New Vulnerabilities to Modern Encryption Algorithms Disclosed At the ShowMeCon Hacking and Cyber Security Conference
AUSTIN, TX / ACCESSWIRE / June 24, 2016 / CipherLoc Corporation (OTCQB: CLOK), a leading supplier of high-value security solutions, today disclosed new research covering techniques that expose further vulnerabilities in encryption algorithms that are in widespread use today. Presented at the ShowMeCon Hacking and Cyber Security Conference in St. Louis, Missouri by CipherLoc's Chief Scientist, Dr. Albert Carlson, this research builds on earlier work first disclosed in 2013 by David McGrew, Fellow at Cisco Systems and extended by CipherLoc in 2015 at DEF CON 23.
The Advanced Encryption Standard (AES) is considered to be one the strongest ciphers in the world. However, this research discusses situations in which patterns can be derived that can in turn be used to help break through the protections offered by AES and other modern encryption algorithms. This can be achieved through the use of "collision attacks." In encryption, collisions occur when two different plain text inputs result in the same cipher text outputs. When these collisions occur, an attack can be used to disclose a number of different elements including the language of the original message, the block size, the encryption method utilized, and other kinds of information that makes it possible to decrypt messages.
Furthermore, the research discloses that the presence of collisions is more frequent than commonly thought. This is due to the "birthday paradox" which states that in a random group of 23 people, there is about a 50 percent chance that two people have the same birthday. This same probability theory can be used to derive the higher-than-expected probability of collisions occurring in cipher text data.
A summary of the research was presented at the ShowMeCon security conference during Dr. Carlson's talk, "The Collision Attack - Attacking CBC and Related Encryptions." A link to the video of this talk is included below.
About CipherLoc Corporation (OTCQB: CLOK)
CipherLoc Corporation is a data security solutions company whose vision is simple - Protect the World's Data. Our highly innovative solutions are based on our patented Polymorphic Cipher Engine which is designed to enable an ironclad layer of protection to be added to existing products, services, or applications. We deliver solutions that are highly secure, synergistic, and scalable. In short, we keep information safe in today's highly dangerous world. For further information, please go to www.cipherloc.net.
This release contains forward-looking statements within the meaning of Section 27A of the Securities Act of 1933, as amended, and Section 21E of the Securities Exchange Act of 1934, as amended. All forward- looking statements are inherently uncertain as they are based on current expectations and assumptions concerning future events or future performance of the company. Readers are cautioned not to place undue reliance on these forward-looking statements, which are only predictions and speak only as of the date hereof. In evaluating such statements, prospective investors should review carefully various risks and uncertainties identified in this release and matters set in the company's SEC filings. These risks and uncertainties could cause the company's actual results to differ materially from those indicated in the forward-looking statements.
CONTACT: CipherLoc Corporation 1291 Galleria Drive Suite 200 Henderson, NV, 89014
Video: https://youtu.be/bfqJbF-rTbM
Media Contact
Mike Salas, msalas@cipherloc.net
SOURCE: CipherLoc Corporation