632 reputation
29
bio website
location
age
visits member for 1 year, 9 months
seen 2 days ago

Jul
31
comment Does TLS use RC4-drop[n]?
Now it makes sense, thanks again. I was confused by RFC 4345 mentioning the possibility of recovering the key from the first keystream output bytes, but now I think they probably just want to be on the safe side and are not referring to actual attacks in that paragraph.
Jul
31
accepted Does TLS use RC4-drop[n]?
Jul
31
comment Does TLS use RC4-drop[n]?
Thanks, that pretty much answers my question. Just to make sure, regarding the second issue: There is no (known) way to derive the RC4 key from a single keystream alone, right? So even when the very first thing that is sent in a RC4 encrypted connection is gigabytes of known plaintext (zeroes, for example), the key cannot be easily recovered? (Assuming that the initial key has never been used before, even partially - unlike WEP etc.)
Jul
31
asked Does TLS use RC4-drop[n]?
Jul
31
awarded  Scholar
Jul
31
accepted How does a birthday attack on a hashing algorithm work?
Jul
31
accepted Why is a MAC needed?
Jul
20
awarded  Editor
Jul
20
revised How does a birthday attack on a hashing algorithm work?
added 209 characters in body
Jul
20
awarded  Supporter
Jul
20
asked How does a birthday attack on a hashing algorithm work?
Jul
20
awarded  Student
Jul
20
asked Why is a MAC needed?
Jul
20
asked Deniability of OTR messaging