Crypto Project
Computer Security
Project details
Description
Developed real-world cryptographic attacks in Python across multiple insecure systems:
- Length-extension attack on MD5/SHA‑256 to forge API commands without knowing the HMAC secret
- MD5 collision attack using fastcoll to create good.py and evil.py with identical hashes but different behavior
- Padding oracle attack to decrypt AES‑CBC + HMAC-encrypted messages by manipulating ciphertext blocks
- RSA signature forgery using Bleichenbacher’s e=3 vulnerability to bypass flawed public key verification logic
- Explored cryptographic design flaws and secure protocol principles through hands-on attacks and debugging
-
Start Date:
Jan 8th, 2025 -
End Date:
Feb 5th, 2025 -
Github:
Private -
Course:
EECS388 -
Course Topic:
Computer Security
7+
Years of Coding Experience
25
Completed CS Projects
3+