Camp++ 0x7e4

Climbing the SPHINX
2020-08-22, 15:30–16:00, Klapka

The journey of porting it to Android and the detours of fixing design vulnerabilities.


When I first heard of SPHINX, I realized it should be ported to Android. Being involved in a previously one-man-show project resulted in interesting finds. Although the porting was already an interesting task, it was also exciting to find how different design decisions and their consequences might seem to someone else. I found some functional errors and vulnerabilities in the design itself, so this port was not just a port to another platform but rather a technical review of the whole project from the viewpoint of it actually being used in a distributed manner. In this talk, I'll describe where it all started, what we found, how we fixed it and where we got.