diff options
author | Karel Kočí <cynerd@email.cz> | 2018-05-26 19:08:08 +0200 |
---|---|---|
committer | Karel Kočí <cynerd@email.cz> | 2018-05-26 19:08:08 +0200 |
commit | af99db51d7f36a61b8c3e22d74c1e198ad0b1cc3 (patch) | |
tree | b03717bc7468b70d390fe493242a4c9855b770f4 | |
parent | 669a737f98a486d0cd7708f104e0003cdd4ce038 (diff) | |
download | presentations-af99db51d7f36a61b8c3e22d74c1e198ad0b1cc3.tar.gz presentations-af99db51d7f36a61b8c3e22d74c1e198ad0b1cc3.tar.bz2 presentations-af99db51d7f36a61b8c3e22d74c1e198ad0b1cc3.zip |
Add presentation from cryptofest 2018
-rw-r--r-- | 2018-cryptofest/makefile | 10 | ||||
-rw-r--r-- | 2018-cryptofest/package.svg | 485 | ||||
-rw-r--r-- | 2018-cryptofest/pres.pdf | bin | 0 -> 99984 bytes | |||
-rw-r--r-- | 2018-cryptofest/pres.tex | 182 | ||||
-rw-r--r-- | 2018-cryptofest/turris-logo.svg | 46 | ||||
-rw-r--r-- | README.md | 12 |
6 files changed, 731 insertions, 4 deletions
diff --git a/2018-cryptofest/makefile b/2018-cryptofest/makefile new file mode 100644 index 0000000..9ab8f60 --- /dev/null +++ b/2018-cryptofest/makefile @@ -0,0 +1,10 @@ +FILE=pres + +$(FILE).pdf: $(FILE).tex $(patsubst %.svg,%.pdf,$(wildcard *.svg)) + pdflatex -shell-escape $< + +%.pdf: %.svg + inkscape -D -z --file=$< --export-pdf=$@ --export-latex + +clean: + ls | grep -v -E "($(FILE).tex|makefile|scheme|svg|png|eps)$$" | xargs rm -rf diff --git a/2018-cryptofest/package.svg b/2018-cryptofest/package.svg new file mode 100644 index 0000000..47beed7 --- /dev/null +++ b/2018-cryptofest/package.svg @@ -0,0 +1,485 @@ +<?xml version="1.0" encoding="UTF-8" standalone="no"?> +<!-- Created with Inkscape (http://www.inkscape.org/) --> +<svg + xmlns:dc="http://purl.org/dc/elements/1.1/" + xmlns:cc="http://creativecommons.org/ns#" + xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" + xmlns:svg="http://www.w3.org/2000/svg" + xmlns="http://www.w3.org/2000/svg" + xmlns:xlink="http://www.w3.org/1999/xlink" + xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd" + xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape" + sodipodi:docname="package-x-generic.svg" + sodipodi:docbase="/home/jimmac/src/cvs/tango-icon-theme/scalable/mimetypes" + inkscape:version="0.46" + sodipodi:version="0.32" + id="svg2963" + height="48px" + width="48px" + inkscape:output_extension="org.inkscape.output.svg.inkscape"> + <defs + id="defs3"> + <inkscape:perspective + sodipodi:type="inkscape:persp3d" + inkscape:vp_x="0 : 24 : 1" + inkscape:vp_y="0 : 1000 : 0" + inkscape:vp_z="48 : 24 : 1" + inkscape:persp3d-origin="24 : 16 : 1" + id="perspective77" /> + <radialGradient + inkscape:collect="always" + xlink:href="#linearGradient5060" + id="radialGradient6719" + gradientUnits="userSpaceOnUse" + gradientTransform="matrix(-2.774389,0,0,1.969706,112.7623,-872.8854)" + cx="605.71429" + cy="486.64789" + fx="605.71429" + fy="486.64789" + r="117.14286" /> + <linearGradient + inkscape:collect="always" + id="linearGradient5060"> + <stop + style="stop-color:black;stop-opacity:1;" + offset="0" + id="stop5062" /> + <stop + style="stop-color:black;stop-opacity:0;" + offset="1" + id="stop5064" /> + </linearGradient> + <radialGradient + inkscape:collect="always" + xlink:href="#linearGradient5060" + id="radialGradient6717" + gradientUnits="userSpaceOnUse" + gradientTransform="matrix(2.774389,0,0,1.969706,-1891.633,-872.8854)" + cx="605.71429" + cy="486.64789" + fx="605.71429" + fy="486.64789" + r="117.14286" /> + <linearGradient + id="linearGradient5048"> + <stop + style="stop-color:black;stop-opacity:0;" + offset="0" + id="stop5050" /> + <stop + id="stop5056" + offset="0.5" + style="stop-color:black;stop-opacity:1;" /> + <stop + style="stop-color:black;stop-opacity:0;" + offset="1" + id="stop5052" /> + </linearGradient> + <linearGradient + inkscape:collect="always" + xlink:href="#linearGradient5048" + id="linearGradient6715" + gradientUnits="userSpaceOnUse" + gradientTransform="matrix(2.774389,0,0,1.969706,-1892.179,-872.8854)" + x1="302.85715" + y1="366.64789" + x2="302.85715" + y2="609.50507" /> + <linearGradient + inkscape:collect="always" + id="linearGradient2884"> + <stop + style="stop-color:#000000;stop-opacity:1;" + offset="0" + id="stop2886" /> + <stop + style="stop-color:#000000;stop-opacity:0;" + offset="1" + id="stop2888" /> + </linearGradient> + <linearGradient + id="linearGradient2869"> + <stop + style="stop-color:#ffffff;stop-opacity:1;" + offset="0" + id="stop2871" /> + <stop + style="stop-color:#cccccc;stop-opacity:1.0000000;" + offset="1.0000000" + id="stop2873" /> + </linearGradient> + <linearGradient + id="linearGradient4995"> + <stop + id="stop4997" + offset="0" + style="stop-color:#de9523;stop-opacity:1;" /> + <stop + id="stop4999" + offset="1.0000000" + style="stop-color:#a36d18;stop-opacity:1.0000000;" /> + </linearGradient> + <linearGradient + id="linearGradient4987" + inkscape:collect="always"> + <stop + id="stop4989" + offset="0" + style="stop-color:#a0670c;stop-opacity:1;" /> + <stop + id="stop4991" + offset="1" + style="stop-color:#a0670c;stop-opacity:0;" /> + </linearGradient> + <linearGradient + id="linearGradient4979"> + <stop + id="stop4981" + offset="0.0000000" + style="stop-color:#fbf0e0;stop-opacity:1.0000000;" /> + <stop + id="stop4983" + offset="1.0000000" + style="stop-color:#f0ce99;stop-opacity:1.0000000;" /> + </linearGradient> + <linearGradient + id="linearGradient4946" + inkscape:collect="always"> + <stop + id="stop4948" + offset="0" + style="stop-color:#000000;stop-opacity:1;" /> + <stop + id="stop4950" + offset="1" + style="stop-color:#000000;stop-opacity:0;" /> + </linearGradient> + <linearGradient + id="linearGradient4222"> + <stop + id="stop4224" + offset="0" + style="stop-color:#ffffff;stop-opacity:1;" /> + <stop + id="stop4226" + offset="1.0000000" + style="stop-color:#ffffff;stop-opacity:0.68639052;" /> + </linearGradient> + <linearGradient + id="linearGradient4210"> + <stop + id="stop4212" + offset="0.0000000" + style="stop-color:#eaba6f;stop-opacity:1.0000000;" /> + <stop + id="stop4214" + offset="1.0000000" + style="stop-color:#b97a1b;stop-opacity:1.0000000;" /> + </linearGradient> + <linearGradient + id="linearGradient4192"> + <stop + id="stop4194" + offset="0" + style="stop-color:#e9b96e;stop-opacity:1;" /> + <stop + id="stop4196" + offset="1.0000000" + style="stop-color:#f1d19e;stop-opacity:1.0000000;" /> + </linearGradient> + <linearGradient + id="linearGradient4182"> + <stop + id="stop4184" + offset="0.0000000" + style="stop-color:#a36d18;stop-opacity:1.0000000;" /> + <stop + id="stop4186" + offset="1.0000000" + style="stop-color:#d79020;stop-opacity:1.0000000;" /> + </linearGradient> + <radialGradient + inkscape:collect="always" + xlink:href="#linearGradient4946" + id="radialGradient2252" + gradientUnits="userSpaceOnUse" + gradientTransform="matrix(1.000000,0.000000,0.000000,0.333333,2.658463e-16,23.58206)" + cx="22.930462" + cy="35.373093" + fx="22.930462" + fy="35.373093" + r="17.576654" /> + <linearGradient + inkscape:collect="always" + xlink:href="#linearGradient4979" + id="linearGradient2269" + gradientUnits="userSpaceOnUse" + x1="30.062469" + y1="13.444801" + x2="17.696169" + y2="12.333632" /> + <linearGradient + inkscape:collect="always" + xlink:href="#linearGradient4995" + id="linearGradient2274" + gradientUnits="userSpaceOnUse" + x1="36.288929" + y1="14.661557" + x2="47.065835" + y2="15.267649" /> + <linearGradient + inkscape:collect="always" + xlink:href="#linearGradient4192" + id="linearGradient2277" + gradientUnits="userSpaceOnUse" + gradientTransform="matrix(1.000000,0.000000,0.000000,0.986355,0.000000,0.316638)" + x1="25.381256" + y1="24.720648" + x2="24.119167" + y2="16.170370" /> + <linearGradient + inkscape:collect="always" + xlink:href="#linearGradient4182" + id="linearGradient2280" + gradientUnits="userSpaceOnUse" + gradientTransform="matrix(1.000000,0.000000,0.000000,1.039184,0.000000,-4.057054e-2)" + x1="16.148972" + y1="12.636667" + x2="34.193642" + y2="12.636667" /> + <linearGradient + inkscape:collect="always" + xlink:href="#linearGradient4987" + id="linearGradient2282" + gradientUnits="userSpaceOnUse" + x1="21.906841" + y1="9.7577486" + x2="22.071806" + y2="16.020695" /> + <linearGradient + inkscape:collect="always" + xlink:href="#linearGradient4222" + id="linearGradient2285" + gradientUnits="userSpaceOnUse" + x1="18.706615" + y1="19.912336" + x2="30.014812" + y2="47.388485" /> + <linearGradient + inkscape:collect="always" + xlink:href="#linearGradient4210" + id="linearGradient2288" + gradientUnits="userSpaceOnUse" + x1="24.990499" + y1="34.004856" + x2="24.990499" + y2="22.585211" /> + <radialGradient + inkscape:collect="always" + xlink:href="#linearGradient2884" + id="radialGradient2896" + gradientUnits="userSpaceOnUse" + gradientTransform="matrix(1.353283,5.468101e-16,-1.144754e-13,0.635968,-8.458890,3.413470)" + cx="23.943670" + cy="20.800287" + fx="23.943670" + fy="20.800287" + r="6.4286140" /> + <radialGradient + inkscape:collect="always" + xlink:href="#linearGradient2869" + id="radialGradient2898" + gradientUnits="userSpaceOnUse" + gradientTransform="matrix(0.749420,0.000000,0.000000,0.394055,6.226925,10.09253)" + cx="21.578989" + cy="9.0255041" + fx="21.578989" + fy="9.0255041" + r="9.5862970" /> + <radialGradient + inkscape:collect="always" + xlink:href="#linearGradient2884" + id="radialGradient2906" + gradientUnits="userSpaceOnUse" + gradientTransform="matrix(1.353283,5.468101e-16,-1.144754e-13,0.635968,-8.458890,3.413470)" + cx="23.943670" + cy="20.800287" + fx="23.943670" + fy="20.800287" + r="6.4286140" /> + <radialGradient + inkscape:collect="always" + xlink:href="#linearGradient2869" + id="radialGradient2908" + gradientUnits="userSpaceOnUse" + gradientTransform="matrix(0.749420,0.000000,0.000000,0.394055,6.226925,10.09253)" + cx="21.578989" + cy="9.8105707" + fx="21.578989" + fy="9.8105707" + r="9.5862970" /> + </defs> + <sodipodi:namedview + inkscape:window-y="142" + inkscape:window-x="392" + inkscape:window-height="706" + inkscape:window-width="872" + stroke="#c17d11" + fill="#e9b96e" + inkscape:showpageshadow="false" + inkscape:document-units="px" + inkscape:grid-bbox="true" + showgrid="false" + inkscape:current-layer="layer1" + inkscape:cy="39.004018" + inkscape:cx="74.637005" + inkscape:zoom="1" + inkscape:pageshadow="2" + inkscape:pageopacity="0.0" + borderopacity="0.16470588" + bordercolor="#666666" + pagecolor="#ffffff" + id="base" /> + <metadata + id="metadata4"> + <rdf:RDF> + <cc:Work + rdf:about=""> + <dc:format>image/svg+xml</dc:format> + <dc:type + rdf:resource="http://purl.org/dc/dcmitype/StillImage" /> + <dc:title>Package</dc:title> + <dc:creator> + <cc:Agent> + <dc:title>Jakub Steiner</dc:title> + </cc:Agent> + </dc:creator> + <dc:source>http://jimmac.musichall.cz/</dc:source> + <dc:subject> + <rdf:Bag> + <rdf:li>package</rdf:li> + <rdf:li>archive</rdf:li> + <rdf:li>tarball</rdf:li> + <rdf:li>tar</rdf:li> + <rdf:li>bzip</rdf:li> + <rdf:li>gzip</rdf:li> + <rdf:li>zip</rdf:li> + <rdf:li>arj</rdf:li> + <rdf:li>tar</rdf:li> + <rdf:li>jar</rdf:li> + </rdf:Bag> + </dc:subject> + <cc:license + rdf:resource="http://creativecommons.org/licenses/publicdomain/" /> + </cc:Work> + <cc:License + rdf:about="http://creativecommons.org/licenses/publicdomain/"> + <cc:permits + rdf:resource="http://creativecommons.org/ns#Reproduction" /> + <cc:permits + rdf:resource="http://creativecommons.org/ns#Distribution" /> + <cc:permits + rdf:resource="http://creativecommons.org/ns#DerivativeWorks" /> + </cc:License> + </rdf:RDF> + </metadata> + <g + inkscape:groupmode="layer" + inkscape:label="Layer 1" + id="layer1"> + <g + style="display:inline" + transform="matrix(2.105461e-2,0,0,2.086758e-2,42.60172,35.4036)" + id="g6707"> + <rect + style="opacity:0.40206185;color:black;fill:url(#linearGradient6715);fill-opacity:1;fill-rule:nonzero;stroke:none;stroke-width:1;stroke-linecap:round;stroke-linejoin:miter;marker:none;marker-start:none;marker-mid:none;marker-end:none;stroke-miterlimit:4;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1;visibility:visible;display:inline;overflow:visible" + id="rect6709" + width="1339.6335" + height="478.35718" + x="-1559.2523" + y="-150.69685" /> + <path + style="opacity:0.40206185;color:black;fill:url(#radialGradient6717);fill-opacity:1;fill-rule:nonzero;stroke:none;stroke-width:1;stroke-linecap:round;stroke-linejoin:miter;marker:none;marker-start:none;marker-mid:none;marker-end:none;stroke-miterlimit:4;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1;visibility:visible;display:inline;overflow:visible" + d="M -219.61876,-150.68038 C -219.61876,-150.68038 -219.61876,327.65041 -219.61876,327.65041 C -76.744594,328.55086 125.78146,220.48075 125.78138,88.454235 C 125.78138,-43.572302 -33.655436,-150.68036 -219.61876,-150.68038 z " + id="path6711" + sodipodi:nodetypes="cccc" /> + <path + sodipodi:nodetypes="cccc" + id="path6713" + d="M -1559.2523,-150.68038 C -1559.2523,-150.68038 -1559.2523,327.65041 -1559.2523,327.65041 C -1702.1265,328.55086 -1904.6525,220.48075 -1904.6525,88.454235 C -1904.6525,-43.572302 -1745.2157,-150.68036 -1559.2523,-150.68038 z " + style="opacity:0.40206185;color:black;fill:url(#radialGradient6719);fill-opacity:1;fill-rule:nonzero;stroke:none;stroke-width:1;stroke-linecap:round;stroke-linejoin:miter;marker:none;marker-start:none;marker-mid:none;marker-end:none;stroke-miterlimit:4;stroke-dasharray:none;stroke-dashoffset:0;stroke-opacity:1;visibility:visible;display:inline;overflow:visible" /> + </g> + <rect + ry="2.3944440" + rx="2.4241352" + y="15.275433" + x="7.4623847" + height="23.112879" + width="31.978371" + id="rect3115" + style="opacity:1.0000000;color:#000000;fill:url(#linearGradient2288);fill-opacity:1.0000000;fill-rule:nonzero;stroke:#a0670c;stroke-width:1.0000007;stroke-linecap:butt;stroke-linejoin:miter;marker:none;marker-start:none;marker-mid:none;marker-end:none;stroke-miterlimit:4.0000000;stroke-dasharray:none;stroke-dashoffset:0.0000000;stroke-opacity:1.0000000;visibility:visible;display:block;overflow:visible" /> + <rect + style="opacity:0.48101267;color:#000000;fill:none;fill-opacity:1.0000000;fill-rule:nonzero;stroke:url(#linearGradient2285);stroke-width:1.0000011;stroke-linecap:butt;stroke-linejoin:miter;marker:none;marker-start:none;marker-mid:none;marker-end:none;stroke-miterlimit:4.0000000;stroke-dasharray:none;stroke-dashoffset:0.0000000;stroke-opacity:1.0000000;visibility:visible;display:block;overflow:visible" + id="rect4220" + width="29.804138" + height="21.075352" + x="8.4989996" + y="16.243698" + rx="1.2846882" + ry="1.2846882" /> + <path + sodipodi:nodetypes="ccccc" + id="path4162" + d="M 8.7697819,16.547178 L 13.819731,9.7363408 L 32.615291,9.6353255 L 37.835264,16.408941 L 8.7697819,16.547178 z " + style="fill:url(#linearGradient2280);fill-opacity:1.0000000;fill-rule:evenodd;stroke:url(#linearGradient2282);stroke-width:1.0000008;stroke-linecap:butt;stroke-linejoin:miter;stroke-miterlimit:4.0000000;stroke-dasharray:none;stroke-opacity:1.0000000" /> + <path + sodipodi:nodetypes="ccccc" + id="path4164" + d="M 38.276321,16.325703 L 43.469269,23.520364 L 3.9609455,23.520364 L 8.6250143,16.320763 L 38.276321,16.325703 z " + style="opacity:1.0000000;color:#000000;fill:url(#linearGradient2277);fill-opacity:1.0000000;fill-rule:nonzero;stroke:#a0670c;stroke-width:1.0000005;stroke-linecap:round;stroke-linejoin:round;marker:none;marker-start:none;marker-mid:none;marker-end:none;stroke-miterlimit:4.0000000;stroke-dasharray:none;stroke-dashoffset:0.0000000;stroke-opacity:1.0000000;visibility:visible;display:block;overflow:visible" /> + <path + sodipodi:nodetypes="ccccc" + id="path4178" + d="M 32.849333,9.6141009 L 37.532219,16.536370 L 46.565835,20.921197 L 38.451329,12.008545 L 32.849333,9.6141009 z " + style="opacity:1.0000000;color:#000000;fill:url(#linearGradient2274);fill-opacity:1.0000000;fill-rule:nonzero;stroke:#a0670c;stroke-width:1.0000005;stroke-linecap:round;stroke-linejoin:round;marker:none;marker-start:none;marker-mid:none;marker-end:none;stroke-miterlimit:4.0000000;stroke-dasharray:none;stroke-dashoffset:0.0000000;stroke-opacity:1.0000000;visibility:visible;display:block;overflow:visible" /> + <path + sodipodi:nodetypes="ccccc" + style="opacity:1.0000000;color:#000000;fill:#f8e8cf;fill-opacity:1.0000000;fill-rule:nonzero;stroke:#a0670c;stroke-width:1.0000000;stroke-linecap:round;stroke-linejoin:round;marker:none;marker-start:none;marker-mid:none;marker-end:none;stroke-miterlimit:4.0000000;stroke-dasharray:none;stroke-dashoffset:0.0000000;stroke-opacity:1.0000000;visibility:visible;display:block;overflow:visible" + d="M 13.617702,9.7151161 L 9.6419233,16.435355 L 0.50729183,20.820182 L 8.6217973,11.907530 L 13.617702,9.7151161 z " + id="path4180" /> + <path + style="opacity:1.0000000;color:#000000;fill:none;fill-opacity:1.0000000;fill-rule:nonzero;stroke:#f4e3ca;stroke-width:1.0000000;stroke-linecap:butt;stroke-linejoin:miter;marker:none;marker-start:none;marker-mid:none;marker-end:none;stroke-miterlimit:4.0000000;stroke-dasharray:none;stroke-dashoffset:0.0000000;stroke-opacity:1.0000000;visibility:visible;display:block;overflow:visible" + d="M 37.024959,16.436050 L 41.478871,22.493011 L 5.6482792,22.493011 L 9.7892982,16.312694 L 37.024959,16.436050 z " + id="path4954" + sodipodi:nodetypes="ccccc" /> + <g + id="g2892" + transform="matrix(0.676538,0.000000,0.000000,1.000000,3.994869,0.000000)"> + <path + style="opacity:1.0000000;color:#000000;fill:url(#radialGradient2896);fill-opacity:1.0000000;fill-rule:evenodd;stroke:none;stroke-width:2.0000000;stroke-linecap:round;stroke-linejoin:round;marker:none;marker-start:none;marker-mid:none;marker-end:none;stroke-miterlimit:4.0000000;stroke-dasharray:none;stroke-dashoffset:0.0000000;stroke-opacity:1.0000000;visibility:visible;display:inline;overflow:visible" + d="M 23.926073,12.101621 C 18.588065,12.101621 14.282569,14.129809 14.282569,16.641813 L 33.604773,16.641813 C 33.604773,14.129809 29.264081,12.101621 23.926073,12.101621 z " + id="path2882" /> + <path + id="path2141" + d="M 23.931961,12.861168 C 20.379986,12.861168 17.515057,14.210748 17.515057,15.882266 L 30.372285,15.882266 C 30.372285,14.210748 27.483936,12.861168 23.931961,12.861168 z " + style="opacity:1.0000000;color:#000000;fill:url(#radialGradient2898);fill-opacity:1.0000000;fill-rule:evenodd;stroke:none;stroke-width:2.0000000;stroke-linecap:round;stroke-linejoin:round;marker:none;marker-start:none;marker-mid:none;marker-end:none;stroke-miterlimit:4.0000000;stroke-dasharray:none;stroke-dashoffset:0.0000000;stroke-opacity:1.0000000;visibility:visible;display:inline;overflow:visible" /> + </g> + <g + transform="matrix(0.676538,0.000000,0.000000,1.000000,10.49487,0.000000)" + id="g2900"> + <path + id="path2902" + d="M 23.926073,12.101621 C 18.588065,12.101621 14.282569,14.129809 14.282569,16.641813 L 33.604773,16.641813 C 33.604773,14.129809 29.264081,12.101621 23.926073,12.101621 z " + style="opacity:1.0000000;color:#000000;fill:url(#radialGradient2906);fill-opacity:1.0000000;fill-rule:evenodd;stroke:none;stroke-width:2.0000000;stroke-linecap:round;stroke-linejoin:round;marker:none;marker-start:none;marker-mid:none;marker-end:none;stroke-miterlimit:4.0000000;stroke-dasharray:none;stroke-dashoffset:0.0000000;stroke-opacity:1.0000000;visibility:visible;display:inline;overflow:visible" /> + <path + style="opacity:1.0000000;color:#000000;fill:url(#radialGradient2908);fill-opacity:1.0000000;fill-rule:evenodd;stroke:none;stroke-width:2.0000000;stroke-linecap:round;stroke-linejoin:round;marker:none;marker-start:none;marker-mid:none;marker-end:none;stroke-miterlimit:4.0000000;stroke-dasharray:none;stroke-dashoffset:0.0000000;stroke-opacity:1.0000000;visibility:visible;display:inline;overflow:visible" + d="M 23.931961,12.861168 C 20.379986,12.861168 17.515057,14.210748 17.515057,15.882266 L 30.372285,15.882266 C 30.372285,14.210748 27.483936,12.861168 23.931961,12.861168 z " + id="path2904" /> + </g> + <path + style="opacity:0.87974685;fill:none;fill-opacity:1.0000000;fill-rule:evenodd;stroke:url(#linearGradient2269);stroke-width:1.0000000;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:4.0000000;stroke-dasharray:none;stroke-opacity:1.0000000" + d="M 9.6523127,16.371803 L 13.036643,10.593020 L 33.514841,10.517799 L 37.356782,16.369880 L 9.6523127,16.371803 z " + id="path4966" + sodipodi:nodetypes="ccccc" /> + </g> +</svg> diff --git a/2018-cryptofest/pres.pdf b/2018-cryptofest/pres.pdf Binary files differnew file mode 100644 index 0000000..0b08ec3 --- /dev/null +++ b/2018-cryptofest/pres.pdf diff --git a/2018-cryptofest/pres.tex b/2018-cryptofest/pres.tex new file mode 100644 index 0000000..8a9b8f6 --- /dev/null +++ b/2018-cryptofest/pres.tex @@ -0,0 +1,182 @@ +\documentclass[aspectratio=169]{beamer} +\usetheme{metropolis} +\usepackage{lmodern} +\usepackage[czech]{babel} +\usepackage[utf8]{inputenc} +\usepackage[T1]{fontenc} +\usepackage{graphicx} +\usepackage{wrapfig} +\usepackage{color} +\usepackage{mathtools} +\usepackage{hyperref} +\usepackage{epstopdf} +\usepackage{amsmath} +\hypersetup{ + colorlinks, + citecolor=black, + filecolor=black, + linkcolor=black, + urlcolor=black +} +\usepackage{pdflscape} + +\title{Bezpečné doručení distribučních balíčků} +\author{Karel Kočí} +\date{26.5.2018} + +\begin{document} + +\frame{\titlepage} + +\begin{frame} + \def\svgwidth{10cm} + \input{turris-logo.pdf_tex} +\end{frame} + +\begin{frame} + \frametitle{Balíček?} + \def\svgwidth{2cm} + \input{package.pdf_tex} + + \begin{itemize} + \item Meta informace (název, verze, ...) + \item Soubory + \item Hashe pro soubory + \end{itemize} + + Indexovány a uloženy v repositářích + \begin{itemize} + \item Repositář obsahuje index + \item Index obsahuje hashe balíčků a další meta informace + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Krypto terminologie} + \begin{itemize} + \item Hash + \item Asymetrická šifra + \item Kryptografický podpis + \item Certifikační autorita + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Útok \#1: Podvrhnutí repositářů} + \begin{itemize} + \item Vlastní server s upravenými balíčky distribuce + \item Kompromitace připojení k Internetu + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Ochrana \#1: Podpis} + \begin{itemize} + \item Před-distribuovaný veřejný klíč + \item Podepsané balíčky nebo index repositáře (lépe index) + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Útok \#2: Podvrhnutí starší verze repositářů} + \begin{itemize} + \item Kopie repositářů distribuce se známou zranitelností (Heartbleed, + CVE-2016-0777 CVE-2016-0778, ...) + \item Vlastní server se starší kopií repositářů distribuce + \item Kompromitace připojení k Internetu + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{``Ochrana'' \#2: Porovnání verzí} + Balíčky je možné pouze updatovat + \begin{itemize} + \item Downgrade je nutné schválit (ale jen u některých a uživatel...) + \item Downgrade je občas legitimní + \item Co update ze staré verze systému? (pravidelné aktualizace) + \item Co instalace? + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Ochrana \#2: HTTPS a SSL} + \begin{itemize} + \item Server s repositáři se ověřuje validním certifikátem + \item Identita serveru (jeho DNS jméno a pod.) je podepsána + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Útok \#3: Vlastní certifikát} + \begin{itemize} + \item Kopie repositářů distribuce se známou zranitelností + \item Vlastní server se starší kopií repositářů distribuce + \item Vlastní certifikát s totožnou identitou od "důvěryhodné" autority + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Ochrana \#3: Certification pinning} + \begin{itemize} + \item Omezit počet důvěryhodných certifikátů (pár vybraných) + \item Vždy mějte vlastní certifikační autoritu jako fallback! + \item Tak trochu hra v kostky + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Útok \#4: Podvrhnutí DNS} + \begin{itemize} + \item Kopie repositářů distribuce se známou zranitelností + \item Vlastní server se starší kopií repositářů distribuce + \item Kompromitace používaného DNS serveru (např: otrávení) a podvrhnutí + vlastní IP + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Ochrana \#4: DNSSEC} + \begin{itemize} + \item Kontrola správnosti DNS odpovědi pomocí podpisů + \item Odpověď je stejná tak jak ji poskytuje příslušný autoritativní + server + \end{itemize} + + \begin{itemize} + \item Nutné správné nastavení systému nejenom aplikace + \item Nízké uvědomění uživatelů o užitečnosti DNSSEC + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Útok \#5: BGP leak IP} + \begin{itemize} + \item Kopie repositářů distribuce se známou zranitelností + \item Vlastní server se starší kopií repositářů distribuce + \item Zneužití BGP ohlašování a přesměrování + \item Vlastní důvěryhodný certifikát s totožnou identitou (Let 's Encrypt) + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Ochrana \#5: RPKI} + \begin{itemize} + \item Kryptografické ověření přidělení ohlašované IP adresy + \end{itemize} + + \begin{itemize} + \item Nižší rozšířenost + \item Uživatelsky nekontrolovatelné a nevynutitelné + \item Výrazně složitý útok + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Děkuji za pozornost} + Udržujte svoje systémy aktuální! + + Nastavte si DNSSEC! +\end{frame} + + +\end{document} diff --git a/2018-cryptofest/turris-logo.svg b/2018-cryptofest/turris-logo.svg new file mode 100644 index 0000000..9b3dd77 --- /dev/null +++ b/2018-cryptofest/turris-logo.svg @@ -0,0 +1,46 @@ +<?xml version="1.0" encoding="UTF-8" standalone="no"?> +<svg + xmlns:dc="http://purl.org/dc/elements/1.1/" + xmlns:cc="http://creativecommons.org/ns#" + xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" + xmlns:svg="http://www.w3.org/2000/svg" + xmlns="http://www.w3.org/2000/svg" + version="1.1" + id="Vrstva_1" + x="0px" + y="0px" + viewBox="0 0 239.99999 84" + xml:space="preserve" + width="240" + height="84"><metadata + id="metadata29"><rdf:RDF><cc:Work + rdf:about=""><dc:format>image/svg+xml</dc:format><dc:type + rdf:resource="http://purl.org/dc/dcmitype/StillImage" /><dc:title></dc:title></cc:Work></rdf:RDF></metadata><defs + id="defs27" /><style + type="text/css" + id="style3"> + .st0{fill:#00A2E2;} +</style><g + id="g3357" + transform="matrix(0.77644775,0,0,0.77644775,-8.9499963e-8,0.723552)"><polygon + id="polygon5" + points="55.4,57.7 0,57.7 11.1,76.9 44.5,76.9 61.1,105.7 83.3,105.7 55.5,57.7 55.5,57.7 " /><polygon + id="polygon7" + points="86,52.9 102.7,24 91.6,4.8 63.9,52.9 91.6,101 102.7,81.8 " /><polygon + id="polygon9" + points="38.9,19.2 72.2,19.2 83.3,0 27.8,0 0,48.1 22.2,48.1 " + class="st0" + style="fill:#00a2e2" /><g + id="g11"><path + id="path13" + d="m 141.3,40.2 0,30 -9.1,0 0,-30 -10.7,0 0,-7.8 30.5,0 0,7.8 -10.7,0 z" /><path + id="path15" + d="m 187,62.1 c -0.8,1.9 -1.9,3.5 -3.3,4.8 -1.4,1.3 -3.1,2.4 -5.2,3.1 -2,0.7 -4.2,1.1 -6.7,1.1 -2.5,0 -4.7,-0.4 -6.7,-1.1 -2,-0.7 -3.7,-1.8 -5.1,-3.1 -1.4,-1.3 -2.5,-2.9 -3.2,-4.8 -0.7,-1.9 -1.1,-3.9 -1.1,-6.2 l 0,-23.5 9.1,0 0,22.8 c 0,1 0.1,2 0.4,2.9 0.3,0.9 0.7,1.8 1.2,2.5 0.6,0.7 1.3,1.3 2.2,1.7 0.9,0.4 2,0.6 3.3,0.6 1.3,0 2.4,-0.2 3.3,-0.6 0.9,-0.4 1.6,-1 2.2,-1.7 0.6,-0.7 1,-1.6 1.2,-2.5 0.2,-0.9 0.4,-1.9 0.4,-2.9 l 0,-22.8 9.1,0 0,23.5 c 0.1,2.3 -0.3,4.4 -1.1,6.2 z" /><path + id="path17" + d="m 215.8,70.2 -8.2,-15 -3.1,0 0,15 -8.9,0 0,-37.8 14.4,0 c 1.8,0 3.6,0.2 5.3,0.6 1.7,0.4 3.3,1 4.6,1.9 1.4,0.9 2.5,2.1 3.3,3.5 0.8,1.5 1.2,3.3 1.2,5.4 0,2.6 -0.7,4.7 -2.1,6.5 -1.4,1.7 -3.3,3 -5.8,3.7 l 9.9,16.2 -10.6,0 z m -0.4,-26.3 c 0,-0.9 -0.2,-1.6 -0.6,-2.2 -0.4,-0.6 -0.9,-1 -1.4,-1.3 -0.6,-0.3 -1.3,-0.5 -2,-0.6 -0.7,-0.1 -1.4,-0.2 -2.1,-0.2 l -4.9,0 0,8.8 4.3,0 c 0.8,0 1.5,-0.1 2.3,-0.2 0.8,-0.1 1.5,-0.3 2.1,-0.7 0.6,-0.3 1.2,-0.8 1.6,-1.4 0.5,-0.4 0.7,-1.2 0.7,-2.2 z" /><path + id="path19" + d="m 251.2,70.2 -8.2,-15 -3.1,0 0,15 -8.9,0 0,-37.8 14.4,0 c 1.8,0 3.6,0.2 5.3,0.6 1.7,0.4 3.3,1 4.6,1.9 1.4,0.9 2.5,2.1 3.3,3.5 0.8,1.5 1.2,3.3 1.2,5.4 0,2.6 -0.7,4.7 -2.1,6.5 -1.4,1.7 -3.3,3 -5.8,3.7 l 9.9,16.2 -10.6,0 z m -0.4,-26.3 c 0,-0.9 -0.2,-1.6 -0.6,-2.2 -0.4,-0.6 -0.9,-1 -1.4,-1.3 -0.6,-0.3 -1.3,-0.5 -2,-0.6 -0.7,-0.1 -1.4,-0.2 -2.1,-0.2 l -4.9,0 0,8.8 4.3,0 c 0.8,0 1.5,-0.1 2.3,-0.2 0.8,-0.1 1.5,-0.3 2.1,-0.7 0.6,-0.3 1.2,-0.8 1.6,-1.4 0.5,-0.4 0.7,-1.2 0.7,-2.2 z" /><path + id="path21" + d="m 266.4,70.2 0,-37.8 9.2,0 0,37.8 -9.2,0 z" /><path + id="path23" + d="m 303.3,42.2 c -0.8,-1 -1.8,-1.8 -3.1,-2.4 -1.3,-0.6 -2.5,-0.9 -3.7,-0.9 -0.6,0 -1.2,0.1 -1.8,0.2 -0.6,0.1 -1.2,0.3 -1.7,0.6 -0.5,0.3 -0.9,0.7 -1.3,1.2 -0.3,0.5 -0.5,1.1 -0.5,1.8 0,0.6 0.1,1.2 0.4,1.6 0.3,0.4 0.7,0.8 1.2,1.1 0.5,0.3 1.1,0.6 1.8,0.9 0.7,0.3 1.5,0.5 2.4,0.8 1.3,0.4 2.6,0.9 4,1.4 1.4,0.5 2.7,1.2 3.8,2.1 1.1,0.9 2.1,1.9 2.8,3.2 0.7,1.3 1.1,2.8 1.1,4.7 0,2.2 -0.4,4 -1.2,5.6 -0.8,1.6 -1.9,2.9 -3.2,3.9 -1.3,1 -2.9,1.8 -4.6,2.3 -1.7,0.5 -3.5,0.7 -5.4,0.7 -2.7,0 -5.3,-0.5 -7.8,-1.4 -2.5,-0.9 -4.6,-2.3 -6.3,-4 l 6,-6.1 c 0.9,1.1 2.1,2.1 3.7,2.9 1.5,0.8 3,1.1 4.5,1.1 0.7,0 1.3,-0.1 2,-0.2 0.6,-0.1 1.2,-0.4 1.7,-0.7 0.5,-0.3 0.9,-0.7 1.1,-1.3 0.3,-0.5 0.4,-1.2 0.4,-1.9 0,-0.7 -0.2,-1.3 -0.5,-1.8 -0.4,-0.5 -0.9,-1 -1.5,-1.4 -0.7,-0.4 -1.5,-0.8 -2.5,-1.1 -1,-0.3 -2.1,-0.7 -3.3,-1.1 -1.2,-0.4 -2.4,-0.9 -3.6,-1.4 -1.2,-0.5 -2.2,-1.2 -3.1,-2.1 -0.9,-0.8 -1.6,-1.9 -2.2,-3 -0.6,-1.1 -0.8,-2.6 -0.8,-4.4 0,-2.1 0.4,-3.9 1.3,-5.4 0.9,-1.5 2,-2.7 3.4,-3.7 1.4,-1 3,-1.7 4.7,-2.1 1.7,-0.4 3.5,-0.7 5.3,-0.7 2.1,0 4.3,0.4 6.5,1.2 2.2,0.8 4.2,1.9 5.8,3.5 l -5.8,6.3 z" /></g></g></svg>
\ No newline at end of file @@ -1,12 +1,16 @@ My talks ======== -Turris: Od Omnie k MOXu a 4.0 ------------------------------ +Bezpečné doručení distribučních balíčků (2018 Cryptofest) +--------------------------------------------------------- +[pdf](https://git.cynerd.cz/presentations/plain/2018-cryptofest/pres.pdf) + +Turris: Od Omnie k MOXu a 4.0 (2018 Opencamp) +--------------------------------------------- [pdf](https://git.cynerd.cz/presentations/plain/2018-opencampbr/pres.pdf) -Domácí wifi síť s OpenWRT -------------------------- +Domácí wifi síť s OpenWRT (2018 Installfest) +-------------------------------------------- [pdf](https://git.cynerd.cz/presentations/plain/2018-installfest/pres.pdf) Tipy a triky nejenom v shellu nejenom pro programátory (2017 Linuxday) |