Hackers completely break SSL using 200 PS3s

jmke · 31st December 2008, 09:07

A team of security researchers and academics has broken a core piece of internet technology. They made their work public at the 25th Chaos Communication Congress in Berlin today. The team was able to create a rogue certificate authority and use it to issue valid SSL certificates for any site they want. The user would have no indication that their HTTPS connection was being monitored/modified.

Having selected their target, the team needed to generate their rogue certificate to transfer the signature to. They employed the processing power of 200 Playstation 3s to get the job done. For this task, it’s the equivalent of 8000 standard CPU cores or $20K of Amazon EC2 time. The task takes ~1-2 days to calculate. The tricky part was knowing the content of the certificate that would be issued by RapidSSL.

http://hackaday.com/2008/12/30/25c3-...sing-200-ps3s/

31st December 2008, 09:07	#1
jmke Madshrimp Join Date: May 2002 Location: 7090/Belgium Posts: 79,021	Hackers completely break SSL using 200 PS3s A team of security researchers and academics has broken a core piece of internet technology. They made their work public at the 25th Chaos Communication Congress in Berlin today. The team was able to create a rogue certificate authority and use it to issue valid SSL certificates for any site they want. The user would have no indication that their HTTPS connection was being monitored/modified. Having selected their target, the team needed to generate their rogue certificate to transfer the signature to. They employed the processing power of 200 Playstation 3s to get the job done. For this task, it’s the equivalent of 8000 standard CPU cores or $20K of Amazon EC2 time. The task takes ~1-2 days to calculate. The tricky part was knowing the content of the certificate that would be issued by RapidSSL. http://hackaday.com/2008/12/30/25c3-...sing-200-ps3s/ __________________

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Hacker releases a tool that can steal info from SSL protected sites	jmke	WebNews	0	24th February 2009 11:51
A Good Reason To Go Full-Time SSL For Gmail	jmke	WebNews	5	21st August 2008 19:24
Vista's Security Rendered Completely Useless by New Exploit	jmke	WebNews	0	8th August 2008 15:58
Radeon HD 4800 and GeForce GTX 200 slated for June	jmke	WebNews	1	19th May 2008 16:45
Gamer about to break 200 points !!	Massman	Hardware Overclocking and Case Modding	39	13th November 2007 20:38
ATI Xpress 200 Gets a New Name - Xpress 1600	jmke	WebNews	0	11th April 2006 10:07
Asus A8R-MVP S939 Radeon Xpress 200 Motherboard	jmke	WebNews	0	16th February 2006 10:04
Hackers Announce that XBox 1 is Completely Hacked	jmke	WebNews	0	1st February 2006 21:55