Broadband Tech > Security > Security > More cracks in SSL/TLS/DTLS

More cracks in SSL/TLS/DTLS

»isc.sans.edu/diary/OpenSSL+Secur···ls/15085

reply to ke4pym
I've missed something - where is this is SSL?
I didn't find in a quick search where this was relative to SSL. Software by OpenSSL and others yes.

The exploit seems again for TLS specifically? This has been a problem of late for TLS, exploiting that is. Or is this because everything before TLS as well is affected?
--
The only thing necessary for the triumph of evil is for good men to do nothing - Edmund Burke

In regards to the plaintext recovery attack (Lucky 13), all versions of SSL/TLS are affected, assuming the negotiated cipher is being used in CBC mode.

reply to ke4pym
A good all round explanation of how the attack works found here;
»nakedsecurity.sophos.com/2013/02···-attack/