IT security and cryptography. PhD from @muni_cz and @CaFoscari. Previously postdoc at @liu_universitet. Co-author of ROCA vulnerability & RSA key biases.
Joined August 2017
- Tweets26
- Following58
- Followers35
- Likes155
Matus Nemec retweeted
1) Disclosure of ECDSA implementation vulnerabilities in cryptographic smartcards and libraries minerva.crocs.fi.muni.cz. Leakage of random nonce length enough for full recovery of EC private key after observing a few hundred to a few thousands of signatures.
Matus Nemec retweeted
Stefano on the stage presenting "Postcards from the Post-HTTP World: Amplification of HTTPS Vulnerabilities in the Web Ecosystem" at #SP19 @IEEESSP The full paper, talk preview video and main findings are available at secgroup.github.io/tlswebsca…
Matus Nemec retweeted
Happy to announce that our paper "Postcards from the Post-HTTP World: Amplification of HTTPS Vulnerabilities in the Web Ecosystem" has been accepted at #SP19 (Oakland)! Joint work with @SteCalza85 @rfocardi @MatusCrypto @alvisee More info at secgroup.github.io/tlswebsca… @IEEESSP
Matus Nemec retweeted
The online ad tech industry has created an extraordinarily invasive surveillance infrastructure that threatens our democracy. But the most tragic thing is how little has been gained—how poorly ad tech works despite all the data.
The numbers are all fking fake, the metrics are bullshit, the agencies responsible for enforcing good practices are knowing bullshiters enforcing and profiting off all the fake numbers and none of the models make sense at scale of actual human users. nymag.com/intelligencer/2018…
Matus Nemec retweeted
Congrats to our @MatusCrypto who just scored 2nd place at @CsawEurope Applied Research Competition for #ROCA paper (factorable RSA keys from smartcards, eID, TPMs...) 🍾 See poster here: crocs.fi.muni.cz/_media/publ…, all details here: roca.crocs.fi.muni.cz
Thank you, and many thanks to @GrenobleINP and @Esisar for the great event at @CsawEurope 2018!
Congrats to our @MatusCrypto who just scored 2nd place at @CsawEurope Applied Research Competition for #ROCA paper (factorable RSA keys from smartcards, eID, TPMs...) 🍾 See poster here: crocs.fi.muni.cz/_media/publ…, all details here: roca.crocs.fi.muni.cz
Matus Nemec retweeted
My @ruhrsec talk at #ROCA vulnerability allowing practical factorization of RSA keys from Infineon smartcards now available youtube.com/watch?v=b2HRH6zq… Make sure to see other talks as well! teapawt.org/ruhrsec/status/1004293…
You can find the talks of the second day of #ruhrsec 2018 on Youtube now. Enjoy Edgar Weippl, @rngsec, Falko Strenzke, @hanno, @roeslpa, @SniperSister, Damian Poddebniak and @dr4ys3n and their talks one more time.
youtube.com/watch?v=WYa6WuHZ…
Matus Nemec retweeted
Because of #GDPR, USA Today decided to run a separate version of their website for EU users, which has all the tracking scripts and ads removed. The site seemed very fast, so I did a performance audit. How fast the internet could be without all the junk! 🙄
5.2MB → 500KB
Matus Nemec retweeted
Tým #CRoCS #fimuni je na světové špičce v oblasti informatické bezpečnosti a kryptografie, mimo jiné díky objevu bezpečnostní chyby v čipech v občanských průkazech několika států. Zasloužili si tak i ocenění rektora Mikuláše Beka. online.muni.cz/udalosti/1056…
Matus Nemec retweeted
Cool TCHES paper on exploiting padding oracle to break SCP02 tches.iacr.org/index.php/TCH…
Matus Nemec retweeted
Estonian RIA practically factorized real 2048b RSA #ROCA vulnerable key (CVE-2017-15361) of one of EE eID program leaders and decrypted his encrypted file. Took few months and electricity cost was "a couple of thousands of euros" (article behind paywall) epl.delfi.ee/news/eesti/id-k…
Matus Nemec retweeted
Come to our member M. Ukrop's talk at Cryptographers track at @RSAConference: "Why Johnny the Developer Can’t Work with Public Key Certificates: An Experimental Study of OpenSSL Usability" All details here: crocs.fi.muni.cz/papers/rsa2… #usablesecurity
Matus Nemec retweeted
Want to freak yourself out? I'm gonna show just how much of your information the likes of Facebook and Google store about you without you even realising it
Matus Nemec retweeted
We will continue to protect #NetNeutrality in Europe, ensuring that all traffic is treated equally:
→ Every European must be able to have access to the #openinternet
→ No blocking or discrimination of online content, applications and services
europa.eu/!xB44Bg
Matus Nemec retweeted
The #ROBOT attack - Return of Bleichenbacher's Oracle Threat robotattack.org/
Matus Nemec retweeted
Our paper with measurement of popularity of #crypto libraries now available crocs.fi.muni.cz/papers/acsa… online. All tools also available github.com/crocs-muni/classi… thx @ACSAC_Conf for Artifact Evaluation Initiative! Going to be presented by @MatusCrypto soon
Matus Nemec retweeted
I put part of the #ROCA attack on exam for 1st year master students
hyperelliptic.org/tanja/teac… Under stress and time pressure several students noticed how massively reduced the key space is (we didn't do the Coppersmith part). Really must move to other RSA prime generation or ECC.
