3 ms·
It seems like the author was able to discover the vulnerability while in the process of specifying it in Coq (understanding the handshakes better during specifi
by hrjet 12y ago
It seems like the author was able to discover the vulnerability while in the process of specifying it in Coq (understanding the handshakes better during specification).
From what I read the Coq specification itself wasn't complete or used to discover the vulnerability.
Would be great if the author shed some light here.
- ian-lewis 12y agoThat seems correct. He discovered it while creating the coq specification but coq wasn't itself used to discover the bug. He confirmed that much in this podcast (It's in Japanese though): http://mozaic.fm/post/88061749963/4-security-protocol http://mozaic.fm/post/88061749963/4-security-protocol.