A cross-protocol attack on the TLS protocol

Proceedings of the ACM Conference on Computer and Communications Security

Volumn , Issue , 2012, Pages 62-72

  Mavrogiannopoulos, Nikos ^a   Vercauteren, Frederik ^a   Velichkov, Vesselin ^b   Preneel, Bart ^a  

^a UNIVERSITY OF LEUVEN   (Belgium)

^b UNIVERSITY OF LUXEMBOURG   (Luxembourg)

Author keywords

Cross protocol attack; Man in the middle; Server impersonation attack; SSL; TLS

Indexed keywords

CROSS-PROTOCOL ATTACK; IMPERSONATION ATTACK; MAN IN THE MIDDLES (MITM); SSL; TLS;

SEEBECK EFFECT;

SECURITY OF DATA;

EID: 84869409533     PISSN: 15437221     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2382196.2382206     Document Type: Conference Paper

References (27)

1. R. J. Anderson and R. M. Needham. Robustness principles for public key protocols. In CRYPTO 1995, volume 963 of Lecture Notes in Computer Science, pages 236-247. Springer, 1995.
2. G. V. Bard. A challenging but feasible blockwise-adaptive chosen-plaintext attack on SSL. In SECRYPT 2006, pages 99-109. INSTICC Press, 2006.
3. S. Blake-Wilson, N. Bolyard, V. Gupta, C. Hawk, and B. Moeller. Elliptic Curve Cryptography (ECC) Cipher Suites for Transport Layer Security (TLS). RFC 4492 (Informational), 2006.
4. D. Bleichenbacher. Chosen Ciphertext Attacks Against Protocols Based on the RSA Encryption Standard PKCS #1. In CRYPTO 1998, volume 1462 of Lecture Notes in Computer Science, pages 1-12. Springer, 1998.
5. J. Bos, T. Kleinjung, A. Lenstra, and P. Montgomery. This is a tasty factor. Email on NMBRTHRY-list. 8 Mar 2010.
6. Certicom Research. SEC 2: Recommended elliptic curve domain parameters, September 2000.
7. C. J. F. Cremers. Feasibility of multi-protocol attacks. In ARES 2006, pages 287-294. IEEE Computer Society, 2006.
8. K. Dickman. On the frequency of numbers containing prime factors of a certain relative magnitude. Arkiv för Matematik, Astronomi och Fysik, 22:1-14, 1930.
9. T. Dierks and C. Allen. The TLS Protocol Version 1.0. RFC 2246 (Proposed Standard), 1999.
10. T. Dierks and E. Rescorla. The Transport Layer Security (TLS) Protocol Version 1.1. RFC 4346 (Proposed Standard), 2006.
11. T. Dierks and E. Rescorla. The Transport Layer Security (TLS) Protocol Version 1.2. RFC 5246 (Proposed Standard), 2008.
12. D. Dolev and A. C.-C. Yao. On the security of public key protocols. IEEE Transactions on Information Theory, 29(2):198-207, 1983.
13. P. Eronen and H. Tschofenig. Pre-Shared Key Ciphersuites for Transport Layer Security (TLS). RFC 4279 (Proposed Standard), 2005.
14. A. Freier, P. Karlton, and P. Kocher. The Secure Sockets Layer (SSL) Protocol Version 3.0. RFC 6101 (Historic), 2011.
15. T. Kleinjung. Discrete logarithms in GF(p) - 160 digits. Email on NMBRTHRY-list. 5 Feb 2007.
16. V. Klíma, O. Pokorný, and T. Rosa. Attacking RSA-Based Sessions in SSL/TLS. In CHES 2003, volume 2779 of Lecture Notes in Computer Science, pages 426-440. Springer, 2003.
17. H. Krawczyk, M. Bellare, and R. Canetti. HMAC: Keyed-Hashing for Message Authentication. RFC 2104 (Informational), Feb. 1997.
18. A. Langley, N. Modadugu, and B. Moeller. Transport Layer Security (TLS) False Start. Internet Draft, 2010.
19. A. K. Lenstra and H. W. Lenstra, Jr., editors. The development of the number field sieve, volume 1554 of Lecture Notes in Mathematics. Springer-Verlag, Berlin, 1993.
20. H. W. Lenstra, Jr. Factoring integers with elliptic curves. Annals of Mathematics (2), 126(3):649-673, 1987.
21. R Development Core Team. R: A Language and Environment for Statistical Computing. R Foundation for Statistical Computing, Vienna, Austria, 2012. ISBN 3-900051-07-0.
22. J.-F. Raymond and A. Stiglic. Security issues in the Diffie-Hellman key agreement protocol. IEEE Transactions on Information Theory, 22:1-17, 2000.
23. E. Rescorla, M. Ray, S. Dispensa, and N. Oskov. Transport Layer Security (TLS) Renegotiation Indication Extension. RFC 5746 (Proposed Standard), 2010.
24. I. Ristić. Internet SSL Survey, 2011. https://www.ssllabs.com/ projects/ssl-survey/.
25. D. Taylor, T. Wu, N. Mavrogiannopoulos, and T. Perrin. Using the Secure Remote Password (SRP) Protocol for TLS Authentication. RFC 5054 (Informational), 2007.
26. S. Vaudenay. Security Flaws Induced by CBC Padding- Applications to SSL, IPSEC, WTLS ... In EUROCRYPT 2002, volume 2332 of Lecture Notes in Computer Science, pages 534-546. Springer, 2002.
27. D. Wagner and B. Schneier. Analysis of the SSL 3.0 protocol. In Proceedings of the 2nd USENIX Workshop on Electronic Commerce, volume 2 of WOEC, pages 29-40. USENIX Association, 1996.