Bellovin, S., "Probable Plaintext Cryptanalysis of the IP Security Protocols," Proceedings of the Symposium on Network and Distributed System Security, pp. 155-160, 1997.  Home/Search   Document Details and Download   Summary   Related Articles   Check

....for their particular hardware and software configuration. Note that encryption necessarily impacts both sides of a secure channel, so such consideration must take into account not only the client side, but the server as well. For information on the case for using random values please see [Bell97]. For further security considerations, the reader is encouraged to read the documents that describe the actual cipher algorithms. Pereira Adams Standards Track [Page 9] RFC2451 RFC.net Page 10 of 15 RFC 2451 ESP CBC Mode Cipher Algorithms November 1998 5. ....

S. Bellovin, "Probable Plaintext Cryptanalysis of the IP Security Protocols", Proceedings of the Symposium on Network and Distributed System Security, San Diego, CA, pp. 155-160, February 1997 (also http://www.research.att.com/smb/probtxt.{ps, pdf}).

....how busy the target machine is. Another issue was avoiding disclosure of information when using IPsec in tunneling mode, as per section 2.2.2. A naive implementation might create a new IP header with an ID one more than the ID in the existing IP header. This could lead to known plaintext attacks [4] against IPsec. To avoid these problems, we use the nonrepeating PRNG described in section 3.3. ffl Randomness added to the TCP ISS value for protection against spoofing attacks. Inside the kernel, a 32 bit variable called tcp iss declares the Initial Send Sequence Number (ISS) to use on the ....

S. Bellovin. Probable Plaintext Cryptanalysis of the IP Security Protocols. In Proceedings of the Symposium on Network and Distributed System Security, pages 155--160, February 1997.

....ways in which an attacker can generate large amounts of known plaintext. For example, if the target user is reading email via a VPN, the attacker can send a large, tailored file. The signature of such a large download is easily detectable, thus providing the attacker with a crib . Similarly, [Bel97] shows that the TCP and IP headers contain large amounts of probable plaintext. These, too, can be employed in cryptographic attacks. The point of these assertions is not to claim that it is impossible to encrypt Internet traffic, or even that doing so takes special skill. We do, however, claim ....

Steven M. Bellovin. Probable plaintext cryptanalysis of the IP security protocols. In Proceedings of the Symposium on Network and Distributed System Security, pages 155--160, 1997. 5

....cipher may be able to do considerable damage. Often, different security considerations produce contradictory constraints. In [Bel96] I showed that it was much more secure to use a separate key for each connection, as opposed to a single key for all connections between a pair of hosts. But in [Bel97], I showed that per connection keying aided an enemy cryptanalyst. Which is right Operational considerations produce their own conflicts. The Domain Name System (DNS) relies on caches, timeouts, and hierarchies of servers to reduce the load on the network. The design, originally specified in 1983 ....

Steven M. Bellovin. Probable plaintext cryptanalysis of the IP security protocols. In Proceedings of the Symposium on Network and Distributed System Security, pages 155--160, 1997.

No context found.

Bellovin, S., "Probable Plaintext Cryptanalysis of the IP Security Protocols," Proceedings of the Symposium on Network and Distributed System Security, pp. 155-160, 1997.

No context found.

S. M. Bellovin, "Probable Plaintext Cryptanalysis of the IP Security Protocols," in Proceedings of the Symposium on Network and Distributed System Security, San Diego, CA, pp. 155-160, February 1997.

No context found.

Bellovin, S., "Probable Plaintext Cryptanalysis of the IP Security Protocols", Proceedings of the Symposium on Network and Distributed System Security, San Diego, CA, pp. 155-160, February 1997 (also http://www.research.att.com/smb/papers/probtxt.{ps, pdf}).

No context found.

Bellovin, S., "Probable Plaintext Cryptanalysis of the IP Security Protocols", Proceedings of the Symposium on Network and Distributed System Security, San Diego, CA,

No context found.

Bellovin, S., "Probable Plaintext Cryptanalysis of the IP Security Protocols", Proceedings of the Symposium on Network and Distributed System Security, San Diego, CA, pp. 155-160, February 1997. http://www.research.att.com/smb/papers/probtxt.pdf

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC