Timeline for How can Cipher Block Chaining (CBC) in SSL be attacked?
Current License: CC BY-SA 3.0
12 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 1, 2018 at 4:42 | comment | added | dave_thompson_085 | Nitpick: CBC suites in SSL and TLS1.0 use the last block of the previous record as IV (except for first record, which uses the PRF expansion); that can be 64 or 128 bits depending on (the data-cipher component of) the negotiated suite. | |
| Mar 31, 2018 at 13:07 | comment | added | Maarten Bodewes♦ | Note that CBC padding oracles are also possible for TLS because it uses mac-then-encrypt instead of encrypt-then-mac. Implementations need to be programmed in such a way that they ignore padding oracles. See also: POODLE attack | |
| S Mar 31, 2018 at 5:01 | history | suggested | Erwan Legrand | CC BY-SA 3.0 |
Workaround is for TLS 1.0, not SSL 1.0 which was never released by Netscape. (And fix typos.)
|
| Mar 30, 2018 at 16:47 | review | Suggested edits | |||
| S Mar 31, 2018 at 5:01 | |||||
| Apr 13, 2017 at 12:48 | history | edited | CommunityBot |
replaced http://crypto.stackexchange.com/ with https://crypto.stackexchange.com/
|
|
| Mar 24, 2016 at 15:35 | comment | added | linbianxiaocao | Wonderful explanations. It is key to know that IV1, IV2 can be obtained fairly easily in TLS 1.0, but this is made impossible in TLS 1.1 and 1.2. Without knowing two IVs, CBC attack can not be done. | |
| Aug 22, 2013 at 7:46 | history | edited | imichaelmiers | CC BY-SA 3.0 |
added 285 characters in body
|
| Oct 29, 2011 at 17:29 | comment | added | Paŭlo Ebermann | I edited your answer a bit to make it clear that you speak about the BEAST attack - I hope I interpreted this right. Feel free to edit again, or roll back my change. | |
| Oct 29, 2011 at 17:27 | history | edited | Paŭlo Ebermann | CC BY-SA 3.0 |
add some details, formatting
|
| Oct 28, 2011 at 16:12 | vote | accept | antonpug | ||
| Nov 21, 2011 at 16:07 | |||||
| Oct 28, 2011 at 16:12 | vote | accept | antonpug | ||
| Oct 28, 2011 at 16:12 | |||||
| Oct 27, 2011 at 17:50 | history | answered | imichaelmiers | CC BY-SA 3.0 |