Confirmed users
529
edits
Security/Server Side TLS: Difference between revisions
Jump to navigation
Jump to search
m
→BEAST CVE-2011-3389
| Line 466: | Line 466: | ||
=== BEAST CVE-2011-3389 === | === BEAST CVE-2011-3389 === | ||
Beast is a vulnerability in the Initialization Vector (IV) of the CBC mode of AES, Camellia and a few other ciphers that use CBC mode. The attack allows a MITM attacker to recover plaintext values by | Beast is a vulnerability in the Initialization Vector (IV) of the CBC mode of AES, Camellia and a few other ciphers that use CBC mode. The attack allows a MITM attacker to recover plaintext values by encrypting the same message multiple times. | ||
BEAST is mitigated in TLS1.1 and above. | BEAST is mitigated in TLS1.1 and above. | ||