Before the third handshake, server Alice has to require a session renegotiation, including client authentication, on its connection with Mallory, possibly in response to Mallory’s request for some restricted resource. [...]
21.2 POODLE POODLE stands for Padding Oracle On Downgraded Legacy Encryption and was discovered in 2014 by Möller, Duong, and Kotowicz [122]. The name shows that the attack combines two [...]
21.5.2 The compression side channel Back in 2002, John Kelsey, a cryptographer working for Certicom at that time, published a paper [98] describing how lossless data compression, when used in [...]
21.5.6 BREACH In the second half of 2013, security researchers Yoel Gluck, Neal Harris, and Angelo Prado published a modification of CRIME that they called Browser Reconnaissance and Exfiltration via [...]
22.1 SMACK In 2015, a group of French security researchers with Benjamin Beurdouche systematically tested the then-popular open source TLS implementations for state-machine-related bugs and uncovered multiple critical security vulnerabilities [...]
22.4.2 The Heartbleed bug Heartbleed is the result of improper input validation – more precisely, a missing bounds check – in the OpenSSL implementation of the TLS Heartbeat extension. Technically, [...]
22.6 Random number generation In Chapter 3 A Secret to Share, we learned that the security of most protocols and mechanisms depends on the generation of random sequences of bits [...]
22.8.1 Details of the the Cloudbleed bug To build a Ragel-based parser, the Ragel code is automatically transformed into C code. The C code is then compiled into an executable. [...]
22.9.1 Side channel attacks In side channel attacks, Eve exploits information that the implementation of a cryptographic algorithm leaks through so-called side channels. Side channels are observable physical quantities, such [...]
22.9.2 Raccoon The Raccoon attack [118] provides an example of a timing attack against the TLS handshake. It allows attackers under certain conditions to get hold of the PreMasterSecret established [...]