Look Who it Was Random video

DEF CON 16 - Luciano Bello & Maximiliano Bertacchini: Predictable RNG

584 views · Published 26 November 2013 · 48:59 · Indexed 8 November 2026

Channel: DEFCONConference · 2013 · Science & Technology

Watch on YouTube

DEF CON 16 - Luciano Bello & Maximiliano Bertacchini: Predictable RNG in the vulnerable Debian OpenSSL package, the What and the How.
Recently, the Debian project announced an OpenSSL package vulnerability which they had been distributing for the last two years. This bug makes the PRNG predictable, affecting the keys generated by openssl and every other system that uses libssl (eg. openssh, openvpn). We will talk about this bug, its discovery and publication, its consequences, and exploitation. As well, we will demonstrate some exploitation tools.

Luciano Bello is an Engineer (Information Systems) and works as a researcher at CITEFA's Si6 Information Security Labs in Buenos Aires, Argentina. He has been a Debian Developer since 2007.

Maximiliano Bertacchini is a PhD student in Computer Engineering at ITBA (Technological Institute of Buenos Aires). He is a researcher at CITEFA's Si6 Information Security Labs in Buenos Aires, Argentina. 

For copies of the slides and additional materials please see the DEF CON 16 Archive here: https://defcon.org/html/links/dc-archives/dc-16-archive.html

More from this channel