4 ms·
"Ciphers +3des-cbc"?? No way. https://sweet32.info https://sweet32.info
by j3th9n 6y ago
"Ciphers +3des-cbc"?? No way.
https://sweet32.info https://sweet32.info
- exikyut 6y ago> We show that a network attacker who can monitor a long-lived Triple-DES HTTPS connection between a web browser and a website can recover secure HTTP cookies by capturing around 785 GB of traffic. > In our proof-of-concept demo, this attack currently takes less than two days, using malicious Javascript to generate traffic. > Keeping a web connection alive for two days may not seem very practical, but it worked easily in the lab. Oooookay...
- tomxor 6y agohehe, I'm pretty sure that's way longer than the non-stanby time of this blackberry.
- jeroenhd 6y agoGiven that the attack requires capturing over 780GiB of data encrypted with the same key, I don't think that's a direct problem with this setup.