Abstract:Traditionally, "Cryptography" is a benediction to information processing and communications, it helps people to store information securely and the private communications over long distances. Cryptovirology is the study of applications of cryptography to build the malicious software. It is an investigation, how modern cryptographic tools and paradigms can be used to strengthen, develop and improve new malicious software attacks. Cryptovirology attacks have been categorized as : give malware enhanced privacy and be more robust against reverse-engineering, secondly give the attacker enhanced anonymity while communicating with deployed malware. This paper presents the idea of "Cryptovirology" which introduce a twist on how cryptography can also be used offensively. Being offensive means, it can be used to mount extortion based attacks that cause loss of access to information, loss of confidentiality, and information leakage, tasks which cryptography usually prevents. Also analyze threats and attacks that misuse of cryptography can cause when combined with fraudulent software (viruses, Trojans). Public-key cryptography is very essential for the attacks that based on cryptovirology. This paper also suggest some of the countermeasures, mechanisms to cope with and prevent such attacks. Even if the attackers actions on the host machine are being monitored, it still cannot be proven beyond reasonable doubt that he or she is the attacker; and it is an "originator-concealing attack". Evidence should be collected from the "author's own system which was used for the attack". These attacks have implications on how the use of cryptographic tools and techniques should be audited and managed in general purpose computing environments, and imply that access to the cryptographic tools should be in well control of the system(such as API routines).

The dangerous path towards your own cryptography method

A Secure Scan Method for Crypto Chips

How Effective Are the Prevailing Attack-Defense Models for Cybersecurity Anyway?

You Really Shouldn't Roll Your Own Crypto: An Empirical Study of Vulnerabilities in Cryptographic Libraries

Cryptanalysis and improvement of multimodal data encryption by machine-learning-based system

Fundamental Challenges in Cybersecurity and a Philosophy of Vulnerability-Guided Hardening

Malicious cryptography techniques for unreversable (malicious or not) binaries

Some hints for the design of digital chaos-based cryptosystems: lessons learned from cryptanalysis

A New cryptanalysis model based on random and quantum walks

To Fix or Not to Fix: A Critical Study of Crypto-misuses in the Wild

Learning Perfectly Secure Cryptography to Protect Communications with Adversarial Neural Cryptography

An Economical Model for the Risk Evaluation of Dos Vulnerabilities in Cryptography Protocols

A New Approach of Cryptography for Data Encryption and Decryption

Finding Security Vulnerabilities in IoT Cryptographic Protocol and Concurrent Implementations

Bayesian Modeling for Differential Cryptanalysis of Block Ciphers: A DES Instance

Some Thoughts on Chaotic Cryptography and Its Key Issues

Revisiting and Evaluating Software Side-channel Vulnerabilities and Countermeasures in Cryptographic Applications

Mathematical Backdoors in Symmetric Encryption Systems - Proposal for a Backdoored AES-like Block Cipher

Post-Quantum Security: Opportunities and Challenges

A Longitudinal Study of Cryptographic API: a Decade of Android Malware

Cryptovirology: Virus Approach