[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
new draft of my paper
I normally wouldn't announce a new version of a draft paper this
soon; however, David Wagner has found a fascinating new attack
called the ``short block'' attack. It's described in Section 3.8.
The attack can recover read most user-to-host traffic on a large
class of telnet sessions (though not all), using 2^8 known plaintext
blocks and a simple active attack. This attack can be defeated if AH
is used outside of ESP, protecting the integrity of the encrypted
message (i.e., IP-AH-ESP-TCP is safe); using AH inside of ESP is not
safe.
The paper is in ftp://ftp.research.att.com/dist/smb/badesp.ps
Follow-Ups: