Lucky Thirteen: Breaking the TLS and DTLS Record Protocols

By Nadhem J. AlFardan, Kenneth G. Paterson. IEEE Symposium on Security and Privacy, 2013

419 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

HVLearn: Automated Black-Box Analysis of Hostname Verification in SSL/TLS Implementations (2017, background): “These attacks include various protocol based attacks [35], [43], [44], [46] as well as timing attacks [37] and flaws in pseudo-random number genera-”
SoK: Security Evaluation of Home-Based IoT Deployments (2019, methodology): “[51] used malformed packets to infer time delays, a sidechannel attack, in the MAC verification to statistically infer the plaintext from the ciphertext.”
A Messy State of the Union: Taming the Composite State Machines of TLS (2015, neutral): “Cryptographic attacks target specific constructions used in TLS such as RSA encryption [26–28] and MAC-thenEncrypt [5, 29, 30].”
The Use of MQTT in M2M and IoT Systems: A Survey (2020, background): “[56] and [57]) in IoT in general, there is still a large body of research needed on protocol-specific privacy solutions.”
A Survey of Communication Protocols for Internet of Things and Related Challenges of Fog and Cloud Computing Integration (2018, result): “unreliable connection. The slight advantage of TLS is that it is a widely used and stable security protocol, with a software client and server support and in available cryptography libraries [84]. In [37] authors presented distinguishing and plaintext recovery attacks against TLS and DTLS with exper”