SSL Cracked?

Vancouverite · Posted: Sat Feb 22, 2003 7:30 am Post subject: SSL Cracked?

Here's an interesting news article folks (older version of SSL):
http://asia.news.yahoo.com/030220/afp/030220155403hightech.html

drakonite · l33t Joined: 02 Nov 2002 Posts: 768 Location: Lincoln, NE

That article lacked any details, but I'm more than certain it's the same issue that was on slashdot yesterday.

I do not completly understand the vulerability but it seems that it was basically that an incorrect cypher block returned a different length response, and using this they were able to narrow things down and use various methods to grab the cypher block that was used.

There is already a fix for this (check the annoucements forum on these message boards) so the issue is "fixed."
_________________
Shoot Pixels Not People

My GPG/PGP Public key

aardvark · Guru Joined: 30 Jun 2002 Posts: 576

http://www.cnn.com/2003/TECH/internet/02/21/email.encryption.reut/index.html

aardvark · Guru Joined: 30 Jun 2002 Posts: 576

http://www.cnn.com/2003/TECH/internet/02/21/email.encryption.reut/index.html