Analysis of the SSL 3.0 protocol

By David A. Wagner, Bruce Schneier. 1996

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

In Privacy & Security

Citations in the corpus

You Autocomplete Me: Poisoning Vulnerabilities in Neural Code Completion (2020, background): “For example, SSLv2 has weak message integrity and is vulnerable to session truncation attacks [55, 64]; SSLv3 is vulnerable to man-in-the-middle attacks that steal Web credentials or other secrets [39].”
Website fingerprinting in onion routing based anonymization networks (2011, background): “Back in 1996, Wagner and Schneier pointed out that traffic analysis could be used to draw conclusions about content of encrypted SSL packets [23].”
Imperfect Forward Secrecy: How Diffie-Hellman Fails in Practice (2015, unknown): “0, Schneier and Wagner noted a related vulnerability that they called key exchange rollback [52].”
A taxonomy of Data Grids for distributed data sharing, management, and processing (2005, background): “The most prevalent form of data encryption is through SSL (Secure Sockets Layer) [Wagner and Schneier 1996].”
Website Fingerprinting at Internet Scale (2016, background): “As early as 1996, Wagner and Schneier discovered that traffic analysis can be used to draw conclusions about the content of encrypted SSL packets [24].”
Intercepting mobile communications: the insecurity of 802.11 (2001, methodology): “This situation is analogous to the ciphersuite rollback attacks on SSL [23], which also made use of a standard that included both high-security and low-security options.”
Side-Channel Leaks in Web Applications: A Reality Today, a Challenge Tomorrow (2010, background): “Wagner and Schneier briefly cited their personal communication with Yee in 1996 about the possibility of using this idea against SSL/TLS [19].”
A Messy State of the Union: Taming the Composite State Machines of TLS (2015, background): “Wagner and Schneier [23] discussed various attacks in the context of SSL 3.”
k-fingerprinting: A Robust Scalable Website Fingerprinting Technique (2015, background): “Early work by Wagner and Schneier [34], Cheng and Avnur [10] exposed the possibility that encrypted HTTP GET requests may leak information about the URL, conducting preliminary experiments on a small number of websites.”
The Inevitability of Failure: The Flawed Assumption of Security in Modern Computing Environments (2000, background): “SSL [69] is another network security protocol that provides authentication, integrity, and conﬁdentiality services and a negotiation service for keys and cryptographic algorithms.”