111 reputation
2
bio website
location
age
visits member for 2 years, 1 month
seen Jul 9 at 0:23

Jun
19
comment Can you distinguish encryption methods from the output?
So, the answer is yes, thanks! As Poncho and Maeher have pointed out, it would be possible to change our protocols to conceal this bit. I wonder if anybody would feel insecure knowing that packet sniffers can tell how often they ask for a certificate...but I guess the sniffer gains a lot more information from knowledge of the traffic volume. Are there any protocols in regular use that "pad a lot" to create high volume at all times (thereby concealing more information)?
Jun
19
awarded  Scholar
Jun
19
accepted Can you distinguish encryption methods from the output?
Jun
19
awarded  Student
Jun
18
comment Can you distinguish encryption methods from the output?
"They can't encrypt any messages", you say. But, the client could use RSA encryption with the server's public key right after reboot, right? In theory, no eavesdropper should know then whether this is truly RSA or a continuation of the previous AES. But, the server could try both options and figure it out.
Jun
18
asked Can you distinguish encryption methods from the output?