A Challenging But Feasible Blockwise-Adaptive Chosen-Plaintext Attack on SSL

A Challenging But Feasible Blockwise-Adaptive Chosen-Plaintext Attack on SSL (2006)

by Gregory V. Bard

Venue:	SECRYPT 2006, PROCEEDINGS OF THE INTERNATIONAL CONFERENCE ON SECURITY AND CRYPTOGRAPHY, SET'UBAL
Citations:	5 - 1 self

User correction supplied by mph

Datum	Value	Source
TITLE	A Challenging But Feasible Blockwise-Adaptive Chosen-Plaintext Attack on SSL	user correction
AUTHOR NAME	Gregory V. Bard	user correction
AUTHOR AFFIL	University of Maryland, Department of Mathematics	user correction
AUTHOR ADDR	College Park, MD, 20914, USA	user correction
ABSTRACT	This paper introduces a chosen-plaintext vulnerability in the Secure Sockets Layer (SSL) and Trasport Layer Security (TLS) protocols which enables recovery of low entropy strings such as can be guessed from a likely set of 2--1000 options. SSL and TLS are widely used for securing communication over the Internet. When utilizing block ciphers for encryption, the SSL and TLS standards mandate the use of the cipher block chaining (CBC) mode of encryption which requires an initialization vector (IV) in order to encrypt. Although the first IV used by SSL is a (pseudo)random string which is generated and shared during the initial handshake phase, subsequent IVs used by SSL are chosen in a deterministic, predictable pattern; in particular, the IV of a message is taken to be the final ciphertext block of the immediately-preceding message, and is therefore known to the adversary. The one-	user correction
YEAR	2006	INFERENCE
VENUE	SECRYPT 2006, PROCEEDINGS OF THE INTERNATIONAL CONFERENCE ON SECURITY AND CRYPTOGRAPHY, SET'UBAL	user correction
VENUE TYPE	CONFERENCE	INFERENCE
PAGES	7--10	INFERENCE
TECH	E-print, Report 2006/136	INFERENCE
CITATIONS	25 found	ParsCit 1.0