Ignat Korchagin is a security engineer at Cloudflare working mostly on platform and hardware security. Ignat's interests are cryptography, hacking, and low-level programming. Before Cloudflare, Ignat worked as a senior security engineer for Samsung Electronics' Mobile Communications Division. His solutions may be found in many older Samsung smart phones and tablets. Ignat started his career as a security researcher in the Ukrainian government's communications services.
Live-patching weak crypto with OpenSSL engines
Do you have an old proprietary piece of software, which uses weak crypto, and you can’t throw it away? Is it based on OpenSSL (very likely due to OpenSSL popularity and permissive license)? If yes, you’re in luck: you can fix your system without the need to have the source code or to mess with low-level assembly nightmare.