3 ms·
> The attacker only needs to brute force 32 bits (source port and TxID) to falsify a response and poison the cache. And to be clear: while there are 4.3 billio
by 0xbadcafebee 1y ago
> The attacker only needs to brute force 32 bits (source port and TxID) to falsify a response and poison the cache.
And to be clear: while there are 4.3 billion numbers, the birthday paradox means you only need to spam 65,535 UDP packets to succeed
- mlyle 1y agoI've not read the details, but given that things aren't being matched against themselves-- Seems like you need to send ~ 2^16 requests and then ~ 2^16 spoofed replies.