Crypt0 - "Packets Don't Lie; Bob Loves Alice"

Yo,

My crypto presentation that I teach in my InfoSec classed boiled down to a 4 minute original music video with labs. Even if you don't like the music, if you do the labs and understand what is happening, it should help anyone pass the crypto section of the CEH, CISSP, CISM and Security+ classes I teach.

Labs (optional)
Prerequisites: computer with Wireshark, web browser(s) and an internet connection.

Lab1) Sniff the SSL handshake. Start capturing and open a session to an SSL site, e.g. Gmail. After you get the HTTPS in the URL, stop the capture. Filter on SSL and examine the Client Hello (try capture filter "ssl.handshake.type"). How many cipher suites does your browser support? Identify which symmetric, asymmetric and hashing algorithms are used in cipher spec 0x000005.

Lab2) Examine the Server Hello. What cipher spec did the server negotiate? What algorithms make up the cipher spec?

Lab3) Examine the Server's certificate and answer the following questions:

Who signed the certificate?
What hashing and asymmetric algorithms are used in the signature?
Where is the CRL for this certificate?
Does this certificate support OCSP?

Lab 4) Filter on OCSP. How did the client identify the certificate in question? Who signed the response?

EXTRA CREDIT!
Change browsers and repeat the above. How many differences do you see? Did you expect that many?

Lab 5) Cryptanalysis - Download Cryptool. Given the following text, derive the key:
______________________
Ixevz0 "Vgiqkzy Jut'z Rok; Huh Rubk'y Groik"
Cuxjy gtj Sayoi he Rgxxe Mxkkthrgzz
Vxujaikj ot g nuzkr xuus ot Grkdgtjxog BG
Maozgxy (znxkk zxgiqy, cgcg, xuiqghorre gtj joxze uizgbk) vrgekj he Rgxxe.
Xkiuxjkj ut g Fuus X24. Jxas zxgiq lxus X24 haorz ot sginotk.

Rexoiy:

O cgtz zu yngxk g rozzrk ykixkz
Loxyz ck sayz huzn gmxkk
O tkbkx ygoj O cgyt'z ixgfe
Nkxk'y nuc oz ykksy zu sk

Eua cgtz zu qkkv yusk znotmy vxobgzk
O atjkxyzgtj gtj O xkyvkiz
Yuskzosky oz ykksy yu ixgfe
Nkxk'y nuc oz ykksy zu sk

Hghe, eua'xk g yavkx nkxu
O qtuc zngz yuatjy qotjg yzxgtmk
Hghe O znotq znkxk muttg rubk eua
Znotmy gxk tuz grcgey cngz znke ykks

Nuc ju O qtuc oz'y xkgrre eua? Gtj cngz eua yge oy zxak?
O qtuc znkxk'y znotmy O igt'z jkte
Yuskzosky znk cuxrj ykksy yu ixgfe xomnz tuc
Nkxk'y nuc oz ykksy zu sk

Hghe, eua'xk g yavkx nkxu
O qtuc somnz ykks otygtk
Hghe, O znotq znkxk muttg rubk eua
Vkuvrk gxkt'z grcgey cnu znke irgos

Category:

Music

Tags:

• larry
• greenblatt
• hlgreenblatt
• lorenzo
• verti
• sharkfest
• wireshark
• cyberkungfu
• crypt0
• crypto
• max
• quasar
• maxquasar
• internetworkdefense
• internetwork
• defense
• cyber
• kung
• fu
• cissp
• ceh
• cism
• security+
• 暗号化
• 密码
• 密碼
• mật
• mã
• học
• 竹下
• 恵
• การอ่านรหัส
• криптография
• קריפטוגרפיה
• crittografia
• gung
• ho!
• gungho1984
• yo

[CCCure]

Who said crypto is boring?

Clement

[maxquasar]

@CCCure Yo Clement, to really help with the learning environment, I added labs in the description with step by step instructions to do what I am doing on screen. Enjoy!

[alphaone1797]

this is a funny way to present!

[maxquasar]

@alphaone1797 I do my best thank you. You should see the presentation live! I am hoping to present this at Sharkfest in June.

[TheAmg1976]

This is the most awesome lesson ever! I'm sharing this with every JR InfoSec Analyst I know!

[maxquasar]

@TheAmg1976 Based on your encouraging words, I created labs to do the things I do in the video. Take a look at the description of the video. Enjoy!

[yoursxclusive]

Larry - Genius!

[njaneardude]

All I can say is WOW!

[maxquasar]

@vishijack Edutainment! Thanks for the kind words.

[maxquasar]

@cooolbreeze1 You are very welcome. Different? I never said I wasn't crazy.

[maxquasar]

@TheAmg1976 Nice, this is a great honor. Exactly as I hope the video could be used. Have them try it out. Sniff an SSL handshake with Wireshark and see the algorithms that get negotiated and then check the fields in the servers certificate.

[kskast63]

Nice tune!