report2.org 1.6 KB
The second week has been spent mostly on coding, and experimenting with openssl.
DONE Design a good architecture for the project.
The project currently consists into a set of probes, which can test and try to break X509 certificates. Each probe is a quartet of functions , where {setup, teardown} are simple procedures. test maps (x509*) -> (bool), testing whether the hypotesis for the attack are satisfied. ask maps (X509*) -> (float), measuring the security of the certificate, and eventually printing informations about possible security threats.
DONE Write a small program that downloads the public key, given as input host/port
TODO Write a small program that fetches the public key, given as input a file.
DOING Weiner's Attack
-
The user, via command-line arguments -or whatever interface- selects the souce
for the X509 certificate, and which probes to use (filter/explicit selection).
- Study the formal attack on Twenty Years'
- Implement the attack:
- Implement a fast continued fraction generator. The continued fraction generator has been implemented in 90195e0df81a, though I am not really sure if a `double` type is suitable to approximate N / e. Hence, I am studying a little bit more deppely floating point arithmetic and looking around for extended decimal type extension libraries.