TU/e Research Portal · 2013 · 138 citations · 5 references
Open access
ComputingComputer ScienceCybersecurityComputer SecurityCryptographySecurity ProtocolsData EncryptionData SecurityInternet Protocol SecurityProtocol AnalysisStream CiphersTransport Layer SecurityCiphertext-only AttackData Encryption In TransitEncryption Protocol AnalysisSymmetric-key Encryption
TLS is the de facto standard for secure Internet and mobile communications, providing confidentiality and integrity while supporting symmetric ciphers such as RC4. The paper presents ciphertext‑only plaintext recovery attacks on TLS when RC4 is used and discusses countermeasures. The attacks leverage recent statistical advances in RC4 analysis and novel findings presented in this work. Experimental evaluation demonstrates the feasibility of the ciphertext‑only plaintext recovery attacks.
The Transport Layer Security (TLS) protocol aims to provide confidentiality and integrity of data in transit across untrusted networks. TLS has become the de facto protocol standard for secured Internet and mobile applications. TLS supports several symmetric encryption options, including a scheme based on the RC4 stream cipher. In this paper, we present ciphertext-only plaintext recovery attacks against TLS when RC4 is selected for encryption. Our attacks build on recent advances in the statistical analysis of RC4, and on new findings announced in this paper. Our results are supported by an experimental evaluation of the feasibility of the attacks. We also discuss countermeasures.
5
The Transport Layer Security (TLS) Protocol Version 1.1
Eric Rescorla · 2006 · 293 citations
Not So) Random Shuffles of RC4.
Ilya Mironov · IACR Cryptology ePrint Archive · 2002 · 43 citations
On the Security of RC4 in TLS and WPA
Nadhem J. AlFardan, Daniel J. Bernstein, Kenneth G. Paterson et al. · 2013 · 40 citations
AES-CCM Cipher Suites for Transport Layer Security (TLS)
Daniel V. Bailey, David McGrew · RFC · 2012 · 38 citations