Before the third handshake, server Alice has to require a session renegotiation, including client authentication, on its connection with Mallory, possibly in response to Mallory’s request for some restricted resource. [...]
21.3 BEAST Browser Exploit Against SSL/TLS (BEAST) [55] is an attack on the CBC-based encryption of the record layer in SSL 3.0 and TLS 1.0. It is not a padding [...]
21.5.3 Brief history of compression in TLS Both TLS version 1.0 released in 1999 [47] and TLS version 1.1 released in 2006 [48] specify compression for TLS records. One of [...]
21.5.7 HEIST In 2016, Mathy Vanhoef and Tom Van Goethem, two security researchers from Belgium, published yet another attack on TLS that exploits the compression side channel. They called their [...]
22.2 FREAK FREAK stands for Factoring RSA Export Keys. The attack was discovered in 2017 ([27]) and can be seen as a variant of the cipher suite downgrade attack shown [...]
22.4.3 The bugfix The bugfix for the Heartbleed bug is shown in Listing 22.3. It is a simple bounds check using the actual TLS record length in the s3-¿rrec data [...]
22.8 Cloudbleed In 2017, Tavis Ormandy, a vulnerability researcher in Google’s Project Zero team, reported a security vulnerability in Cloudflare’s edge servers [76]. Cloudflare is a large Content Delivery Network [...]
22.8.1 Details of the the Cloudbleed bug To build a Ragel-based parser, the Ragel code is automatically transformed into C code. The C code is then compiled into an executable. [...]
Truncation attacks show why it is important that both Alice and Bob have the same view of the cryptographic protocol they are executing. If Bob thinks they are both in [...]
22.9.2 Raccoon The Raccoon attack [118] provides an example of a timing attack against the TLS handshake. It allows attackers under certain conditions to get hold of the PreMasterSecret established [...]