Forgot your password?
typodupeerror
Security

+ - Researchers devise new attack techniques against SSL ->

Submitted by alphadogg
alphadogg (971356) writes "The developers of many SSL libraries are releasing patches for a vulnerability that could potentially be exploited to recover plaintext information, such as browser authentication cookies, from encrypted communications.The patching effort follows the discovery of new ways to attack SSL, TLS and DTLS implementations that use cipher-block-chaining (CBC) mode encryption. The new attack methods were developed by researchers at the University of London's Royal Holloway College. The men published a research paper and a website http://www.isg.rhul.ac.uk/tls/ on Monday with detailed information about their new attacks, which they have dubbed the Lucky Thirteen. They've worked with several TLS library vendors, as well as the TLS Working Group of the IETF, to fix the issue."
Link to Original Source
This discussion was created for logged-in users only, but now has been archived. No new comments can be posted.

Researchers devise new attack techniques against SSL

Comments Filter:

Almost anything derogatory you could say about today's software design would be accurate. -- K.E. Iverson

Working...