Download pdf - Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

Transcript
Page 1: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

SESSIONID:SESSIONID:

#RSAC

KonstantinosKaragiannis

HackingBlockchain

PDAC-T10F

ChiefTechnologyOfficer,SecurityConsultingBTAmericas@konstanthacker

Page 2: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Anotherseachangeuponus

Page 3: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

ItallstartedHalloween2008…

3

Page 4: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Bitcoin

4

Satoshi’saltruisticgoalsmet

Stronginvestment—5milliondollarpizza

Widespread“positioning”ofcryptocurrency

Literallyandfigurativelycreatedtheblockchainmovement

Page 5: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Blockchain transactionandverification

5

Partiesexchangedata

Transactionverifiedorqueued

Page 6: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Blockchain structureandvalidation

6

Eachblockidentifiedbyhash

Blocksmustbevalidatedtobeaddedtochain

Page 7: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Blockchain mining andchain

7

Miners“solvepuzzle”(proofofwork)

Minersrewarded,blockaddedtomajoritychain

Page 8: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Blockchain defense

8

Tryingtosubmitanalteredblockwouldchangehashfunctionofthatblockandallfollowingblocks—nodeswoulddetectandrejectblock.

Page 9: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Someproposedblockchain applications

9

Digitalassets

Identity(blackbox)

Verifiabledata

Smartcontracts

Page 10: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Attackspastandpresent

Page 11: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Quickcaveat

11

NotallowedtodiscussvulnerabilitiesfoundduringethicalhacksofBT-clientfinancialapplications

Publicizedexamplesfollowtohighlighttypesofattackspossible

Mayuseoccasional“guesses”tofillinblanksbasedonexperience

IfI’mwrong,Iknowtheattacksstillwork!

Page 12: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

1RETURN– responsibledisclosure

12

Firstsecurityvuln identifiedJuly,2010byArtForz

Allowsspendingofotheruser’sbitcoinsviaSig OP_1 OP_RETURN

Satoshikept1RETURNquietasherolledoutapatch

ArtForz provedSatoshi’sbeliefearlyuserswouldwanttomaintainvalueinBitcoin

Page 13: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Attacksagainstblockchain infrastructure

13

Mt.Gox firstmajorbitcoindisasterJune2011:$8millionstolen(adminpw)Feb2014:$460millionstolen(transactionmalleability)

NoversioncontrolsoftwareinMt.Gox—bugfixesoftendelayed,untestedcodepushedstraighttoproduction

Gatecoin hackedMay2016viaaserverdisruptionandreboot(bypassingmultisig coldwallets)—moremodest250BTCand185,000ETH.

Page 14: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Attacksagainstcode

14

DAOsmartcontractflawknownofsinceMay2016

June17,hackerusedrecursiveflawtomakesplitsinsidesplits,movingEtherrepeatedlywithoutchecking“balance”

Hardforkresulted

Page 15: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Attacksagainstblockchain sites

15

2013,paymentsprocessorInputs.iositecompromised—for$1million(socialengineering)

Steemit blockchain-basedbloggingplatformwebsiteauthenticationtargetedJuly(no2FA)—$85,000fundsstolenbytransactions(hardforkafter)

ReportsofCoinbase hackingincidentsappearonthenetregularly.Insuredagainstmassbreach,notindividualcredentialattacks

Page 16: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Attacksagainsthotwallets

16

Dec7,hackercompromisesVCBoShen’sphone,gainingaccessto$300,000inAugurandEtherfromwallet

Ransomwareobviousissue,butmalwarethatstealscredentialslikeMokes.A canleadtotransactions

Androidphonesmoresusceptiblethaneverduetopoorupdatinginallbutnewestdevices

Page 17: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Attacksagainstcoldwallets

17

Bitfinex triedtoremoveriskof“securityexposures”byaddinganextralayerviaBitGoBitGo aspartofmultisig itseemscoulddowhateveritwishedColdwalletsturnedhotAug2016Over$70millionswipedLossesof36%acrossallusersunlikeFDIC

Page 18: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Attacksagainstnodes

18

MajornodeattackthwartedAug2010—Bitcoinblock74638flawcouldgenerate184Billiontransactions!Sept18,Geth nodes(Ethereum)ranoutofmemoryandcrashedonblock2283416(Ethereum classicsabotage?)Aug,KryptonandShifthitbyproofofconcept51%attack—overpoweredbyrentedNiceHash hashpowerScanningfornodestotarget(e.g.TCPport8333)possible

Page 19: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Traditionalriskstonewapplications

19

DigitalassetsOwnership

IdentityBlackboxinteractionsatrisk

VerifiabledataMalicioustransactions

SmartcontractsCodeflaws,repudiation

Page 20: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Comingattacksagainstblockchain’s biggestflaw

Page 21: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

RememberSatoshi’swords?

21

August2015:NSApubliclywarnedagainstusingECC,thetypeofencryptioninblockchain

Page 22: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Ellipticcurvecryptography

22

Publickeysystem,likeRSA,ElGamal,Rabin

Basedonalgebraicstructureofellipticcurvesoverfinitefields

Publickeyforencryptionorsigvalidation

Privatekeyfordecryptionorsiggeneration

Page 23: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

ECCBitcoinexample

23

Bitcoinwalletaddressesmadeof:Publickey,privatekey,andaddress

Publickeyderivedfromprivatekeybyellipticcurvemultiplication

Addressderivedby:applyingSHA256hashfunctiontopublickeyapplyingRIPEMD-160hashfunctionaddingchecksumforerrorcorrection

“Used”bitcoinorotherentitieshavepublickeysexposedonblockchain

Page 24: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Quantumthreatlooming

24

QuantumcomputerscancrackECC

Machinesexploitquantum“weirdness”ofsuperpositiontoallowexistenceofqubits

Qubitscanbeapercentageofbothzeroandoneatthesametime

Qubitsandspecialalgorithmsallowquantumcomputerstodothingsclassicalcomputerscan’tdointhousandsofyears

Page 25: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

World’seasiestexplanationofsuperposition

25

Expectedparticlebehavioror“pooling”

Page 26: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

World’seasiestexplanationofsuperposition

26

Wavepatternwithoutobservationofwhichslitaparticlegoesthrough

Page 27: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

World’seasiestexplanationofsuperposition

27

Evenoneparticlegoingthroughatatimecreateswavepattern

Page 28: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

World’seasiestexplanationofsuperposition

28

Useadetectoroneitherslit,andpoolingappears:particle-waveduality

Page 29: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Maintainingsuperposition

29

Observingeitherslitdestroyedthesuperposition

Quantumcomputersneedtomaintainsuperpositionamongmanyqubitstoperformcalculations

UniversityofMarylandandothershavefoundnewwaystochaintogetherqubits

Page 30: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Withenoughstablequbits…

30

AquantumcomputercanrunShor’salgorithm(1994)andquicklycrackanypublickeyencryptionbyfindingfactorsoflargenumbers

Likelyanswersinterfereconstructively,unlikelyonesdestructively

Simplequantumcomputersrunitwithtwophotonicqubits,showing21=3*7

Within3yearsQCsmayhavehundredsofqubits

Page 31: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Bitcoinexamplewithin3years

31

Bitcointransactionincludesasignatureandapublickeytoverifyowner

Thatpubliclyavailableinformationisallaquantumcomputerneedstogetprivatekeyand“become”anotheruser

Thistypeofattackcanbedonepassively(offline)bydownloadinganytypeofblockchain

Noreuse?

Page 32: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Lamport signatures—astopgap?

32

Publickeyconsistsof320hashesratherthananellipticcurvepoint

AddressisSHA256+RIPEMD-160hashofpublickey

Transactionincludespublickeyandsignature—verifierscheckif:publickeymatchesaddresssignaturematchesmessageandpublickey

EvenwithGrover’salgorithm,ittakes2^80stepstoconstructafraudulenttransactionor2^80*80stepstocrackallhashes(trillionsoftrillions)

Page 33: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Post-quantumcrypto

33

Codebased

Hashbased

Latticebased

Multivariatequadraticequations

Onetimepad

liboqs,opensourceClibrary(https://openquantumsafe.org/haveforkforSSLaswell)

Page 34: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Applythesewarnings!

34

Assoonaspossible,takeanewlookatanyblockchain applicationsyou’redevelopingorusinginyourcompany

Besureanyoftheseapplicationsactuallyneedtobeblockchainbased,considering:securitypermanenceofdata(beingabletomakechangescanbeagoodthing)whethercurrenttechnologymaybesuperior(noteverythingshouldbebc)

Isyourblockchain appanoverlaytoaprovenblockchain andprotocol,orisitpotentiallytoountestedforcriticalapplications?

Page 35: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Applythesewarnings!

35

Withinthenextthreemonthsprioritizetestingthesecurityofblockchain applicationsbytheircriticalitytoyourbusiness

Performethicalhackingengagementsagainsttheimplementation ofyourplatform—rememberallthebasicflawsthatundoevensoundcrypto

Makesureyourethicalhackershaveactuallyworkedwithblockchainprotocolsbefore—thisisn’tthetimeforavendortolearnonyourdime

Page 36: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Applythesewarnings!

36

Lookingahead,sixmonthsandon,whatcanyoudotoensurethefutureofblockchain security

It’stoolatetodevelopapplicationsthatarenotpost-quantumsafe

Considerinvestingyourdevresourcestogivesomethingbacktoblockchain

NISThasmadecalltoarmstodeveloppostquantumcryptosolutionsforPK—workingonthiscouldimprovebc goingforward (http://www.nist.gov/pqcrypto)

Page 37: Hacking Blockchain - RSA Conference · SESSION ID: #RSAC Konstantinos Karagiannis Hacking Blockchain PDAC-T10F Chief Technology Officer, Security Consulting BT Americas @konstanthacker

#RSAC

Questions?Pleasejoinmefora“focuson”session(FON4-T11)todayinMoscone West2024from3:45to4:15

@konstanthacker


Recommended

Karagiannis Et Al
Karagiannis Et Al Documents
@konstanthacker Konstantinos Karagiannis
@konstanthacker Konstantinos Karagiannis Documents
Www.kellyco.com.au | Australian Charities and Not-for-profits Commission (ACNC) Nick Karagiannis, Partner nkaragiannis@kellyco.com.au
Www.kellyco.com.au | Australian Charities and Not-for-profits Commission (ACNC) Nick Karagiannis, Partner [email protected] Documents
Hacking health-camp - Hacking Health
Hacking health-camp - Hacking Health Government & Nonprofit
TO: Development Assessment Panel FROM: Manager … · dwellings (ERD Court Compromise) Owner of land Panagiotis Karagiannis and Amalia Karagiannis Zone Mixed Use Zone ... laundry
TO: Development Assessment Panel FROM: Manager … · dwellings (ERD Court Compromise) Owner of land Panagiotis Karagiannis and Amalia Karagiannis Zone Mixed Use Zone ... laundry Documents
Hacking Google AdWords - DEF CON® Hacking … · Hacking Google AdWords ... • Use general Google hacking techniques • Bust anyone who is “Google hacking”! Other Interesting
Hacking Google AdWords - DEF CON® Hacking … · Hacking Google AdWords ... • Use general Google hacking techniques • Bust anyone who is “Google hacking”! Other Interesting Documents
USI THE CONFERENCE · USI THE CONFERENCE Knowledge has ... Web Giants Transhumanism ... Lean Startup Corporate Liberation Culture Hacking Blockchain …
USI THE CONFERENCE · USI THE CONFERENCE Knowledge has ... Web Giants Transhumanism ... Lean Startup Corporate Liberation Culture Hacking Blockchain … Documents
P3 2-dimitris karagiannis-v2
P3 2-dimitris karagiannis-v2 Technology
Sample size calculation Ioannis Karagiannis based on previous EPIET material
Sample size calculation Ioannis Karagiannis based on previous EPIET material Documents
Hacking / Hacking Exposed 6: Network Security Secrets ...media.techtarget.com/searchMidmarketSecurity/downloads/Hacking_exposed... · Hacking / Hacking Exposed 6: Network Security
Hacking / Hacking Exposed 6: Network Security Secrets ...media.techtarget.com/searchMidmarketSecurity/downloads/Hacking_exposed... · Hacking / Hacking Exposed 6: Network Security Documents
Hacking and Anti Hacking
Hacking and Anti Hacking Technology
# !@ Ethical Hacking. 2 # !@ Ethical Hacking - ? Why – Ethical Hacking ? Ethical Hacking - Process Ethical Hacking – Commandments Reporting
# !@ Ethical Hacking. 2 # !@ Ethical Hacking - ? Why – Ethical Hacking ? Ethical Hacking - Process Ethical Hacking – Commandments Reporting Documents
HACKING AUTHENTICATION CHECKS IN WEB … · INDEX •Hacking Authentication Checks in Web Applications Hacking Application Designs Hacking J2EE Container Managed Authentication Hacking
HACKING AUTHENTICATION CHECKS IN WEB … · INDEX •Hacking Authentication Checks in Web Applications Hacking Application Designs Hacking J2EE Container Managed Authentication Hacking Documents
Blockchain Technology Transaction Processing, Challenges ... · Advantages-Disadvantages Classification Applications of Blockchain Blockchain Version 3. Blockchain Technology
Blockchain Technology Transaction Processing, Challenges ... · Advantages-Disadvantages Classification Applications of Blockchain Blockchain Version 3. Blockchain Technology Documents
Hacking and Civic Hacking
Hacking and Civic Hacking Social Media
Hacking & Ethical Hacking
Hacking & Ethical Hacking Documents
Blockchain Meetup Blockchain and Acronisblogs.asucollegeoflaw.com/lsi/...Blockchain-Meetup.pdf · • Blockchain powered Data Authentication Prototype • First Blockchain-related
Blockchain Meetup Blockchain and Acronisblogs.asucollegeoflaw.com/lsi/...Blockchain-Meetup.pdf · • Blockchain powered Data Authentication Prototype • First Blockchain-related Documents
Hacking Wireless World, RFID hacking
Hacking Wireless World, RFID hacking Technology