Nadia Heninger
The Key-Entropy Auditor
Mining Your Ps and Qs, Logjam, and measuring real deployed crypto
Rating
85Impact score
Domains
CryptanalysisInternet measurementKey generation
Scouting report
Co-authored “Mining Your Ps and Qs”, which scanned the whole IPv4 internet and found that a meaningful share of TLS and SSH keys shared factors because embedded devices generated them without entropy — and then factored them. Followed it with Logjam, DROWN and FREAK, a body of work whose method is: measure what is actually deployed, then break the weak part.
Curator’s note
Proved the crypto was fine and the random number generators were not.
Portrait
Painted from a photograph of Nadia Heninger by Ordercrazy, licensed CC0.
Sources
- 01Nadia Heninger en.wikipedia.org
- 02Mining Your Ps and Qs (USENIX Security 2012) factorable.net