Format Oracles on OpenPGP - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2015

Format Oracles on OpenPGP

Résumé

The principle of padding oracle attacks has been known in the cryptography research community since 1998. It has been generalized to exploit any property of decrypted ciphertexts, either stemming from the encryption scheme, or the application data format. However, this attack principle is being leveraged time and again against proposed standards and real-world applications. This may be attributed to several factors, \eg, the backward compatibility with standards selecting oracle-prone mechanisms, the difficulty of safely implementing decryption operations, and the misuse of libraries by non cryptography-savvy developers. In this article, we present several format oracles discovered in applications and libraries implementing the OpenPGP message format, among which the popular GnuPG application. We show that, if the oracles they implement are made available to an adversary, e.g. by a front-end application, he can, by querying repeatedly these oracles, decrypt all OpenPGP symmetrically encrypted packets. The corresponding asymptotic query complexities range from 2 to 2^8 oracle requests per plaintext byte to recover.
Fichier principal
Vignette du fichier
document.pdf (349.3 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-01154822 , version 1 (23-02-2023)

Identifiants

Citer

Florian Maury, Jean-Rene Reinhard, Olivier Levillain, Henri Gilbert. Format Oracles on OpenPGP. The Cryptographer's Track at the RSA (CT-RSA), Apr 2015, San Francisco, United States. pp.220-236, ⟨10.1007/978-3-319-16715-2_12⟩. ⟨hal-01154822⟩
74 Consultations
18 Téléchargements

Altmetric

Partager

Gmail Mastodon Facebook X LinkedIn More