6 ms·
It's fair to say that this is still a theoretical attack. As authors of this paper mentioned, they don't see a way of turning the "flaw" into a real exploit.
by paulmillr 11y ago
It's fair to say that this is still a theoretical attack. As authors of this paper mentioned, they don't see a way of turning the "flaw" into a real exploit.
- dnlrn 11y agoWell, a theoretical attack is worse than no theoretical attack. Especially if there are perfectly fine protocols available that are IND-CCA2 secure.
- tptacek 11y agoIt's not a theoretical attack. https://news.ycombinator.com/item?id=10713064 https://news.ycombinator.com/item?id=10713064
- illumen 11y agoThe article says: "We stress that this is a theoretical attack on the definition of security and we do not see any way of turning the attack into a full plaintext-recovery attack." ... which appears wrong, and even published after the other paper?
- detaro 11y agoAnd the article linked by tptacek (by the same authors) builds on this and shows practical attacks.
- sdevlin 11y agoTheoretical attacks have a way of turning into weaponized exploits. For example, check out https://www.openssl.org/~bodo/tls-cbc.txt https://www.openssl.org/~bodo/tls-cbc.txt. This is a document published by Bodo Moeller in the early 2000s that details multiple theoretical weaknesses in the CBC mode used in TLS. Read it top to bottom and see how many practical attacks on TLS you can count.
- tptacek 11y agoThis one was turned into a further-weaponized attack, published in the author's masters thesis, which is in the bibliography for the paper. I don't know why this paper was published independently, as it's a building block for the other attack.
- psycocrypt 11y agoWhat other attack?
- detaro 11y agohttps://news.ycombinator.com/item?id=10713064 https://news.ycombinator.com/item?id=10713064