New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

What is POODLE? #48

Open

ChooJeremy opened this issue Feb 18, 2019 · 0 comments

Assignees

Labels

week 8

Contributor

ChooJeremy commented Feb 18, 2019 •

edited

Loading

Poodle - Padding Oracle On Downgraded Legacy Encryption

Lightning talk - POODLE.pptx

WIIFY:

Learn how SSLv3 works
Learn how POODLE works
Consider why the current encryption schemes work the way they do.

CtA
Consider:

How to exploit it? The client still needs to send arbitrary packets.
Why does SSLv3 perform XOR with the previous segment? Why not just encrypt it?
What the current encryption schemes do (TLS 1.0, 1.1, 1.2) that render this attack invalid.

Lisp slides:
Lightning talk - LISP.pptx

ChooJeremy self-assigned this

ChooJeremy changed the title ~~The importance of the attack scenario~~ What is POODLE?

Xenonym added the week 8 label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment