Attacking modern cryptosystems
Rules of thumb:
- Rule 0: The people are weak links - exploit them
- Rule 1: Attack live systems - not dead ones
- Rule 2: They have a way to use it - find it
- Rule 3: Exhaustive search fails - be more selective
- Rule 4: Cryptanalysis is expensive - avoid it
- Rule 5: OSs are weaker than cryptosystems - use them
- Rule 6: Protocols are weaker than transforms - use them
50 Ways to Defeat Your PKI, etc.