crypto-analysis

# Cryptographic Analysis ## When to Activate - Auditing TLS/SSL/SSH configurations and X.509 PKI (cipher suites, downgrade, protocol flaws) - Reviewing crypto implementations in source code or captured traffic - Attacking weak RSA/ECC keys (CTF and real-world weak-key hygiene) - Recovering ECDSA/DSA private keys from reused or biased nonces (lattice/HNP) - Exploiting symmetric/AEAD misuse: padding oracles, GCM nonce reuse, key-commitment - Forging JWT/JOSE tokens (algorithm confusion, none, jwk/jku/kid injection) - Cracking password hashes and grading KDF strength - Assessing post-quantum readiness ("harvest now, decrypt later" exposure) ## Technique Map | Technique | ATT&CK | CWE | Reference | Script | |-----------|--------|-----|-----------|--------| | TLS cipher/protocol downgrade audit | T1600.001 | CWE-326 | references/tls-pki-audit.md | scripts/tls_audit.py | | Terrapin SSH prefix truncation (CVE-2023-48795) | T1557 | CWE-222 | references/tls-pki-audit.md | scripts/tls_audit.py | | Marvin/Bleichenbacher RSA timing oracle | T1600 | CWE-208 | references/tls-pki-audit.md | scripts/tls_audit.py | | X.509 / CT-log shadow-asset discovery | T1589 | CWE-295 | references/tls-pki-audit.md | scripts/tls_audit.py | | RSA weak-key factoring (Fermat/Wiener/common-modulus) | T1600 | CWE-326 | references/rsa-attacks.md | scripts/rsa_attack.py | | Coppersmith partial-key & ROCA (CVE-2017-15361) | T1600 | CWE-310 | references/rsa-attacks.md | scripts/rsa_attack.py | | Hastad broadcas...