Secure Messaging for Normal People

Presented at DEF CON 23 (2015), Aug. 6, 2015, 6 p.m. (60 minutes)

"Secure" messaging programs and protocols continue to proliferate, and crypto experts can debate their minutiae, but there is very little information available to help the rest of the world differentiate between the different programs and their features. This talk will discuss the types of attacks various secure messaging features can defend against so those who are tech-savvy but not crypto-experts can make informed decisions on which crypto applications to use. This talk is intended for people with no preexisting cryptography knowledge. There will be no math or programming knowledge required. The goal is to explain secure messaging concepts such as PKI, PFS, and key validation without diving into heavier crypto, math, or programming content.

Presenters:

• Justin Engler - Senior Security Engineer, iSEC Partners
  Justin Engler is a Principal Security Engineer with NCC Group. Justin has been involved in application security assessments of many open and closed source messaging applications and other related technologies. He has spoken previously at DEF CON, BlackHat, Toorcon, and other regional events. Justin has 5 years of security consulting experience and has been involved in security, software development, and IT professionally for over 10 years.

Links:

• https://defcon.org/html/defcon-23/dc-23-speakers.html#Engler
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 slides/DEF CON 23 - Justin Engler - Secure Messaging for Normal People - Slides.mp4
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video/DEF CON 23 - Justin Engler - Secure Messaging for Normal People - Video.mp4
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 slides/DEF CON 23 - Justin Engler - Secure Messaging for Normal People - Slides.srt (subtitles)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video and slides/DEF CON 23 - Justin Engler - Secure Messaging for Normal People - Video and Slides.srt (subtitles)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video/DEF CON 23 - Justin Engler - Secure Messaging for Normal People - Video.srt (subtitles)
• https://infocon.org/cons/DEF CON/DEF CON 23/DEF CON 23 video and slides/DEF CON 23 - Justin Engler - Secure Messaging for Normal People - Video and Slides.mp4 (Video and Slides)
• https://www.youtube.com/watch?v=S_YRo0iPjYc

Similar Presentations:

• The Fifth HOPE (2004) / Secure Instant Messaging
• 33C3 (2016) / A look into the Mobile Messaging Black Box: A gentle introduction to mobile messaging and subsequent analysis of the Threema protocol.
• Summercon 2016 / Not-so-secure Instant Messaging