| |||||||||||||
SSH plaintext recovery vulnerabilitySSH plaintext recovery vulnerabilityPosted Nov 21, 2008 23:32 UTC (Fri) by djm (subscriber, #11651)In reply to: SSH plaintext recovery vulnerability by jbh Parent article: SSH plaintext recovery vulnerability
Yes, the attack relies on the protocol's error behaviour to provide an "oracle" that verifies the guesses. However, this can't directly be used to recover keys - "just" plaintext that is sent over the SSH connection.
(Log in to post comments)
|
|||||||||||||