Timeline for Padding Oracle Attack with AES-128-CTR and MAC
Current License: CC BY-SA 4.0
18 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| S Jul 21, 2020 at 19:50 | history | suggested | arunanshub | CC BY-SA 4.0 |
Improved title
|
| Jul 21, 2020 at 18:58 | review | Suggested edits | |||
| S Jul 21, 2020 at 19:50 | |||||
| Dec 5, 2017 at 10:35 | vote | accept | AnswerFinder95 | ||
| Dec 5, 2017 at 10:35 | |||||
| Dec 5, 2017 at 10:30 | answer | added | Cédric Van Rompay | timeline score: 2 | |
| Dec 5, 2017 at 9:55 | comment | added | Cédric Van Rompay | I think the title of the question should be improved. Something like "finding message length in MAC-then-encrypt" maybe ? | |
| Dec 5, 2017 at 8:45 | history | edited | e-sushi | CC BY-SA 3.0 |
added 5 characters in body
|
| Dec 5, 2017 at 8:26 | history | edited | AnswerFinder95 | CC BY-SA 3.0 |
added 87 characters in body
|
| Dec 5, 2017 at 8:21 | comment | added | AnswerFinder95 | Thanks man. I'll include it at the bottom of the question here. | |
| Dec 5, 2017 at 8:15 | comment | added | Maarten Bodewes♦ | You can always include it at the bottom of the question. I'm not sure if I have the time to do anything with it but maybe somebody else will. If possible I would try and create a scheme yourself with the info given. The idea of these kind of questions is to practice. | |
| Dec 5, 2017 at 4:18 | comment | added | AnswerFinder95 | I can show you the original assignment question if you want to see that in reference to this. | |
| Dec 4, 2017 at 13:26 | comment | added | Maarten Bodewes♦ | I think forcing a specific length for Z is the only way to go. So you flip bits in such a way that an error is generated (or not) depending on the guessed bits of Z. But the exercise is rather weird, as CTR mode doesn't require any padding in the first place - it probably stresses the fact that MAC-then-encrypt is dangerous even if you use CTR mode, or that plaintext / padding oracle attacks can be performed not just on ECB/CBC if the protocol involves padding. | |
| Dec 4, 2017 at 10:44 | comment | added | AnswerFinder95 | @MaartenBodewes we had a similar assignment question in which we had to find if there is a padding error or MAC error. I am using the same script for my project thesis but i need to research first on the workings and all possibilities. To my knowledge both padding oracle attack and bit flipping are the similar, i did research on padding oracle attack for CBC mode. I know in padding oracle we flip a bit and then send it to oracle to know if it returns good padding or bad padding, that way we can defeat the system. | |
| Dec 4, 2017 at 10:39 | comment | added | Maarten Bodewes♦ | This looks like an assignment to me. What have you tried? What is the difference between flipping the bit and a padding oracle attack? | |
| Dec 4, 2017 at 10:01 | comment | added | AnswerFinder95 | So how can eve know the length of the message? Thats confusing me. | |
| Dec 4, 2017 at 9:59 | history | edited | e-sushi | CC BY-SA 3.0 |
fixed formatting et al.
|
| Dec 4, 2017 at 9:58 | history | edited | e-sushi | CC BY-SA 3.0 |
added 3 characters in body
|
| Dec 4, 2017 at 3:47 | review | First posts | |||
| Dec 4, 2017 at 10:00 | |||||
| Dec 4, 2017 at 3:45 | history | asked | AnswerFinder95 | CC BY-SA 3.0 |