BEAST(Browser Exploit Against SSL/TLS)ã¨ã¯ä½•ã‹ã¯ã˜ã‚ã« CBCモードã¸ã®é¸æŠžå¹³æ–‡æ”»æ’ƒã‚’扱ã£ãŸå‰å›žã®ã‚¨ãƒ³ãƒˆãƒªã«å¼•ã続ãã€BEASTã«ã¤ã„ã¦è¦‹ã¦ã„ãã¾ã™ã€‚今回ã¯ã€BEASTã®å…¨ä½“åƒã«ã¤ã„ã¦è§£èª¬ã—ã¾ã™ã€‚ãªãŠã€BEASTã®å®Ÿéš›ã®æ”»æ’ƒã‚³ãƒ¼ãƒ‰ã¯ãƒ‘ブリックã«ã•ã‚Œã¦ã„ãªã„ãŸã‚ã€ã“ã®è¨˜äº‹ã®å†…容ã¯ã‚ãã¾ã§ã‚‚推測ã«åŸºã¥ãã‚‚ã®ã¨ãªã£ã¦ã„ã‚‹ã“ã¨ã‚’ã”了承ãã ã•ã„。 BEAST以å‰ã®æƒ…å ± BEASTã¯SSLã«å¯¾ã™ã‚‹ã€Œ100%æ–°ã—ã„画期的ãªæ”»æ’ƒæ–¹æ³•ã€ã§ã¯ã‚ã‚Šã¾ã›ã‚“。éŽåŽ»ã«ç™ºè¦‹ã•ã‚Œã¦ã„ãŸã„ãã¤ã‹ã®ãƒ†ã‚¯ãƒ‹ãƒƒã‚¯ã‚’é©åˆ‡ã«çµ„ã¿åˆã‚ã›ã€ã•ã‚‰ã«æœ€å¾Œã®ã²ã¨ã•ã˜ã‚’åŠ ãˆã‚‹ã“ã¨ã§è¯éº—ã«ã¾ã¨ã‚ã‚ã’ãŸã‚‚ã®ã¨ãªã£ã¦ã„ã¾ã™ã€‚ BEASTã®åŸºã¨ãªã£ã¦ã„る技術ã¯ã€ã»ã¼æ¬¡ã®2ã¤ã®è«–æ–‡ã«ã¾ã¨ã¾ã£ã¦ã„ã‚‹ã¨è€ƒãˆã‚‰ã‚Œã¾ã™ã€‚ The Vulnerability of SSL to Chosen-Plaintext Attack A Challenging but Feasible Blockwise-Adapt
{{#tags}}- {{label}}
{{/tags}}