Wombat: one more Bleichenbacher attack toolkit

Aina Toky Rasoamanana (1, 2, 3, 4) , Olivier Levillain (1, 2, 3, 4)

1 IP Paris - Institut Polytechnique de Paris
2 R3S-SAMOVAR - Réseaux, Systèmes, Services, Sécurité
3 TSP - RST - Département Réseaux et Services de Télécommunications
4 CNRS - Centre National de la Recherche Scientifique

Despite being more than 40 years old, RSA is still a widely used cryptographic algorithms. PKCS#1 v1.5, an old standard which defines how to use it in practice, is even present in current specifications (e.g. TLS up to TLS 1.2), although most of its implementations are naturally vulnerable to an attack devised by Daniel Bleichenbacher in 1998. To be able to assess the prevalence of such a vulnerability in various protocols, we are developing Wombat, one more Bleichenbacher attack toolkit.

Domaines: Cryptographie et sécurité [cs.CR]

Aina Toky Rasoamanana, Olivier Levillain. Wombat: one more Bleichenbacher attack toolkit. GreHack 2019, Nov 2019, Grenoble, France. ⟨hal-02468592⟩