ImperialViolet - Chrome and the BEAST

Thai Duong and Juliano Rizzo today demoed an attack against TLS 1.0's use of cipher block chaining (CBC) in a browser environment. The authors contacted browser vendors several months ago about this and so, in order not to preempt their demo, I haven't discussed any details until now. Contrary to several press reports, Duong and Rizzo have not found, nor do they claim, any new flaws in TLS. They h

[ytoku]

BEAST攻撃について、読みやすい英文で攻撃の条件などについてだいたいまとまっている。