NCC Group’s Cryptopals Guided Tour
research.nccgroup.com
research.nccgroup.com
For a long while company I work for used Cryptopals as means to train/qualify interns before letting them touch serious practical stuff.
Not that knowing answers is a problem (there were public solutions, albeit clunky, before), but such careful explanation almost eliminates the fun in solving to some extent.
Gotta come up with our own take w/o public tour now, is anyone aware of any similar sets of challenges? CryptoHack is ok, but fairly deterministic one that removes “oh where do I go now” feeling, which is essential to bear with to learn to love the craft.
Edits: typos.
(In case anyone else was curious - looks like the original authors are currently at Apple, Bridgewater, and Fly.io)
Just a few months ago a padding Oracle exploit was found against Microsoft exchange. There's a immense attack surface still out there for people who do these challenges.
Recommend both for experienced and novice techies.
Loads of fun!