Top 10 winner

Weaknesses in RC4

Nadhem AlFardan, Dan Bernstein, Kenny Paterson, Bertram Poettering and Jacob Schuldt · isg.rhul.ac.uk

Measured the keystream biases of RC4 as used in TLS and turned them into plaintext recovery. A single-byte-bias attack over the first 256 keystream bytes recovers 220 bytes of a repeated plaintext from roughly 2^30 sessions, and a double-byte (Fluhrer-McGrew) attack works within one connection. The single-byte attack carries to WPA/TKIP because of its per-packet keys.

Record

Researcher

Nadhem AlFardan, Dan Bernstein, Kenny Paterson, Bertram Poettering and Jacob Schuldt

Published by

isg.rhul.ac.uk

In the archive

• Ranked #5 in the 2013 Top 10 Web Hacking Techniques

Related sources

• Supporting slides: RC4 biases
• Supporting slides: TKIP biases
• Original announcement slides
• Supporting dataset
• Full research paper
• USENIX slides
• Conference publication

Tags

• tls
• https
• info-leak
• cookie
• cve
• mitigation
• owasp-a02-2021
• owasp-a07-2021

This page is the archive's own catalogue record. The research is the work of Nadhem AlFardan, Dan Bernstein, Kenny Paterson, Bertram Poettering and Jacob Schuldt, first published at the original source. Preserved copies are kept so the citation survives its host.