Repository of various public white-box cryptographic implementations and their practical attacks.
Switch branches/tags
Nothing to show
Clone or download
Latest commit 516e7be Nov 14, 2018

README.md

Deadpool

Our hero took the name Deadpool during the time he was experimented on:
The guards had a dead pool and gambled on which test subject would die next...
By the way, in the comics, the white boxes are Deadpool's crazy alternative inner voice.

Deadpool is a repository of various public white-box cryptographic implementations and their practical attacks.

Attacks

Differential Computation Analysis

Differential Fault Analysis

White-box implementations

Wyseur 2007 challenge

A Linux binary implementing a DES.

Hack.lu 2009 challenge

A Windows binary implementing an AES 128.

Karroumi 2010 challenge

A Linux binary implementing an AES 128.

SSTIC 2012 challenge

A Python serialized object implementing a DES.

NoSuchCon 2013 challenge

A Windows binary implementing an AES 128 with uncompensated external encodings.

NoSuchCon 2013 variants

Variants of the NoSuchCon 2013 challenge, using the same white-box generator but compiled for Linux, without obfuscation and with compensated external encodings.

PlaidCTF 2013 challenge

A Linux binary implementing an AES 128.

CHES 2015 challenge

A GameBoy ROM implementing an AES 128.

OpenWhiteBox AES Chow

An implementation of Chow written in Go, implementing an AES 128.

OpenWhiteBox AES Xiao-Lai

An implementation of Xiao-Lai written in Go, implementing an AES 128.

OpenWhiteBox AES Full

An implementation of OpenWhiteBox paper written in Go, implementing an AES 128.

CHES 2016 challenge

A Linux binary (and source) implementing an AES 128.

Kryptologik challenge

A JavaScript implementing an AES 256 with diversified round keys.

Lee CASE1 challenge

A Linux binary implementing an AES 128.

RHME3 prequal whitebox challenge

A Linux binary implementing an AES 128.

White Magic challenge

A linux binary implementing ... (CTF still open)

Misc

RHME3 prequal SCA challenge