Resources(82)

  • Race condition in key creation and key rotation exposes private keys of Tang server

    Brian McDermott

    The Tang open source software is used to bind data to network presence. It is commonly used along with Clevis clients to provide for unattended LUKS decryption of server storage volumes within the realms of a network, where a trusted Tang server is situated. CENSUS identified that the Tang software in versions 11, 12...

  • Using SystemTap to determine the exploitability of unbound memory overflows

    Nikolaos Naziridis

    Hello, my name is Nikos Naziridis and I am a security researcher at CENSUS. In this post, I will present how SystemTap and kernel instrumentation in general, could be used to aid the process of determining the exploitability of unbound memory overflows and the detection of thread race condition bugs.