Exploring AgileSec: Advanced Crypto Inventory Management with Keyfactor

Key Concepts

• Crypto Inventory: Comprehensive visibility and management of cryptographic assets across an organization's entire infrastructure.
• Agilesec: Keyfactor's product for crypto inventory, providing insights into certificates, algorithms, protocols, and other cryptographic elements.
• Post-Quantum Computing (PQC): The anticipated era where quantum computers can break current cryptographic algorithms.
• TLS 1.3: The latest version of the Transport Layer Security protocol, offering improved security and performance.
• Cipher Suites: Sets of cryptographic algorithms used for key exchange, encryption, and message authentication.
• Q-Day: The hypothetical day when quantum computers become powerful enough to break current encryption standards.

1. Introduction to Agilesec and Crypto Inventory

• Eric Mizell, Field CTO at Keyfactor, introduces Agilesec, a product focused on crypto inventory.
• The discussion centers on cryptography across an entire landscape, including networks, F5 servers, desktops, and code libraries.
• The goal is to provide visibility and management of cryptographic assets beyond just crypto wallets.

2. Agilesec Demo: High-Level Insights and Drill-Down Capabilities

• The Agilesec dashboard provides high-level insights into cryptographic posture, using a red, yellow, and green color-coding system to highlight areas of concern.
• Users can drill down by source to investigate specific issues.
• Example: A scan of a physical server (demo drive.com) reveals certificates, algorithms, libraries, and protocols present on the box.
• The system identifies outdated protocols, such as those not supporting TLS 1.3 for PQC readiness.

3. Code Library Scanning and Post-Quantum Readiness

• Agilesec can scan code libraries (e.g., GitHub repositories) to identify algorithms and certificates used within the code.
• This is crucial for assessing post-quantum readiness, as existing code may contain outdated algorithms vulnerable to quantum attacks.
• Key Point: Post-quantum readiness extends beyond certificates to include the algorithms used in code.

4. Website Scanning and Protocol Analysis

• The demo includes a scan of the Keyfactor website to assess its cryptographic configuration.
• The scan reveals the presence of TLS 1.3 (good) but also TLS 1.2 (problematic for post-quantum).
• Real-World Application: Scanning F5 servers in front of applications is essential to ensure they support modern protocols.

5. Pre-Built Dashboards for In-Depth Analysis

• Agilesec offers dozens of pre-built dashboards for specific areas of analysis.
• Example: A protocol dashboard highlights high-risk areas related to protocol usage.
• The dashboard provides detailed information on cipher suites, key exchanges, and vulnerabilities.
• Users can drill down to the server level to identify specific issues, including IP addresses, ports, and protocols in use.
• The system provides granular data, allowing users to see everything about a specific server and its cryptographic configuration.

6. F5 Integration and Future Enhancements

• Currently, Agilesec scans F5 BIG-IP units as a whole.
• Future development aims to provide deeper insights into F5 configurations, potentially down to the virtual server level.
• This enhanced integration will be critical for comprehensive crypto inventory in F5 environments.

7. The Importance of Post-Quantum Posture

• Agilesec is designed to help organizations understand their post-quantum posture.
• "What I don't know is going to kill me" - Eric Mizell emphasizes the importance of visibility into cryptographic assets.
• The discussion highlights the urgency of preparing for Q-Day and ensuring accountability for all certificates on the network.

8. Conclusion

• The demo showcases Agilesec as a tool for gaining comprehensive visibility into cryptographic assets and preparing for the post-quantum era.
• The ability to scan servers, code libraries, and websites provides a holistic view of an organization's cryptographic posture.
• The pre-built dashboards and drill-down capabilities enable users to identify and address specific vulnerabilities.
• Preparing for Q-Day and maintaining accountability for all certificates are crucial steps for organizations to protect themselves against future threats.