Implementation Flaws in TLS Stacks: Lessons Learned and Study of TLS 1.3 Benefits - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2021

Implementation Flaws in TLS Stacks: Lessons Learned and Study of TLS 1.3 Benefits

Résumé

In the years leading to the definition of TLS 1.3, many vulnerabilitieshave been published on the TLS protocol, including numerous implementationflaws affecting a wide range of independent stacks. The infamous Heartbleedbug, was estimated to affect more than 20 % of the most popular HTTPS servers.We propose a structured review of these implementation flaws. By consideringtheir consequences but also their root causes, we present some lessons learned oryet to be learned. We also assess the impact of TLS 1.3,the latest version of theprotocol, on the security of SSL/TLS implementations.
Fichier principal
Vignette du fichier
document.pdf (2.39 Mo) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03114218 , version 1 (20-02-2023)

Identifiants

Citer

Olivier Levillain. Implementation Flaws in TLS Stacks: Lessons Learned and Study of TLS 1.3 Benefits. CRiSIS 2020: 15th International Conference on Risks and Security of Internet and Systems, Nov 2020, Paris (en ligne), France. pp.87-104, ⟨10.1007/978-3-030-68887-5_5⟩. ⟨hal-03114218⟩
41 Consultations
118 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More