PGP: Applied Cryptography and Operational Security
DDT- PGP: What PGP and crypto is and how to use (and not use) it.
Summary
Architecture and Background
DDT present 'PGP: Applied Cryptography and Operational Security' at DEF CON 8, reviewing foundational threat dynamics and system principles surrounding pgp, cryptography, email-security, key-management in the privacy arena.
Vulnerability Analysis
The technical analysis dissects design vulnerabilities, protocol flaws, and architectural assumptions relevant to enterprise networks.
Exploitation and Demonstrations
DDT- PGP: What PGP and crypto is and how to use (and not use) it.
Remediation and Defensive Strategies
System defenders and security engineers are provided actionable hardening steps, monitoring indicators, and mitigation guidelines to reduce exposure.
Related talks
Main Stage·23 min
Jens Muller
Extends EFAIL research with new covert channel attacks that exfiltrate PGP and S/MIME plaintext without triggering known detection mechanisms.
Main Stage·49 min
Jon Callas
PGP co-creator Jon Callas explores the technical, usability, and policy hurdles preventing widespread adoption of end-to-end encrypted messaging.
Crypto Village·45 min
Hanno Böck
Hanno Böck reveals critical flaws in STARTTLS implementations across mail servers and clients, demonstrating command injection and credential theft via protocol downgrade attacks.