Public White-Box Cryptographic Implementations and their Practical Attacks

[TechLord]

Deadpool is a repository of various public white-box cryptographic implementations and their practical attacks.

This could be of practical utility to us when dealing with the WBAES of dongles for example...

LINK :

https://github.com/SideChannelMarvels/Deadpool

Details :

Attacks

Differential Computation Analysis
Differential Fault Analysis

White-box implementations

Wyseur 2007 challenge
A Linux binary implementing a DES.

Hack.lu 2009 challenge
A Windows binary implementing an AES 128.

Karroumi 2010 challenge
A Linux binary implementing an AES 128.

SSTIC 2012 challenge
A Python serialized object implementing a DES.

NoSuchCon 2013 challenge
A Windows binary implementing an AES 128 with uncompensated external encodings.

NoSuchCon 2013 variants
Variants of the NoSuchCon 2013 challenge, using the same white-box generator but compiled for Linux, without obfuscation and with compensated external encodings.

PlaidCTF 2013 challenge
A Linux binary implementing an AES 128.

CHES 2015 challenge
A GameBoy ROM implementing an AES 128.

OpenWhiteBox AES Chow
An implementation of Chow written in Go, implementing an AES 128.

OpenWhiteBox AES Xiao-Lai
An implementation of Xiao-Lai written in Go, implementing an AES 128.

CHES 2016 challenge
A Linux binary (and source) implementing an AES 128.