Lucky thirteen: Breaking the TLS and DTLS record protocols

Proceedings - IEEE Symposium on Security and Privacy

Volumn , Issue , 2013, Pages 526-540

  AlFardan, Nadhem J ^a   Paterson, Kenneth G ^a  

^a UNIVERSITY OF LONDON   (United Kingdom)

Author keywords

CBC mode encryption; DTLS; plaintext recovery; timing attack; TLS

Indexed keywords

CBC-MODE ENCRYPTION; DTLS; PLAINTEXT; TIMING ATTACKS; TLS;

CRYPTOGRAPHY; INTERNET PROTOCOLS; SECURITY OF DATA;

SEEBECK EFFECT;

EID: 84881252956     PISSN: 10816011     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/SP.2013.42     Document Type: Conference Paper

References (25)

1. N. AlFardan and K. G. Paterson. Plaintext-recovery attacks against Datagram TLS. In NDSS, 2012.
2. N. AlFardan and K. G. Paterson. Lucky thirteen: Breaking the TLS and DTLS record protocols. Full version of this paper, available from www.isg.rhul.ac.uk/tls, 2013.
3. G. V. Bard. The vulnerability of SSL to chosen plaintext attack. IACR Cryptology ePrint Archive, 2004:111, 2004.
4. G. V. Bard. A challenging but feasible blockwise-adaptive chosen-plaintext attack on SSL. In SECRYPT, pages 99-109, 2006.
5. B. Canvel, A. P. Hiltgen, S. Vaudenay, and M. Vuagnoux. Password Interception in a SSL/TLS Channel. In D. Boneh, editor, CRYPTO, volume 2729 of LNCS, pages 583-599. Springer, 2003. ISBN 3-540-40674-3.
6. C. M. Chernick, C. Edington III, M. J. Fanto, and R. Rosenthal. Guidelines for the Selection and Use of Transport Layer Security (TLS) Implementations. In NIST Special Publication 800-52, June 2005, National Institute of Standards and Technology. Available at http://csrc.nist.gov/ publications/nistpubs/800-52/SP-800-52.pdf, 2005.
7. T. Dierks and C. Allen. The TLS Protocol Version 1.0. RFC 2246, Internet Engineering Task Force, 1999.
8. T. Dierks and E. Rescorla. The Transport Layer Security (TLS) Protocol Version 1.1. RFC 4346, Internet Engineering Task Force, 2006.
9. T. Dierks and E. Rescorla. The Transport Layer Security (TLS) Protocol Version 1.2. RFC 5246, Internet Engineering Task Force, 2008.
10. T. Duong and J. Rizzo. Here come the ⊕ Ninjas. Unpublished manuscript, 2011.
11. D. Eastlake 3rd. Transport Layer Security (TLS) Extensions: Extension Definitions. RFC 6066, 2011.
12. H. Krawczyk. The order of encryption and authentication for protecting communications (or: How secure is SSL?). In CRYPTO, pages 310-331, 2001.
13. H. Krawczyk, M. Bellare, and R. Canetti. HMAC: Keyed-Hashing for Message Authentication. RFC 2104 (Informational), 1997.
14. U. Maurer and B. Tackmann. On the soundness of authenticate-then-encrypt: formalizing the malleability of symmetric encryption. In ACM CCS, pages 505-515, 2010.
15. D. McGrew and D. Bailey. AES-CCM Cipher Suites for Transport Layer Security (TLS). RFC 6655 (Proposed Standard), 2012.
16. N. Modadugu and E. Rescorla. The Design and Implementation of Datagram TLS. In NDSS, 2004.
17. B. Moeller. Security of CBC ciphersuites in SSL/TLS: Problems and countermeasures, 2004. http://www.openssl.org/~bodo/tls-cbc.txt.
18. K. G. Paterson, T. Ristenpart, and T. Shrimpton. Tag size does matter: Attacks and proofs for the TLS record protocol. In ASIACRYPT, pages 372-389, 2011.
19. A. Pironti, P.-Y. Strub, and K. Bhargavan. Identifying website users by TLS traffic analysis: New attacks and effective countermeasures. Technical Report 8067, INRIA, September 2012.
20. E. Rescorla and N. Modadugu. Datagram Transport Layer Security. RFC 4347, Internet Engineering Task Force, 2006.
21. E. Rescorla and N. Modadugu. Datagram Transport Layer Security Version 1.2. RFC 6347, Internet Engineering Task Force, 2012.
22. T. Ristenpart, E. Tromer, H. Shacham, and S. Savage. Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds. In E. Al-Shaer, S. Jha, and A. D. Keromytis, editors, ACM Conference on Computer and Communications Security, pages 199-212. ACM, 2009.
23. P. Rogaway. Problems with proposed IP cryptography. Unpublished manuscript, 1995. http://www.cs.ucdavis.edu/~rogaway/papers/draft-rogaway-ipsec- comments-00.txt.
24. J. Salowey, A. Choudhury, and D. McGrew. AES Galois Counter Mode (GCM) Cipher Suites for TLS. RFC 5288 (Proposed Standard), 2008.
25. S. Vaudenay. Security Flaws Induced by CBC Padding - Applications to SSL, IPSEC, WTLS ... In EUROCRYPT, pages 534-546, 2002.