3 ms·
I'm not sure what the bar mitvah attack is exactly, that link is kind of vague. This paper is based on the statistical biases of pairs of bytes in the output s
by bradleyjg 12y ago
I'm not sure what the bar mitvah attack is exactly, that link is kind of vague.
This paper is based on the statistical biases of pairs of bytes in the output stream of RC4, which they credit originally to Fluhrer and McGrew in this paper from 2000: http://www.mindspring.com/~dmcgrew/rc4-03.pdf http://www.mindspring.com/~dmcgrew/rc4-03.pdf
Their main contribution is to combine reasonable guesses about the nature of the plaintext with the biases in the cyphertext to improve the time to recover. They also extend the state of knowledge about the byte pair biases in the early keystream.
- mmebane 12y agoMy first thought was that the authors may have independently discovered the same flaw that is going to be presented at Black Hat Asia, but the paper does seem to be "getting more out of existing weaknesses" and not "publishing new attacks", which is what the Black Hat abstract promises.