Attacking RSA-based sessions in SSL/TLS

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 2779, Issue , 2003, Pages 426-440

  Klíma, Vlastimil ^a   Pokorný, Ondřej ^c   Rosa, Tomáš ^a,b  

^a Czech Republic   (Czech Republic)

^b CZECH TECHNICAL UNIVERSITY IN PRAGUE   (Czech Republic)

^c NONE

Author keywords

[No Author keywords available]

Indexed keywords

CRYPTOGRAPHY; EMBEDDED SYSTEMS;

COMPLEXITY MEASUREMENT; ORIGINAL ALGORITHMS; PLAINTEXT; PRACTICAL TESTS; RSA ENCRYPTION; SIDE-CHANNEL; SPEED UP; SSL/TLS PROTOCOL;

SIDE CHANNEL ATTACK;

EID: 35248848850     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-45238-6_33     Document Type: Article

References (19)

1. Bleichenbacher, D.: Chosen Ciphertexts Attacks Against Protocols Based on the RSA Encryption Standard PKCS#1, in Proc. of CRYPTO '98, pp. 1-12, 1998
2. Canvel, B.: Password Interception in a SSL/TLS Channel, http://lasecwww.epfl.ch/memo_ssl.shtml, February, 2003
3. Håstad, J., Näslund M.: The Security of Individual RSA Bits, in Proc. of FOCS '98, pp. 510-521, 1998
4. Jonsson, J., Kaliski, B., S., Jr.: On the Security of RSA Encryption in TLS, in Proc. of CRYPTO '02, pp. 127-142, 2002
5. Klíma, V., Rosa, T.: Further Results and Considerations on Side Channel Attacks on RSA, in Proc. of CHES '02, August 13-15, 2002
6. Manger, J.: A Chosen Ciphertext Attack on RSA Optimal Asymmetric Encryption Padding (OAEP) as Standardized in PKCS #1, in Proc. of CRYPTO'01, pp. 230-238, 2001
7. OpenSSL: OpenSSL ver. 0.9.7, http://www.openssl.org/, December 31, 2002
8. PKCS#5 ver. 2.0: Password-Based Cryptography Standard, RSA Laboratories, March 25, 1999
9. PKCS #1: RSA Encryption Standard, An RSA Laboratories Technical Note, Version 1.5, Revised November 1, 1993
10. Rescorla, E.: SSL and TLS: Designing and Building Secure Systems, Addison-Wesley, New York, 2000
11. RFC 2631: Rescorla, E.: Diffie-Hellman Key Agreement Method, June 1999
12. RFC 2246: Allen, C., Dierks, T.: The TLS Protocol, Version 1.0, January 1999
13. RFC 1321: Rivest, R.: The MD5 Message-Digest Algorithm, April 1992
14. Rivest, R., L., Shamir, A., Adleman L.: A Method for Obtaining Digital Signatures and Public-Key Cryptosystems, Communications of the ACM, 21, pp. 120-126, 1978
15. RSA Labs: Prescriptions for Applications that are Vulnerable to the Adaptive Chosen Ciphertext Attack on PKCS #1 v1.5, RSA Laboratories, http://www.rsasecurity.com/rsalabs/pkcs1/prescriptions.html
16. Schneier, B., Wagner, D.: Analysis of the SSL 3.0 Protocol, The Second USENIX Workshop on Electronic Commerce Proceedings, USENIX Press, November 1996, pp. 29-40
17. Secure Hash Standard, FIPS Pub 180-1, 1995 April 17
18. X509: ITU-T Recommendation X.509 (06/97) - Information Technology - Open System Interconnection - The Directory: Authenticantion Framework, ITU, 1997
19. Klima V., Pokorny O., Rosa T.: Attacking RSA-based Sessions in SSL/TLS, Cryptology ePrint Archive: Report 2003/052, http://eprint.iacr.org/2003/052/