BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Compounding Interest: Exploiting the ATM Supply Chai
 n\n   Tags: DEF CON Official Talk | Demo 💻 | Tool 🛠 | Exploit 🪲\n
    When: Saturday\, Aug 8\, 12:30 - 13:30 PDT\n   Where: LVCCW Level 1 Hal
 l 3 904 (Main Track 4) and DCTV-4 - [1]Map\n\n   Description:\n\n   ATMs a
 re the ultimate high-stakes target\, often holding upwards of\n   $400\,00
 0 in a single enclosure. While the global financial industry\n   relies on
  a narrow pool of manufacturers\, the software supply chain\n   securing t
 hese "vaults" remains an underexamined attack surface.\n   Following my di
 sclosure of 6 code execution vulnerabilities affecting\n   Diebold Nixdorf
 's Vynamic Security Suite (VSS) at DefCon32\, this\n   research dives deep
 er into the foundational security layer: CryptWare\n   CryptoPro Secure Di
 sk for BitLocker.\n\n   CryptoPro acts as a proprietary security wrapper\,
  adding pre-boot\n   authorization\, custom TPM protections\, and an obfus
 cated encryption\n   layer to the standard BitLocker architecture. I will 
 be disclosing 9\n   new CVEs that allow an unauthenticated adversary to di
 smantle the\n   CryptoPro stack. Join me as I share my journey of locating
  secrets\n   buried in unallocated disk space\, abusing TPM sealing logic\
 , and\n   deconstruct CryptoPro's custom AES256 logic to recover the BitLo
 cker\n   keys. This presentation will highlight how a trusted security\n  
  component became a critical backdoor.\n\n   In addition to the technical 
 walk through\, I will be releasing\n   ragavan\, a custom exploitation too
 lkit designed to automate secret\n   extraction\, decryption\, TPM unseali
 ng\, and compromise of a\n   CryptoPro-protected platform.\n\n     * Burch
 \, Matt “Where’s the Money: Defeating ATM Disk\n       Encrytion” DE
 FCON Media Server\,\n       https://media.defcon.org/DEF%20CON%2032/DEF%20
 CON%2032%20presentations/DEF%20CON%2032%20-%20Matt%20Burch%20-%20Where%E2%
 80%99s%20the%20Money%20-%20Defeating%20ATM%20Disk%20Encryption-white%20pap
 er.pdf\n\n     * Freingruber\, R.\, and M. von Dach. “Manipulation of pr
 e-boot\n       authentication in CryptWare CryptoPro Secure Disk for Bitlo
 cker”\n       SEC Consult\,\n       https://sec-consult.com/vulnerabilit
 y-lab/advisory/manipulation-of-pre-boot-authentication/\n\n     * Diebold 
 Nixdorf Legal Terms\, https://dnlegalterms.com/products/\n\n     * Vynamic
  Security Suite 3.0 EULA\,\n       https://dnlegalterms.com/wp-content/upl
 oads/2020/03/2020026_Diebold_Nixdorf_EULA_for_VYNAMIC_SECURITY_3_0_Decembe
 r_19_2018_022249.pdf\n\n     * Vynamic Security Suite 4.5 EULA\,\n       h
 ttps://dnlegalterms.com/wp-content/uploads/2024/10/Diebold-Nixdorf-Third-P
 arty-EULA-for-Vynamic-Security-Suite-4.5.pdf\n\n     * VirusTotal CryptoPr
 o Client Installer\,\n       https://www.virustotal.com/gui/file/235646487
 eed8cb648f9d05dafd3c25255b6c53a30aa87cae0ce061081d2b0b7\n\n     * VirusTot
 al CryptoPro Server Installer\,\n       https://www.virustotal.com/gui/fil
 e/1f42ac4f4d177dc2c38228e02d3c47ecfeb32ee7c17766b8e67145348274a8cc\n\n    
  * cpsd it services GmbH. “CryptoPro Quick Install Guide”\,\n       ht
 tps://secure-disk-for-bitlocker.com/quick-install-guide/\n\n     * cpsd it
  services GmbH. “CryptoPro Secure Disk for BitLocker\n       Administrat
 ion Manual”\,\n       https://docslib.org/doc/7196170/cryptopro-secure-d
 isk-for-bitlocker-administration-manual\n\n     * Jean-Philippe Aumasson\,
  “Serious Cryptography A practical\n       Introduction to Modern Encryp
 tion” No Starch Press\n\n     * Christof Paar and Jan Pelzl\, “Underst
 anding Cryptography A\n       Textbook for Students and Practitioners” S
 pringer\n\n   SpeakerBio:  Matt Burch\, Principal Security Researcher at A
 tredis\n   Partners\n\n   Matt Burch is a Principal Security Researcher at
  Atredis Partners with\n   20 years of experience breaking things that are
 n't supposed to break.\n   From the embedded components of ATM platforms t
 o complex SCADA/OT\n   environments\, Matt specializes in identifying crit
 ical flaws in\n   hardened\, enterprise-class systems. He is best known fo
 r his research\n   into ATM disk encryption and Mobile Device Management (
 MDM) security\,\n   some of which has been highlighted in Wired Magazine a
 nd presented at\n   DEF CON 32.\n\n   Matt is a reverse engineer and tool 
 developer who has authored and\n   contributed to various public projects.
  His career spans roles as an\n   offensive security lead\, expert witness
 \, and technical advisor.\n   Matt’s current research is a deep-dive int
 o the ATM software supply\n   chain\, specifically targeting the subversio
 n of TPM-backed roots of\n   trust and the analysis of custom cryptographi
 c primitives.\n\n   '\n\n   1. #LVCCW_Level1_Hall3\n\n\n
DTEND:20260808T203000Z
DTSTART:20260808T193000Z
LOCATION:DEF CON Talks - LVCCW Level 1 Hall 3 904 (Main Track 4) and DCTV-4
SUMMARY:Compounding Interest: Exploiting the ATM Supply Chain
END:VEVENT
END:VCALENDAR