4 ms·
The page is oddly written in a variety of ways: "The team was astonished," the insistence on "G-mail," and what is this doing in there: "Apple has decided to u
by zerocrates 10y ago
The page is oddly written in a variety of ways: "The team was astonished," the insistence on "G-mail," and what is this doing in there:
"Apple has decided to use alternatives such as Advanced Encryption Standard, Cipher Block Chaining (AES-CBC) + Keyed Hash Authentication (HMAC) to achieve both confidentiality and integrity for sensitive data transmitted over the Internet."
They're talking about a vulnerability in QUIC, a protocol Apple doesn't support, to my knowledge. To the extent that eyebrows are waggled in the direction of AES-GCM in TLS, Apple supports that as well.
"AES-GCM is also used by TLS version 1.2. We have been unable to verify the Ring-Road vulnerability in TLS due to time constraints, but we strongly encourage other researchers to study TLS version 1.2 to see if Ring-Road exists."
Is this the same thing as what somebody previously called the "bicycle attack"? [1] (it went over like a lead balloon so you're forgiven for not having noticed)
[1] https://guidovranken.wordpress.com/2015/12/30/https-bicycle-attack/ https://guidovranken.wordpress.com/2015/12/30/https-bicycle-...