655 research outputs found
The Return of Coppersmith's Attack: Practical Factorization of Widely Used RSA Moduli
No full textWe report on our discovery of an algorithmic flaw in the construction of primes for RSA key generation in a widely-used library of a major manufacturer of cryptographic hardware. The primes generated by the library suffer from a significant loss of entropy. We propose a practical factorization method for various key lengths including 1024 and 2048 bits. Our method requires no additional information except for the value of the public modulus and does not depend on a weak or a faulty random number generator. We devised an extension of Coppersmith's factorization attack utilizing an alternative form of the primes in question. The library in question is found in NIST FIPS 140-2 and CC EAL 5+ certified devices used for a wide range of real-world applications, including identity cards, passports, Trusted Platform Modules, PGP and tokens for authentication or software signing. As the relevant library code was introduced in 2012 at the latest (and probably earlier), the impacted devices are now widespread. Tens of thousands of such keys were directly identified, many with significant impacts, especially for electronic identity documents, software signing, Trusted Computing and PGP. We estimate the number of affected devices to be in the order of at least tens of millions.
The worst cases for the factorization of 1024 and 2048-bit keys are less than 3 CPU-months and 100 CPU-years on single core of common recent CPUs, respectively, while the expected time is half of that of the worst case. The attack can be parallelized on multiple CPUs. Worse still, all susceptible keys contain a strong fingerprint that is verifiable in microseconds on an ordinary laptop -- meaning that all vulnerable keys can be quickly identified, even in very large datasets
I Want to Break Square-free: The 4p − 1 Factorization Method and Its RSA Backdoor Viability
No full textWe analyze Cheng's 4p-1 factorization method as the means of a potential backdoor for the RSA primes generated inside black-box devices like cryptographic smartcards, and we devise three detection methods for such a backdoor. We also audit 44 millions of RSA keypairs generated by 18 different types of cryptographic devices. Finally, we offer an improved, simplified and asymptotically deterministic version of the method, together with a deeper analysis of its performance and we publish a Sage implementation (we are currently not aware of any other public implementation)
Minerva: The curse of ECDSA nonces
No full textWe present our discovery of a group of side-channel vulnerabilities in implementations of the ECDSA signature algorithm in a widely used Atmel AT90SC FIPS 140-2 certified smartcard chip and five cryptographic libraries (libgcrypt, wolfSSL, MatrixSSL, SunEC/OpenJDK/Oracle JDK, Crypto++). Vulnerable implementations leak the bit-length of the scalar used in scalar multiplication via timing. Using leaked bit-length, we mount a lattice attack on a 256-bit curve, after observing enough signing operations. We propose two new methods to recover the full private key requiring just 500 signatures for simulated leakage data, 1200 for real cryptographic library data, and 2100 for smartcard data. The number of signatures needed for a successful attack depends on the chosen method and its parameters as well as on the noise profile, influenced by the type of leakage and used computation platform. We use the set of vulnerabilities reported in this paper, together with the recently published TPM-FAIL vulnerability [MSE+20] as a basis for real-world benchmark datasets to systematically compare our newly proposed methods and all previously published applicable lattice-based key recovery methods. The resulting exhaustive comparison highlights the methods’ sensitivity to its proper parametrization and demonstrates that our methods are more efficient in most cases. For the TPM-FAIL dataset, we decreased the number of required signatures from approximately 40 000 to mere 900
Protein NMR on a chip: Development of an integrated microfluidic platform for studying protein-ligand interactions by nuclear magnetic resonance
No full textThis work demonstrates the performance of the integrated microfluidic sys tem for studying protein-ligand interactions by nuclear magnetic resonance (NMR). The platform couples together the advantages associated with microfluidic operation, i.e. minimised sample use and precision of operation, and characterisation by NMR. NMR offers unique capabilities for biomolecular research, relating to its non-invasive and non-destructive nature and atomic-scale resolution. This enables identification of the number and location of interaction sites, allosteric effects, atomic structures, dynamics of ligands and proteins, as well as full thermodynamic evaluation of the interaction. Integrating the aforementioned aspects can open new avenues for protein analysis, on one hand enhancing the usually limited throughput and functionality of NMR, on the other providing an extensive readout method to microfluidic systems, that can be fur ther linked with other analytical tool
Jezus en de ziel : een geestelyke spiegel voor 't gemoed, bestaande in veertig aangenaame en stichtelyke zinnebeelden /
No full textSignatures: A-M⁸.Etched frontispiece and 39 emblems.First published 1678. Luiken re-etched the plates for the 1714 ed. See Landwehr.Landwehr, J. Emblem and fable books (3rd ed.)Mode of access: Internet.Binding: vellum. Author & title written at head of spine. Edges sprinkled red & blue
PROPHET – JESTER – LEGEND: AUTHOR’S TRAJECTORY OF ANATOL SYS
No full textАrtykuł jest poświęcony złożonej trajektorii autorskiej Anatola Sysa (1959-2005), którego niezwyczajny los intryguje czytelnika nie mniej niż jego utwory poetyckie i wymusza na badaczach poszukiwanie wciąż nowych sposobów interpretacji jego artystycznych i życiowych metamorfoz. Ze wspomnień przyjaciół, artykułów naukowych i utworów artystycznych wyłania się sprzeczny wizerunek pisarza: głos pokolenia, przeciwnik ideologii komunistycznej, prorok odrodzenia narodowego, Geniusz, poeta obrzydliwy, błazen, alkoholik, wyrodek, cham. Owa różnorodność i odmienność interpretacji w ocenie osobowości Anatola Sysa oraz miejsca, które jego twórczość zajmuje w historii literatury białoruskiej, uzasadniona jest zdaniem autora artykułu trzema przyczynami: 1) niezwykłą i sprzeczną naturą poety; 2) specyfiką krótkiego okresu, w którym żył Anatol Sys, obejmującego trzy epoki: radziecką (do 1984 roku), epokę reform i odrodzenia narodowego (1985-1992) і epokę Alaksandra Łukaszenki (od 1994 roku); 3) złożoną trajektorią życiowej i twórczej drogi poety, w której można wyróżnić trzy okresy: wczesny, patriotyczny i przeklęty (okres przynależności do cyganerii artystycznej). Jeszcze za życia Anatola Sysa jego osoba zaczęła obrastać w mity i legendy, a po śmierci poety jego najlepsze utwory weszły do kanonu literatury narodowej XX wieku.The article is dedicated to a complicated trajectory of the outstanding Belarusian poet Anatol Sys (1959-2005), whose unusual fate intrigues readers no less than his poetry, and makes researchers search for new explanations of metamorphoses in his life and creative work. From the memoirs of contemporaries, academic articles and works of art an extremely controversial image of the writer arises: a leader of the generation, a fighter with Communist ideology, a prophet of the national revival, a Genius; a disgusting poet, a jester, an alcoholic, a freak, a boor. There have been various assessments of Sys’s personality and the place of his work in the history of the Belarusian literature which “in the opinion of the author, originate for the following three reasons: 1) the extraordinary and contradictory nature of the poet; 2) the nature of the interval the time in which Sys lived and which falls into three epochs: stagnant Soviet (before 1984), transition-renaissance (1985-1992), and Lukashenko’s (since 1994); 3) a complex trajectory of the poet’s life and creative path which can be divided into three stages: initial, revival and Bohemian (“infernal”). Even during his life, the personality of Anatol Sys began to acquire myths and legends, and after his death, his best works entered the canon of the national literature of the 20th century
Relatório técnico sobre as atividades realizadas na empresa Sys Manager no período de 14 de novembro de 2022 até 14 de maio de 2023
No full textO autor deste relatório técnico atua na Sys Manager desde março de 2022, onde participou do
2o WorkShop Sys Manager sobre OutSystems e se destacou entre os candidatos, sendo
aprovado para a vaga de estágio Outsystems. Foram 8 meses de atuação como estagiário de
desenvolvimento Outsystems. Em 14 de novembro de 2022, o autor foi contratado pela
mesma empresa como desenvolvedor Outsystems, e as atividades desenvolvidas e que serão
apresentadas no Capítulo 3 são como trabalhador efetivo da empresa. O objetivo deste
trabalho é descrever as atividades desenvolvidas pelo autor na empresa Sys Manager, no
período entre 14 de novembro de 2022 até 14 de maio de 2023 (6 meses). Antes de apresentar
as atividades desenvolvidas, inicialmente será contextualizada a empresa em que o autor deste
relatório atua. Também será realizada uma apresentação da plataforma low-code Outsystems,
para um entendimento mais adequado das atividades que serão apresentadas. Por fim, um
total de 15 tarefas realizadas pelo autor na empresa Sys Manager serão apresentadas. As
atividades apresentadas e realizadas na empresa durante o período de tempo escolhido, bem
como outras feitas fora do período citado no título do relatório, trouxeram para o autor
diversas competências e habilidades, tais como: resolução de problemas; desenvolvimento
front-end, HTML e de folhas de estilo de CSS3; habilidades com modelagem de dados e como
os dados são utilizados no sistema no desenvolvimento back-end; SQL; e JavaScript. Além
disso, habilidades de comunicação, trabalho em equipe, experiência de usuário (UX) e
desenvolvimento web com o dev tools (atalho F12 nos navegadores) foram muito praticadas
na rotina de trabalhoThe author of this technical report has worked at Sys Manager since March 2022,
where he participated in the 2nd Sys Manager WorkShop on OutSystems and stood out
among the candidates, being approved for the Outsystems internship position. It took me 8
months to work as an Outsystems development intern. On November 14, 2022, the author was
hired by the same company as an Outsystems developer, and the activities developed and
which will be presented in Chapter 3 are as a permanent employee of the company. The
objective of this work is to describe the activities carried out by the author at the company Sys
Manager, in the period between November 14, 2022 and May 14, 2023 (6 months). Before
presenting the activities developed, the company in which the author of this report works will
initially be contextualized. There will also be a presentation of the Outsystems low-code
platform, for a better understanding of the activities that will be presented. Finally, a total of
15 tasks performed by the author at Sys Manager will be presented. The activities presented
and carried out in the company during the chosen period of time, as well as others carried out
outside the period mentioned in the title of the report, brought the author several skills and
abilities, such as: problem solving; front-end, HTML and CSS3 stylesheet development; skills
with data modeling and how data is used in the system in back-end development; SQL; and
JavaScript. Furthermore, communication skills, teamwork, user experience (UX) and web
development with dev tools (shortcut F12 in browsers) were heavily practiced in the work
routine60 p
A survey on the use and impact of information technology in quantity surveying service delivery in Nigeria
No full textThe construction industry has recently witnessed a paradigm shift from traditional paper-based method of service delivery to electronic information exchange using Information Technolog (IT), at least in the western world like UK. It is now evident that the adoption of IT can enhance construction productivity and improve communications for effective decision-making and coordination among construction participants. The ability of the industry to avail itself of technology depends on the level of usage by construction participants including the Quantity Surveyor (QS) who plays a major role in the management of project success determinants, such as cost, time and quality. This research therefore evaluates the level of adoption of IT by QS in Nigeria and its impact in discharging their professional obligations to achieve improved service delivery. A review of the relevant literature using published sources was conducted to identify the current state and use of IT in the industry in various parts of the world. In order to assess the level of adoption of technology by QS in Nigeria and to evaluate its impact on their service delivery, data collected through questionnaires administered to practicing professionals were analysed and subsequently ranked using their mean item score (MIS) and the Kruskal Wallis H test. The research revealed that despite the average to high awareness of the importance of IT in improving service delivery and productivity, QS in Nigeria are still reluctant in using these technologies mainly due to the high initial cost of acquisition; lack of infrastructures to support its use and security concerns such as the susceptibility of IT system. It is concluded that the Nigerian Institute of Quantity Surveyors should act as a champion in raising the awareness of IT among its members and the Government should provide an enabling environment for its importation and usage
History of the labour law and the contemporary labor market policy in Poland
No full textW 1989 r. rozpoczął się w Polsce proces transformacji systemowej, który dotyczył także rynku pracy. Proces ten został oparty na odrzuceniu dotychczasowego stanu prawnego w zakresie prawa pracy. W badaniu zmian dotyczących rynku pracy autor wykorzystał analizę instytucjonalno-prawną w połączeniu z decyzyjnym ujęciem polityki i posłużył się analizą propozycji programowych partii politycznych działających w Polsce. Badania objęły okres transformacji systemowej i zmiany ostatnich lat (od 2014 r.).In 1989, he began the process of systemic transformation, which concerned the labor market, based on a rejection of the current legal status of labor law. In the study, changes in the market, the author used the analysis of the institutional and legal in conjunction with the recognition decision policy. The author took the research period of sys-temic transformation and change in recent years (since 2014) with the proposals programmatic political parties
Tilting at Windmills : BLDSC and the UK Higher Education Community
No full textPurpose - To provide an overview of, the relationship between the British Library and higher education libraries in the 1990s, with particular relation to document supply. It also goes on to explore current developments in scholarly communication. Design/methodology/approach - The author played a role in several of the events described and uses the available literature to enlarge on a personal view of that decade. Findings - The paper shows that the relationship was a strained one caused in part by a mismatch of resources, but is in any case dwarfed by the larger external forces and changing opportunities and technologies for scholarly communication. Originality/value - Provides a record of the period
- …
