4 ms·

There is an easy way to solve this at the protocol level: maintain a hash of everything that was said and sign it during authentication. Any downgrade attack wi

by phicoh 11y ago

There is an easy way to solve this at the protocol level: maintain a hash of everything that was said and sign it during authentication. Any downgrade attack will show up and cause the wrong hash to be signed.

schoen 11y ago
As I understand it, this fix has already been proposed for TLS by the developers of the triple-handshake attack, but it may take some time to be implemented and may never be implemented everywhere. https://www.ietf.org/archive/id/draft-bhargavan-tls-session-hash-01.txt https://www.ietf.org/archive/id/draft-bhargavan-tls-session-... I'm not quite sure why this Internet-Draft expired without a replacement or if this work is still continuing somewhere in the TLS WG.
- schoen 11y ago
  > I'm not quite sure why this Internet-Draft expired without a replacement Oh, because it was issued as an RFC! https://www.rfc-editor.org/rfc/rfc7627.txt https://www.rfc-editor.org/rfc/rfc7627.txt