2 ms·
Sometimes you can interrogate the compression. CRIME attack: if you can provide something to the target system, then it will compress differently depending on
by dale_glass 3y ago
Sometimes you can interrogate the compression.
CRIME attack: if you can provide something to the target system, then it will compress differently depending on what's provided. If you guess right, then the compressed version will be smaller.
VOIP statistics: You can make very good guesses about encrypted voice communication by knowing how it compresses speech, figuring out how long different phonemes are, and statistically trying to reconstruct the conversation.
- the_only_law 3y ago> VOIP statistics: You can make very good guesses about encrypted voice communication by knowing how it compresses speech, figuring out how long different phonemes are, and statistically trying to reconstruct the conversation. This sounds interesting, do you know of any good resources to start learning about how to do this?
- dale_glass 3y agoFound it: http://www.cs.unc.edu/~fabian/papers/foniks-oak11.pdf http://www.cs.unc.edu/~fabian/papers/foniks-oak11.pdf
- thayne 3y agoHow would you make a CRIME attack with typical use cases for OpenPGP? Most cases I've seen PGP/GPG used, there isn't any opportunity for chosen plaintext.