新的 RC4 攻擊：實戰化
在 Twitter 上看到對 RC4 的新攻擊，可以直接攻擊 TLS 與 WPA-TKIP，沒有 workaround：「 All Your Biases Belong To Us: Breaking RC4 in WPA-TKIP and TLS 」。
對 TKIP 可以在一個小時內打下來：
In practice the attack can be executed within an hour.
對於 TLS 則是 75 個小時有 94% 成功率，實際測試時只用了 52 個小時就順利攻下來：
We also attack TLS as used by HTTPS, where we show how to decrypt a secure cookie with a success rate of 94% using 9·2 27 ciphertexts. This is done by injecting known data around the cookie, abusing this using Mantin's ABSAB bias, and brute-forcing the cookie by traversing the plain-text candidates. Using our traffic generation technique, we are able to execute the attack in merely 75 hours.
When we tested the attack against real devices, it took merely 52 hours to successfully perform the attack.
看起來唯一的解法是停用...
正文到此结束
热门推荐
相关文章
近期评论
-
文章和留言都翻到11页了 没有OOM
-
-
朋友，翻页到11页，及以后，会出现OOM，无法访问
-
-
搞个gitee的项目
-
-
版本号是多少，你可以下载哪个代码仓库，jdk选1.8 直接跑就行
-
-
-
Loading...
![[HBLOG]公众号](https://www.liuhaihua.cn/img/qrcode_gzh.jpg)
