Repository logo

Infoscience

  • English
  • French
Log In
Logo EPFL, École polytechnique fédérale de Lausanne

Infoscience

  • English
  • French
Log In
  1. Home
  2. Academic and Research Output
  3. Conferences, Workshops, Symposiums, and Seminars
  4. Security flaws induced by CBC padding - Applications to SSL, IPSEC, WTLS...
 
conference paper

Security flaws induced by CBC padding - Applications to SSL, IPSEC, WTLS...

Vaudenay, Serge  
2002
Advances in Cryptology — EUROCRYPT 2002
Advances in Cryptology - EUROCRYPT 2002. International Conference on the Theory and Applications of Cryptographic Techniques

In many standards, e.g. SSL/TLS, IPSEC, WTLS, messages are first pre-formatted, then encrypted in CBC mode with a block cipher. Decryption needs to check if the format is valid. Validity of the format is easily leaked from communication protocols in a chosen ciphertext attack since the receiver usually sends an acknowledgment or an error message. This is a side channel. In this paper we show various ways to perform an efficient side channel attack. We discuss potential applications, extensions to other padding schemes and various ways to fix the problem

  • Files
  • Details
  • Metrics
Type
conference paper
DOI
10.1007/3-540-46035-7_35
Web of Science ID

WOS:000189414700035

Author(s)
Vaudenay, Serge  
Date Issued

2002

Published in
Advances in Cryptology — EUROCRYPT 2002
Series title/Series vol.

Lecture Notes in Computer Science; 2332

Start page

534

End page

545

Subjects

NCCR-MICS

•

NCCR-MICS/CL3

Editorial or Peer reviewed

REVIEWED

Written at

EPFL

EPFL units
LASEC  
Event nameEvent placeEvent date
Advances in Cryptology - EUROCRYPT 2002. International Conference on the Theory and Applications of Cryptographic Techniques

Amsterdam, Netherlands

April 28 - May 2, 2002

Available on Infoscience
January 18, 2007
Use this identifier to reference this record
https://infoscience.epfl.ch/handle/20.500.14299/239691
Logo EPFL, École polytechnique fédérale de Lausanne
  • Contact
  • infoscience@epfl.ch

  • Follow us on Facebook
  • Follow us on Instagram
  • Follow us on LinkedIn
  • Follow us on X
  • Follow us on Youtube
AccessibilityLegal noticePrivacy policyCookie settingsEnd User AgreementGet helpFeedback

Infoscience is a service managed and provided by the Library and IT Services of EPFL. © EPFL, tous droits réservés