SlideShare a Scribd company logo
1 of 74
What if Turing had Python?
BREAKING
THE ENIGMA
¡HOLA!
MARIA CAMILA REMOLINA GUTIÉRREZ
● I ❤ the universe and computers
● Currently a backend developer at S4N
● I sculpt ceramics in my spare time
● Crush on cryptography + security
mariacamilarg.me/
WENEEDSECURECOMMUNICATIONS...
...since ancienttimes
EBIIL MVZLK
…tooureverydaylife
PUBLIC / PRIVATE
WWII
Enigma Machine
1900BC 1939-1945 2020
AAWSNPNLKLSTCXW
KJDFGSJRFPVLDKF...
ROTORS*
LAMPBOARD
KEYBOARD
*PLUGBOARD
*REFLECTOR
62,583,939,499,390,760,715,264,000
Combinations...
(~10^25)
So,howcanwebreakit?
?
oneflaw!
oneflaw!
A letter can never be
encrypted to itself!
oneflaw
+ Math
+ technology
Thebombe!
HOWDOWEBREAK
THEENIGMA?
FINDING
A CRIB
AAWSNPNLKLSTCXWKJDFGSJRFPVLDKFCSD...
FINDING
A CRIB
ATTACKATDAWN
AAWSNPNLKLSTCXWKJDFGSJRFPVLDKFCSD...
FINDING
A CRIB
ATTACKATDAWN
?
AAWSNPNLKLSTCXWKJDFGSJRFPVLDKFCSD...
FIND ALLPOSSIBLETRANSLATIONSOFTHATCRIB
ATTACKATDAWN
AAWSNPNLKLSTCXWKJDFGSJRFPVLDKFCSD...
FIND ALLPOSSIBLETRANSLATIONSOFTHATCRIB
ATTACKATDAWN
AAWSNPNLKLSTCXWKJDFGSJRFPVLDKFCSD...
FIND ALLPOSSIBLETRANSLATIONSOFTHATCRIB
ATTACKATDAWN
AAWSNPNLKLSTCXWKJDFGSJRFPVLDKFCSD...
possible CRIB - CIPHER pair
FIND ALLPOSSIBLETRANSLATIONSOFTHATCRIB
ATTACKATDAWN
AAWSNPNLKLSTCXWKJDFGSJRFPVLDKFCSD...
FIND ALLPOSSIBLETRANSLATIONSOFTHATCRIB
ATTACKATDAWN
AAWSNPNLKLSTCXWKJDFGSJRFPVLDKFCSD...
FIND ALLPOSSIBLETRANSLATIONSOFTHATCRIB
ATTACKATDAWN
AAWSNPNLKLSTCXWKJDFGSJRFPVLDKFCSD...
possible CRIB - CIPHER pair
FIND ALLPOSSIBLETRANSLATIONSOFTHATCRIB
FINDING
A MENU
ATTACKATDAWN
WSNPNLKLSTCX
CREATE A MENUFOREACHCRIB-CIPHERPAIR
ATTACKATDAWN
WSNPNLKLSTCX
1 12...
CREATE A MENUFOREACHCRIB-CIPHERPAIR
ATTACKATDAWN
WSNPNLKLSTCX
1 12...
CREATE A MENUFOREACHCRIB-CIPHERPAIR
Select the graph with most loops & nodes
CREATE A MENUFOREACHCRIB-CIPHERPAIR
RUNNING
BOMBE
Mathematicaldeductions
Take some initial configuration of rotors
Guess plugboard connection
Deduce next connection using map
IF inconsistency => ALL PREVIOUS
PLUGBOARD GUESSES
ARE WRONG!
RUNSMARTENIGMASINPARALLEL
~
BOMBEMACHINE
ANALYSIS
RESULTS
FINDTHETRUEPOSITIVE
AAWSNPNLKLSTCXWKJDFGSJRFPVL...
FINDTHETRUEPOSITIVE
IOLSJDFGASEDMLAATTACKATDAWN...
FINDTHETRUEPOSITIVE
IOLSJDFGASEDMLAATTACKATDAWN...
AATTACKATDAWNASKLGKALSHIEHF...
FINDTHETRUEPOSITIVE
IOLSJDFGASEDMLAATTACKATDAWN...
AATTACKATDAWNASKLGKALSHIEHF...
ONDECEMBEREIGHTATTACKATDAWN...
MESSAGE DECRYPTED!
STILLA LOTOFHUMANEFFORT
● Try different cribs
● Find all crib-cipher pairs
● Create menus
● Find best menu
● Run multiple bombes
● Analyze final decryptions
+
Et al.
BUILD
ENIGMA
INITIAL
Configuration
PROCESSING
CLEARINPUT
TEXT
CIPHEREDOUTPUT
BUILD
ENIGMA
INITIAL
Configuration
PROCESSING
CLEARINPUT
TEXT
CIPHEREDOUTPUT
~0.6ms
BUILD
ENIGMA
INITIAL
Configuration
PROCESSING
CLEARINPUT
TEXT
CIPHEREDOUTPUT
~0.6ms Brute force attack?
BUILD
ENIGMA
INITIAL
Configuration
PROCESSING
CLEARINPUT
TEXT
CIPHEREDOUTPUT
~0.6ms Brute force attack?
FINDING
A CRIB
AAWSNPNLKLSTCXWKJDFGSJRFPVLDKFCSDAS
LKFDJGSUIERGBVYDCYBWEKHGFGIUBHFBNKV
JZFDZNBWERJOBJZJFBFJRLBJSZHSUKIERKZ
KJRYGZFHBVUBUSEYAOPQZMALSWURNC...
- ATTACKATDAWN
- WEATHERREPORT
- DATEOFARRIVAL
- NOTHINGTOREPORT
- ...
msg:
possibilities:
FINDING
A CRIB
FINDING
A CRIB
str manipulation
FINDING
A CRIB
~3ms
FINDING
A MENU
ATTACKATDAWN
WSNPNLKLSTCX
FINDING
A MENU
FINDING
A MENU
dict for direct access
FINDING
A MENU
DSF to find cycles
FINDING
A MENU
~25ms
RUNNING
BOMBE
RUNNING
BOMBE
RUNNING
BOMBE
multiple enigmas at a time (multithreading)
RUNNING
BOMBE
math deductions to remove possibilities
RUNNING
BOMBE
add all candidates: all but one are false positives
RUNNING
BOMBE
~5m
ANALIZE
RESULT
ANALIZE
REsULT
ANALIZE
REsULT
detect language words
ANALIZE
REsULT
word-frequency analysis
tokenization
ANALIZE
REsULT
text distribution
perplexity
LET’SCOMPARE!
Finding a crib: ~20 m ~3 ms
Finding a menu: ~1 h ~25 ms
Running the bombe: ~2-4 h ~5 m
Analyzing results: ~30 m ~2 m
T.I.L
TODAYiLEARNED
● Crypto makes technology evolve
● All it takes is a different way of thinking
● Design flaws become exploits
SURPRISEBONUS
Let’susepython
● What if we do an spectrogram of it?
Credits: https://github.com/sam1902/SpectroGen/
Wecanusepythonnow
● Seems familiar?
(if used correctly)
Toolsenhanceourhumanity
¡GRACIAS!
mariacamilarg.me/

More Related Content

Recently uploaded

School management system project report.pdf
School management system project report.pdfSchool management system project report.pdf
School management system project report.pdf
Kamal Acharya
 

Recently uploaded (20)

2024 DevOps Pro Europe - Growing at the edge
2024 DevOps Pro Europe - Growing at the edge2024 DevOps Pro Europe - Growing at the edge
2024 DevOps Pro Europe - Growing at the edge
 
ONLINE CAR SERVICING SYSTEM PROJECT REPORT.pdf
ONLINE CAR SERVICING SYSTEM PROJECT REPORT.pdfONLINE CAR SERVICING SYSTEM PROJECT REPORT.pdf
ONLINE CAR SERVICING SYSTEM PROJECT REPORT.pdf
 
Diploma Engineering Drawing Qp-2024 Ece .pdf
Diploma Engineering Drawing Qp-2024 Ece .pdfDiploma Engineering Drawing Qp-2024 Ece .pdf
Diploma Engineering Drawing Qp-2024 Ece .pdf
 
Seismic Hazard Assessment Software in Python by Prof. Dr. Costas Sachpazis
Seismic Hazard Assessment Software in Python by Prof. Dr. Costas SachpazisSeismic Hazard Assessment Software in Python by Prof. Dr. Costas Sachpazis
Seismic Hazard Assessment Software in Python by Prof. Dr. Costas Sachpazis
 
BURGER ORDERING SYSYTEM PROJECT REPORT..pdf
BURGER ORDERING SYSYTEM PROJECT REPORT..pdfBURGER ORDERING SYSYTEM PROJECT REPORT..pdf
BURGER ORDERING SYSYTEM PROJECT REPORT..pdf
 
Electrostatic field in a coaxial transmission line
Electrostatic field in a coaxial transmission lineElectrostatic field in a coaxial transmission line
Electrostatic field in a coaxial transmission line
 
Quiz application system project report..pdf
Quiz application system project report..pdfQuiz application system project report..pdf
Quiz application system project report..pdf
 
ANSI(ST)-III_Manufacturing-I_05052020.pdf
ANSI(ST)-III_Manufacturing-I_05052020.pdfANSI(ST)-III_Manufacturing-I_05052020.pdf
ANSI(ST)-III_Manufacturing-I_05052020.pdf
 
School management system project report.pdf
School management system project report.pdfSchool management system project report.pdf
School management system project report.pdf
 
Low rpm Generator for efficient energy harnessing from a two stage wind turbine
Low rpm Generator for efficient energy harnessing from a two stage wind turbineLow rpm Generator for efficient energy harnessing from a two stage wind turbine
Low rpm Generator for efficient energy harnessing from a two stage wind turbine
 
How to Design and spec harmonic filter.pdf
How to Design and spec harmonic filter.pdfHow to Design and spec harmonic filter.pdf
How to Design and spec harmonic filter.pdf
 
Introduction to Artificial Intelligence and History of AI
Introduction to Artificial Intelligence and History of AIIntroduction to Artificial Intelligence and History of AI
Introduction to Artificial Intelligence and History of AI
 
Research Methodolgy & Intellectual Property Rights Series 1
Research Methodolgy & Intellectual Property Rights Series 1Research Methodolgy & Intellectual Property Rights Series 1
Research Methodolgy & Intellectual Property Rights Series 1
 
Multivibrator and its types defination and usges.pptx
Multivibrator and its types defination and usges.pptxMultivibrator and its types defination and usges.pptx
Multivibrator and its types defination and usges.pptx
 
Construction method of steel structure space frame .pptx
Construction method of steel structure space frame .pptxConstruction method of steel structure space frame .pptx
Construction method of steel structure space frame .pptx
 
Research Methodolgy & Intellectual Property Rights Series 2
Research Methodolgy & Intellectual Property Rights Series 2Research Methodolgy & Intellectual Property Rights Series 2
Research Methodolgy & Intellectual Property Rights Series 2
 
Furniture showroom management system project.pdf
Furniture showroom management system project.pdfFurniture showroom management system project.pdf
Furniture showroom management system project.pdf
 
Filters for Electromagnetic Compatibility Applications
Filters for Electromagnetic Compatibility ApplicationsFilters for Electromagnetic Compatibility Applications
Filters for Electromagnetic Compatibility Applications
 
Arduino based vehicle speed tracker project
Arduino based vehicle speed tracker projectArduino based vehicle speed tracker project
Arduino based vehicle speed tracker project
 
Introduction to Machine Learning Unit-4 Notes for II-II Mechanical Engineering
Introduction to Machine Learning Unit-4 Notes for II-II Mechanical EngineeringIntroduction to Machine Learning Unit-4 Notes for II-II Mechanical Engineering
Introduction to Machine Learning Unit-4 Notes for II-II Mechanical Engineering
 

Featured

How Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental HealthHow Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental Health
ThinkNow
 
Social Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie InsightsSocial Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie Insights
Kurio // The Social Media Age(ncy)
 

Featured (20)

2024 State of Marketing Report – by Hubspot
2024 State of Marketing Report – by Hubspot2024 State of Marketing Report – by Hubspot
2024 State of Marketing Report – by Hubspot
 
Everything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPTEverything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPT
 
Product Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage EngineeringsProduct Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage Engineerings
 
How Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental HealthHow Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental Health
 
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdfAI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
 
Skeleton Culture Code
Skeleton Culture CodeSkeleton Culture Code
Skeleton Culture Code
 
PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024
 
Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)
 
How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024
 
Social Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie InsightsSocial Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie Insights
 
Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024
 
5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary
 
ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd
 
Getting into the tech field. what next
Getting into the tech field. what next Getting into the tech field. what next
Getting into the tech field. what next
 
Google's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search IntentGoogle's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search Intent
 
How to have difficult conversations
How to have difficult conversations How to have difficult conversations
How to have difficult conversations
 
Introduction to Data Science
Introduction to Data ScienceIntroduction to Data Science
Introduction to Data Science
 
Time Management & Productivity - Best Practices
Time Management & Productivity -  Best PracticesTime Management & Productivity -  Best Practices
Time Management & Productivity - Best Practices
 
The six step guide to practical project management
The six step guide to practical project managementThe six step guide to practical project management
The six step guide to practical project management
 
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
 

Breaking the Enigma: what if Turing had Python?