Mathy Vanhoef

PostDoc at New York University

Mathy Vanhoef is a postdoctoral researcher at the New York University campus in Abu Dhabi. He is known for his KRACK attack against WPA2, and the RC4 NOMORE attack against RC4. His research interest is in computer security with a focus on wireless security and network security in general. Currently, his main research interest is automatically discovering (logical) vulnerabilities in network protocol implementations.

Social Profiles

All Sessions by Mathy Vanhoef

  • OPCDE 2019 (Day 2)


  • 11:15  - 12:00
    This talk explains how we discovered various vulnerabilities in implementations of WPA2’s 4-way handshake. This encompasses both common programming mistakes, but also side-channel vulnerabilities in crypto code. This was accomplished by symbolically executing implementations using KLEE. In the presentation we will first give a high level explanation of what symbolic execution is. This is followed by an overview of the vulnerabilities we discovered. Additionally, a detailed explanation is given of how one of the discovered buffer overflows leads to remote code execution on a router (as the root user), and how another vulnerability can be abused as a decryption oracle to recover the group key used in a Wi-Fi network.




Share

Mathy Vanhoef