CryptoHack – A free, fun platform for learning cryptography
WEBLearn about modern cryptography by solving a series of interactive puzzles and challenges. Get to know the ciphers and protocols that secure the digital world by breaking them.
CryptoHack Blog | Updates about the CryptoHack platform, …
WEBBest practices in applied cryptography have changed drastically over the last few decades. We know that if a cryptosystem can go wrong, in practice it will go wrong. A classic example is nonce reuse, which a wide number of symmetric ciphers, signature schemes, and authentication protocols are susceptible to (see CryptoHack challenges “ProSign ...
Symmetry - CryptoHack
WEBDescription. Some block cipher modes, such as OFB, CTR, or CFB, turn a block cipher into a stream cipher. The idea behind stream ciphers is to produce a pseudorandom keystream which is then XORed with the plaintext. One advantage of stream ciphers is that they can work of plaintext of arbitrary length, with no padding required.
JSON in JSON - CryptoHack
WEBThis page offers a convenient way for you to interact with the "JSON in JSON" challenge functions. You can also use GET requests to send and receive data directly from the listed routes/endpoints if you wish. For more information see the FAQ.
Modes of Operation Starter - CryptoHack
WEBA mode of operation describes how to use a cipher like AES on longer messages. All modes have serious weaknesses when used incorrectly. The challenges in this category take you to a different section of the website where you can interact with APIs and exploit those weaknesses.
ECB Oracle - CryptoHack
WEBECB is the most simple mode, with each plaintext block encrypted entirely independently. In this case, your input is prepended to the secret flag and encrypted and that's it. We don't even provide a decrypt function.
CTRIME - CryptoHack
WEBThis page offers a convenient way for you to interact with the challenge functions. You can also use GET requests to send and receive data directly from the listed routes/endpoints if you wish. For more information see the FAQ. Your aim is to recover the FLAG value.
RSA or HMAC? - CryptoHack
WEBThis page offers a convenient way for you to interact with the "RSA or HMAC?" challenge functions. You can also use GET requests to send and receive data directly from the listed routes/endpoints if you wish. For more information see the FAQ. Your aim is to recover the FLAG value. Once you have have it, submit it on the Crypto On The Web ...
Bean Counter - CryptoHack
WEBDescription. I've struggled to get PyCrypto's counter mode doing what I want, so I've turned ECB mode into CTR myself. My counter can go both upwards and downwards to throw off cryptanalysts! There's no chance they'll be able to read my picture.
JWT Secrets - CryptoHack
WEBThis page offers a convenient way for you to interact with the "JWT Secrets" challenge functions. You can also use GET requests to send and receive data directly from the listed routes/endpoints if you wish. For more information see …