Gateway Cryptography
Dan Kaminsky explores gateway cryptography at DEF CON 9, examining nat-traversal and practical defenses.
Summary
Architecture and Background
Dan Kaminsky present 'Gateway Cryptography' at DEF CON 9, analyzing core mechanics and architectural assumptions surrounding nat-traversal, network-address-translation, firewalls, packet-filtering in the blue-team domain.
Vulnerability Analysis
The technical evaluation inspects structural design weaknesses, protocol exposure points, and common attack primitives.
Exploitation and Demonstrations
Description from DEF CON 9 Speaker’s Page: Gateway Cryptography: Hacking Impossible Tunnels Through Improbable Networks with OpenSSH and the GNU Privacy Guard 1) Theory of Gateway Cryptography 2) Methods of securely connecting mutually firewalled hosts 3) Turning any SSHD into a VPN termination point (without using PPP over SSH) 4) Dynamically Rekeyed OpenPGP 5) PPTP over SSH 6) Securely SUing to root 7) Robustifying live-configuration of OpenSSH 8) SFTP Compatibility Mode (implementing everything with cat, tar, and tail)
Remediation and Defensive Strategies
Defenders and system administrators receive concrete hardening strategies, architectural best practices, and detection guidance to mitigate threat impact.
Related talks
Main Stage·1 hr 36 min
Barry Stiefel
Barry Stiefel explores nat for newbies and not so newbies at DEF CON 9, examining nat-traversal and practical defenses.
Main Stage·55 min
Ian Goldberg
Ian Goldberg explores arranging an anonymous rendezvous at DEF CON 9, examining nat-traversal and practical defenses.
Main Stage·1 hr 5 min
K2
K2 examines description from DEF CON 9 Speaker’s Page: Polymorphic shellcode API Polymorphism has been around for years in the form of virus attacks.