3 ms·

Plaintext recovery on TLS when using CBC using timing attack

• runn1ng 14y ago
  "We have demonstrated a variety of attacks against implemen-tations of (D)TLS. We reiterate that the attacks are ciphertext-only, and so can be carried out by the standard MITM attacker, without a chosen-plaintext capability."