About this talk
This talk discusses the discovery of a vulnerability present in various TLS/SSL cryptographic toolkits. The speaker introduces their ASN.1 templating tool, which is a Perl script that converts the output from the `asn1parse` OpenSSL CLI command into a textual format to help reconstruct the original ASN.1 structure. The session explores how this tool identifies issues within certain OpenSSL CLI applications and demonstrates that these problems can be extended to other cryptographic toolkits. The speaker also examines potential exploits that could deceive unsuspecting administrators.
More from this event
See all 30 talks →
Nullcon Goa 2025: Securing the chains: Building defensive layers for software supply chains
38:14
Nullcon Goa 2025 | Large-Scale Exposure Of Orphaned Commits On Major Git Platforms by Kumar Ashwin
26:30
Nullcon Goa 2025 | Panel: Modernizing Security Architecture: Platforms or Best-of-Breed, What Works?
44:47
Nullcon Goa 2025: Panel | Cyber Fusion Center: The Command Center For Integrated Cyber Defense
42:01