News for hackers. Stuff that matters.

A comment on Google disables compression for OpenSSL in Chrome - SSL exploit coming?. Parent comment

Re:Google disables compression for OpenSSL in Chrome - SSL e... by zimbatm on Wednesday September 12, 2012 @12:22PM (#4511411)
What's the issue with that ? Isn't it possible to design a compression algorithm that is efficient and less predictable at the same time ? Or is it more of a general concept that I don't know of ?
[ Parent | on HN ]
Re:Google disables compression for OpenSSL in Chrome - SSL e... by caf on Wednesday September 12, 2012 @10:33PM (#4514497)
It's because compression inherently creates a side-channel: the size of the message is now a function of the plaintext contents.
[ Parent | on HN ]