| Lecturer Profile |
David Naccache is a cryptographer, currently a professor at Panthéon-Assas University and member of the École normale supérieure's Computer Laboratory. He received his Ph.D. in 1995 from the École nationale supérieure des télécommunications. Naccache's most notable work is in public-key cryptography, including the cryptanalysis of digital signature schemes. Together with Jacques Stern he designed the similarly named but very distinct Naccache-Stern cryptosystem and Naccache-Stern knapsack cryptosystem. In 2004 David Naccache and Claire Whelan, then employed by Gemplus International, used image processing techniques to uncoverredacted information from the declassified 6 August 2001 President's Daily Brief Bin Ladin Determined To Strike in US. They also demonstrated how the same process could be applied to other redacted documents. |
| Lecture Abstract |
This talk describes the forensic analysis of what the authors believe to be the most sophisticated smart card fraud encountered to date. In 2010, Murdoch et al. described a man-in-the-middle attack against EMV cards. Murdoch et al. demonstrated the attack using a general purpose FPGA board, noting that “miniaturization is mostly a mechanical challenge, and well within the expertise of criminal gangs”. This indeed happened in 2011, when about 40 sophisticated card forgeries surfaced in the field. These forgeries are remarkable in that they embed two chips wired top-to-tail. The first chip is clipped from a genuine stolen card. The second chip plays the role of the man-inthe-middle and communicates directly with the point of sale terminal. The entire assembly is embedded in the plastic body of yet another stolen card. The forensic analysis relied on Xray chip imaging, side-channel analysis, protocol analysis, and microscopic optical inspections. |
