Modern Crypto and you!

Presented at BSides Austin 2016, April 1, 2016, 3 p.m. (60 minutes).

My proposed talk I would like to discuss the advancement of Quantum computing and how that affects our current crypto levels. Has AES 256 finally met its match? It is my belief that most IT security professionals work with crypto everyday but very few know how it works, what it does, when to use AES over 3DES etc. This talk will discuss the everyday uses of cryptography for example, You are setting up a new 802.11 network and you need to decide what mode AES to use. I will discuss the modes and why you should or should not use ECB ever! If you only need to decrypt, is it ok to just use OFB/CFB? I will also discuss the choices we are presented with in creating new SSL Certificates; Should you choose AES or Diffie-Hellman? My goal is to present real world scenarios where IT pros and security professionals are presented with every day and give easy to understand explanations on how to assess risk and make educated decisions on what the proper key exchange should be.


Presenters:

  • Martin Brough
    17 years of experience in Information Security. I served in the USMC for 4 years where I worked in the crypto vault… high tech TS stuff, super cool… I spent the next few years earning my keep as a Sysadmin and working my way up in the IT industry. My passion for security was found in 2006 after the Chinese compromised the military NIPRNet. I used to generate crypto for the SIPRNet so I was fascinated why so much sensitive data was being passed over NIPRNet. I began doing consulting work for the NSA and FBI and a "as needed" basis and I am currently the Global Director of Cyber Security for a really great company that spans over 122 countries.

Links:

Similar Presentations: