Summarizing Known Attacks on Transport Layer Security (TLS) and Datagram TLS (DTLS)

Bibliographic Reference(s)

• 10.1145-2382196.2382204 — Georgiev EXTERNAL
• 10.1145-2382196.2382206 — Cross-Protocol EXTERNAL
• IETF.draft-ietf-tls-negotiated-ff-dhe-05 — FFDHE-TLS EXTERNAL
• IETF.draft-ietf-tls-prohibiting-rc4-01 — CIPHER-SUITES EXTERNAL
• IETF.draft-ietf-uta-tls-bcp-08 — SECURE-TLS EXTERNAL
• IETF.draft-ietf-websec-key-pinning-21 — KEY-PINNING EXTERNAL
• ISBN.9780471117094 — 7. Menezes A. van Oorshot P. Vanstone S. , Handbook of Applied Cryptography , CRC Press , 1997 . EXTERNAL
• Brubaker, C., Jana, S., Ray, B., Khurshid, S., and V. Shmatikov, "Using Frankencerts for Automated Adversarial Testing of Certificate Validation in SSL/TLS Implementations", 2014, < https://www.cs.utexas.edu/~shmat/shmat_oak14.pdf >. EXTERNAL
• MITRE, "Common Vulnerabilities and Exposures", < https://cve.mitre.org/ >. EXTERNAL
• Mantin, I. and A. Shamir, "A Practical Attack on Broadcast RC4", April 2001, < http://saluc.engr.uconn.edu/refs/stream_cipher/ mantin01attackRC4.pdf >. EXTERNAL
• Prado, A., Harris, N., and Y. Gluck, "The BREACH Attack", 2013, < http://breachattack.com/ >. EXTERNAL
• AlFardan, N., Bernstein, D., Paterson, K., Poettering, B., and J. Schuldt, "On the Security of RC4 in TLS", Usenix Security Symposium 2013, August 2013, < https://www.usenix.org/conference/usenixsecurity13/ security-rc4-tls >. EXTERNAL
• Vaudenay, S., "Security Flaws Induced by CBC Padding Applications to SSL, IPSEC, WTLS...", EUROCRYPT 2002, 2002, < http://www.iacr.org/cryptodb/archive/2002/ EUROCRYPT/2850/2850.pdf >. EXTERNAL
• Marlinspike, M., "sslstrip", February 2009, < http://www.thoughtcrime.org/software/sslstrip/ >. EXTERNAL
• Klima, V., Pokorny, O., and T. Rosa, "Attacking RSA-based Sessions in SSL/TLS", 2003, < https://eprint.iacr.org/2003/052.pdf >. EXTERNAL
• Delignat-Lavaud, A. and K. Bhargavan, "Virtual Host Confusion: Weaknesses and Exploits", Black Hat 2014, 2014, < https://bh.ht.vc/vhost_confusion.pdf >. EXTERNAL
• Paul, G. and S. Maitra, "Permutation After RC4 Key Scheduling Reveals the Secret Key", August 2007, < http://dblp.uni-trier.de/db/conf/sacrypt/ sacrypt2007.html#PaulM07 >. EXTERNAL
• Bleichenbacher, D., "Chosen Ciphertext Attacks Against Protocols Based on the RSA Encryption Standard PKCS #1", 1998, < http://archiv.infsec.ethz.ch/education/fs08/secsem/ Bleichenbacher98.pdf >. EXTERNAL
• Moeller, B., Duong, T., and K. Kotowicz, "This POODLE Bites: Exploiting the SSL 3.0 Fallback", September 2014, < https://www.openssl.org/~bodo/ssl-poodle.pdf >. EXTERNAL
• Sarkar, P. and S. Fitzgerald, "Attacks on SSL, a comprehensive study of BEAST, CRIME, TIME, BREACH, Lucky13 and RC4 biases", August 2013, < https://www.isecpartners.com/media/106031/ ssl_attacks_survey.pdf >. EXTERNAL
• Rizzo, J. and T. Duong, "The CRIME Attack", EKOparty Security Conference, 2012. EXTERNAL
• Be'ery, T. and A. Shulman, "A Perfect CRIME? Only TIME Will Tell", Black Hat Europe 2013, 2013, < https://media.blackhat.com/eu-13/briefings/Beery/ bh-eu-13-a-perfect-crime-beery-wp.pdf >. EXTERNAL
• AlFardan, N. and K. Paterson, "Lucky Thirteen: Breaking the TLS and DTLS Record Protocols", IEEE Symposium on Security and Privacy, 2013, < http://www.ieee-security.org/ TC/SP2013/papers/4977a526.pdf >. EXTERNAL
• Brumley, D. and D. Boneh, "Remote Timing Attacks are Practical", 2003, < http://crypto.stanford.edu/~dabo/papers/ssl-timing.pdf >. EXTERNAL
• Rizzo, J. and T. Duong, "Browser Exploit Against SSL/TLS", 2011, < http://packetstormsecurity.com/files/105499/ Browser-Exploit-Against-SSL-TLS.html >. EXTERNAL
• Fluhrer, S., Mantin, I., and A. Shamir, "Weaknesses in the Key Scheduling Algorithm of RC4", Selected Areas in Cryptography, August 2001, < http://www.crypto.com/papers/others/rc4_ksaproc.pdf >. EXTERNAL
• Bhargavan, K., Delignat-Lavaud, A., Fournet, C., Pironti, A., and P. Strub, "Triple handshakes and cookie cutters: breaking and fixing authentication over tls", 2014, < https://secure-resumption.com/tlsauth.pdf >. EXTERNAL
• IETF RFC 4347 [Superseded*]
• IETF RFC 5246 [Superseded*]
• IETF RFC 5288 [Active*]
• IETF RFC 5705 [Active*]
• IETF RFC 5746 [Active*]
• IETF RFC 5929 [Active*]
• IETF RFC 6347 [Superseded*]
• IETF RFC 6797 [Active*]
• IETF RFC 6989 [Active*]
• IETF RFC 7258 [Active*]
• IETF RFC 7366 [Active*]