What is POODLE? - Githubissues

nus-cs3281 / 2019

0 stars 1 forks source link

What is POODLE? #48

Open ChooJeremy opened 5 years ago

ChooJeremy commented 5 years ago

Poodle - Padding Oracle On Downgraded Legacy Encryption

Lightning talk - POODLE.pptx

WIIFY:

Learn how SSLv3 works
Learn how POODLE works
Consider why the current encryption schemes work the way they do.

CtA Consider:

How to exploit it? The client still needs to send arbitrary packets.
Why does SSLv3 perform XOR with the previous segment? Why not just encrypt it?
What the current encryption schemes do (TLS 1.0, 1.1, 1.2) that render this attack invalid.

Lisp slides: Lightning talk - LISP.pptx