[paper] Partitioning Oracle Attacks & Shadowsocks

[DuckSoft]

• https://www.usenix.org/conference/usenixsecurity21/presentation/len
• https://www.usenix.org/system/files/sec21summer_len.pdf

[fortuna]

This attack is intended to reduce the number of network calls for a dictionary-based attack. You are only vulnerable if you use a weak or leaked password. The best way to protect against this attack is to use a unique long random password that is not leaked.