Re: [hybi] More on Payload Masking

Zhong Yu <zhong.j.yu@gmail.com> Thu, 11 November 2010 20:16 UTC

DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=WM26f2eq6DBhzi9V0R5NkcjfCnDtE9xEHZKUo28itQyRYhHr0tuHmewD+fJpc88XSF VlE6FD3VaVz4T7Keo3iFFey7aSlttdG9yh5o0vuVV17trOkQzeEtI2e/jFdrC221ckrj ZWEY8q2b/Qj828YFcyqXxeBqq7KYT5baJM1Ig=
MIME-Version: 1.0
In-Reply-To: <AANLkTikWr9GO_OBqjEC_0d5j30g21C+dfyxinRXwGZJ8@mail.gmail.com>
References: <AANLkTi=Q3oAM1rdqPHTLffN_yEGPCY9VM0CXPiNU4R79@mail.gmail.com> <AANLkTi=ACdGp535U_Lr3FWZbQGNLuRZSFatP7uBWtDtB@mail.gmail.com> <l5lmd6lv0dt84npcj00s1j6r20ul3sbv0f@hive.bjoern.hoehrmann.de> <AANLkTim9QaD5BKT3yvtOY=9ojKeKr8vV1SsG1s23ty=6@mail.gmail.com> <8qnmd6dgnpiq5mm1cui2eqhfkusc8c514d@hive.bjoern.hoehrmann.de> <AANLkTi=yUpKZ0RbWSZp6y+idkKnEY0HuHwNugHj8YC8+@mail.gmail.com> <AANLkTimxxhJ3y+t+mtN-LHD+JY6Lnt2QQBtFJM36APJk@mail.gmail.com> <AANLkTikWr9GO_OBqjEC_0d5j30g21C+dfyxinRXwGZJ8@mail.gmail.com>
Date: Thu, 11 Nov 2010 14:16:51 -0600
Message-ID: <AANLkTi=WA2kaSBLC3dJgLyeRd8rRKEd-tuhQ=ckM6akB@mail.gmail.com>
From: Zhong Yu <zhong.j.yu@gmail.com>
To: John Tamplin <jat@google.com>
Content-Type: text/plain; charset="ISO-8859-1"
Cc: Hybi <hybi@ietf.org>, Bjoern Hoehrmann <derhoermi@gmx.net>
Subject: Re: [hybi] More on Payload Masking
Precedence: list

On Thu, Nov 11, 2010 at 1:30 PM, John Tamplin <jat@google.com> wrote:
> On Thu, Nov 11, 2010 at 2:15 PM, Zhong Yu <zhong.j.yu@gmail.com> wrote:
>>> Unless you can produce a particular encrypted counter value, the
>>> presence of XOR doesn't change the unforgeability.
>>
>> I assume we need a new counter for each WS frame?
>
> No, as it the encrypted counter is not predictable.

I don't understand. In the attack scenario I described(now considered
less plausible), the attacker have full knowledge of the handshake and
some beginning WS frames. If the counter sequence used for these
beginning WS frames will continue to be used for some following WS
frames, attacker can craft some cybertext in the following bytes.

- Zhong Yu

Re: [hybi] More on Payload Masking John Tamplin
Re: [hybi] More on Payload Masking Bjoern Hoehrmann
Re: [hybi] More on Payload Masking Bjoern Hoehrmann
[hybi] More on Payload Masking Zhong Yu
Re: [hybi] More on Payload Masking John Tamplin
Re: [hybi] More on Payload Masking Bjoern Hoehrmann
Re: [hybi] More on Payload Masking Bjoern Hoehrmann
Re: [hybi] More on Payload Masking John Tamplin
Re: [hybi] More on Payload Masking Greg Wilkins
Re: [hybi] More on Payload Masking Willy Tarreau
Re: [hybi] More on Payload Masking Scott Ferguson
Re: [hybi] More on Payload Masking Zhong Yu
Re: [hybi] More on Payload Masking Zhong Yu
Re: [hybi] More on Payload Masking John Tamplin
Re: [hybi] More on Payload Masking Zhong Yu
Re: [hybi] More on Payload Masking Brodie Thiesfield