3 ms·
my understanding was that at least one of the attacks from a while back only gave the oracle due to different actual error descriptions in the response, whereas
by wepple 10y ago
my understanding was that at least one of the attacks from a while back only gave the oracle due to different actual error descriptions in the response, whereas had there been custom error pages defined for all errors, there was no oracle to use.
I could very easily be wrong though.
- tptacek 10y agoNope. It's any behavior change in response to bad ciphertexts, which changes are easily inferred. For instance: Lucky 13 is a padding oracle that uses only very fine-grained timing information to discern errors.