/Deadpool

Repository of various public white-box cryptographic implementations and their practical attacks.

Primary LanguagePythonGNU General Public License v3.0GPL-3.0

Deadpool

Our hero took the name Deadpool during the time he was experimented on:
The guards had a dead pool and gambled on which test subject would die next...
By the way, in the comics, the white boxes are Deadpool's crazy alternative inner voice.

Deadpool is a repository of various public white-box cryptographic implementations and their practical attacks.

Attacks

White-box implementations

A Linux binary implementing a DES.

A Windows binary implementing an AES 128.

A Linux binary implementing an AES 128.

A Python serialized object implementing a DES.

A Windows binary implementing an AES 128 with uncompensated external encodings.

Variants of the NoSuchCon 2013 challenge, using the same white-box generator but compiled for Linux, without obfuscation and with compensated external encodings.

A Linux binary implementing an AES 128.

A GameBoy ROM implementing an AES 128.

An implementation of Chow written in Go, implementing an AES 128.

An implementation of Xiao-Lai written in Go, implementing an AES 128.

An implementation of OpenWhiteBox paper written in Go, implementing an AES 128.

A Linux binary (and source) implementing an AES 128.

A JavaScript implementing an AES 256 with diversified round keys.

A Linux binary implementing an AES 128.

A Linux binary implementing an AES 128.

A linux binary implementing ... (CTF still open)

Misc