News for hackers. Stuff that matters.

A comment on Encryption is less secure than we thought. Parent comment

Re:Encryption is less secure than we thought by api on Wednesday August 14, 2013 @09:13AM (#6211245)
But be careful when compressing. Never compress something secret together with something that an attacker can repeatedly influence, or you're possibly vulnerable to compressed length oracle attacks similar to CRIME.
[ Parent | on HN ]
Re:Encryption is less secure than we thought by rst on Wednesday August 14, 2013 @09:41AM (#6211401)
BREACH is a variation on the theme (compression at a different protocol layer, but again pre-encryption). We're going to see more of these.
[ Parent | on HN ]