CryptoBlog – Data Security and Information Theory

Cryptography, Information Theory and Codes

SSL 3.0 / TLS subjected to Man in the Middle Attack

An “Authentication Gap” was discovered in the latest version of SSL/TLS protocol.This could potentially be a huge problem. The gap is not due to some erroneous implementation, it is a property of the protocol.

Here is a list of links to websites where the issue is being followed:

http://www.phonefactor.com/sslgap/

IETF resources

Red Hat

SANS.org

Filed under: Authentication, Encryption, Hacking, InSecurity, SSL, Security, Technology, e-commerce, networks , , , , , , , ,

More reviews for the AMS

I have a few new reviews of papers on cryptography in my updated page. For those interested in the security of NMAC and HMAC or affiliation hiding key exchanges, I recommend reading the reviews. They include links to relevant papers.

Filed under: AMS, Authentication, Cryptanalysis, Cryptography, Encryption, Information Theory, Security , , , , ,

About this blog

Data Security and Information Theory are essential to modern life. Far from being the exclusive domain of academics and geeks, the fundamentals and its application are easy to understand for most people. Here, my modest attempt to bring some of the issues to the public discourse and spread the knowledge to make the internet a safer place for your virtual self.

Click below to find out more

Short Presentation

View Mario Forcinto's profile on LinkedIn

Crypto Book

bookcover.jpg

Copyright

© Mario Forcinito and CryptoBlog, 2007-2009. Unauthorized use and/or duplication of this material without express and written permission from this blog’s author and/or owner is strictly prohibited. Excerpts and links may be used, provided that full and clear credit is given to Mario Forcinito and CryptoBlog with appropriate and specific direction to the original content.

Blog Stats

  • 7,491 visits

Categories

Archives

Crypto Links