so much idol worship in Silicon Valley re: successful founders and investors. But there is a common denominator for success which is rarely addressed: Privilege

I want to confess my own journey of success, as it relates to Privilege.

[Praveen Vadnala @side_channels]

By age 35, you should have hacked at least one "unhackable" device.

[Alex Biryukov @alexcryptan]

Here is part of our story for the WhibOx competition: "Attacks and Countermeasures for White-box Design" @hellman1908 https://t.co/bstpI57OEs

[Real World Crypto @RealWorldCrypto]

On Thursday at 11.45 at #realworldcrypto Jann Horn from Google Project Zero will talk about "Spectre & Meltdown: Data leaks during speculative execution" - just added to the schedule.

[Julien Vanegue @jvanegue]

Papers I am (re)reading after this week's CPU attack releases:
"Flipping Bits in Memory Without Accessing Them" (2014)
"Rowhammer.js: A Remote Software-Induced Fault Attack in Javascript" (2016)
"Prefetch Side-Channel Attacks: Bypassing SMAP and Kernel ASLR" (2016)

[Real World Crypto @RealWorldCrypto]

RWC 2018 is now open for submissions: https://t.co/T70n0EuQTf

[Matthieu Rivain @mrivain]

#CHES2018 call for papers is online: https://t.co/UzUyvGWzIT
Check the new publication model, with first submission deadline on 15 Oct 2017

[Peter Schwabe @cryptojedi]

CHES is moving to journal publication model (Transactions on Cryptographic Hardware and Embedded Systems -- TCHES): https://t.co/z5j85s1GsE

[Praveen Vadnala @side_channels]

@jzvw lol

[RPW: @[email protected] @esizkur]

Advances in iPhone passcode bruteforcing (this apparently is a tool commercially available for < 1000 USD in .cn): https://t.co/RVdc83NqKe

[Praveen Vadnala @side_channels]

The full attack took less than 10minutes to execute (acquisition + processing + getting the key out).

[Praveen Vadnala @side_channels]

Broke a software implementation of AES-128 on a custom made embedded board with just under 15 traces using DPA 😊

[Praveen Vadnala @side_channels]

@vierito5 Rootz in the Hague center has some nice collection of beers, if you're into it.

[Cristofaro Mune @pulsoid]

TrustZone is only an ARM HW-based technology for_supporting_ a TEE. It is NOT a TEE. There is so much more on top of it to make a TEE. 1/n

[Keysight Device Security Testing @Riscure]

Announcing #RHme3: the world's first global automotive CTF, co-developed with @ArgusSec. Registration opens August 7 https://t.co/yOLYukF6Vc

[Praveen Vadnala @side_channels]

@jzvw We can't expect people to tell us what's happening in Vegas. Can we?

[Niek Timmers @tieknimmers]

My paper (with @pulsoid) named "Escalating Privileges in Linux using Fault Injection" is accepted at #FDTC17 !!! https://t.co/MHBruyff7x

[Praveen Vadnala @side_channels]

On why implementing security features is not enough unless people go ahead and use them. Good read on TEEs
https://t.co/X6IzpmtxOD

[Keysight Device Security Testing @Riscure]

#RHme3 specs: new custom board that is 2x faster than the one for #rhme2, with CAN bus implemented. 15+ challenges, main phase starts Nov 1