Dmitry Sklyarov cracked digital signature in Canon cameras

Russian hacker and cryptographer Dmitry Sklyarov from Elcomsoft became famous even after the scandal with Adobe, which led to his arrest at the 2001 hacker conference Defcon. After a powerful public campaign, Sklyarov was released in 2002, but he continues to do the same noble cause under the motto “information must be free”. That is, continues to crack various cryptographic algorithms.

Another victim of Sklyarov was Canon Original Data Security’s photo authentication authentication algorithm in Canon digital cameras. Using the OSK-E3 toolkit (special software and a smart card), one could reliably check the originality of photos by reading the Original Decision Data (ODD) digital signature, which was recorded in the EXIF ​​block of JPG files and contained encrypted information about the date and coordinates of the survey.

The service was widely used by criminologists, lawyers, as well as in construction and to prepare evidence for presentation in court.

The OSK-E3 Photo Originality Kit is priced at about $ 700.

Now such evidence will not be taken.
')
To demonstrate the fact of hacking, Dmitry Sklyarov published a series of photos with a forged digital signature. These are pictures of the Soviet flag on the moon, a UFO over Mount Fuji, Stalin with an iPod and the Statue of Liberty with a sickle in his hand.









Sklyarov informed Canon about the vulnerability in September, but did not receive any response, so now the information is laid out in open access .

The vulnerability report was presented on November 30 in Prague at the CONFidence 2.0 conference.