Crypto Is Fine. The Code Is Not: Real-World Cryptographic Failures

No ratings

Presented at BSidesSATX 2026 by

Diptendu

Most cryptographic failures have little to do with cryptography. They come from small implementation errors: skipping a validation check, trusting unvalidated input, or using the wrong algorithm. This talk examines OWASP A04:2025 using real CVEs from GitHub Security Advisories as of January 2026 - signature verification bypasses, invalid curves, and algorithm confusion. Live demos and CTF challenges throughout. We work through each case before revealing the exploit. No crypto background needed.