News for hackers. Stuff that matters.

A comment on Google disables compression for OpenSSL in Chrome - SSL exploit coming?. Parent comment

Re:Google disables compression for OpenSSL in Chrome - SSL e... by ChuckMcM on Wednesday September 12, 2012 @11:09AM (#4511004)
Very interesting, using differential analysis on the compression output is pretty clever.
[ Parent | on HN ]
Re:Google disables compression for OpenSSL in Chrome - SSL e... by tptacek on Wednesday September 12, 2012 @11:33AM (#4511115)
Note that it is effectively the same attack as ECB byte-by-byte decryption, except using record length instead of repeated blocks as the signal.
[ Parent | on HN ]