Cruel Summer: hybrid signatures, Downfall, Zenbleed, 2G downgrades

Security Cryptography Whatever

We're back from our summer vacation! We're covering a bunch of stuff we saw and did:
Transcript:
https://securitycryptographywhatever.com/2023/09/13/cruel-summer/
Links:
- Zenbleed: https://lock.cmpxchg8b.com/zenbleed.html
- Downfall: https://downfall.page
- Post-quantum Yubikeys: https://security.googleblog.com/2023/08/toward-quantum-resilient-security-keys.html

"Security Cryptography Whatever" is hosted by Deirdre Connolly (@durumcrustulum), Thomas Ptacek (@tqbf), and David Adrian (@davidcadrian)

Chapters

1. Cruel Summer: hybrid signatures, Downfall, Zenbleed, 2G downgrades (00:00:00)

2. Microarchitectural Vulnerabilities and Cybersecurity Conferences (00:00:01)

3. Discussion on Vulnerabilities (00:07:54)

4. Crypto Attacks and JWT Vulnerabilities (00:22:32)

5. Encryption and Post-Quantum Security Discussion (00:34:12)

6. Post-Quantum Cryptography and Signature Schemes (00:45:01)