Cryptographic Attacks

2 min readJan 30, 2023

Hello everyone, Welcome to my Blog!

Get Prabhat Hudda’s stories in your inbox

Join Medium for free to get updates from this writer.

Remember me for faster sign in

Today, we will have a look at some cryptographic attacks. Let's get started without any further delay.

Browser Exploit against SSL/TLS.
It is an attack against network vulnerabilities in TLS 1.0 and older SSL protocols.
Attacker uses the Protocol Downgrade Attack to perform BEAST.
Once the server and client will use the TLSv1.0 (which is considered a weak protocol), an attacker can use the BEAST attack to eavesdrop.

The LOGJAM attack is an SSL/TLS vulnerability that allows attackers to intercept HTTPS connections between vulnerable clients and servers and force them to use ‘export-grade’ cryptography, which can then be decrypted or altered.
Disable DHE-export cipher.

Compression Ratio Info-leak Made Easy.
It is a security exploit against secret web cookies over connections using the HTTPS and SPDY protocols that also use data compression
For CRIME, the weakness is Deflate (data compression algorithm) compression. This alert is issued if the server accepts Deflate compression

Browser Reconnaissance and Exfiltration via Adaptive Compression of Hypertext.
BREACH is similar to a CRIME attack.
CRIME targets information compressed in HTTP requests through TLS compression, while BREACH targets information compressed in HTTP responses through HTTP compression.

Heartbleed attack enables an attacker to perform a MITM attack on any vulnerable websites.
It works by leveraging the heartbeat extension in TLS that is designed to keep the TLS sessions open even if no data is being transmitted between the client and server.
A Heartbleed request contains: Payload & Size
A Heartbleed response contains the same size as the payload.
Sensitive information like secret keys, usernames, and passwords.

Ticketbleed is a software vulnerability in the TLS/SSL stack of F5 BIG-IP appliances.
It allows a remote attacker to extract up to 31 bytes of uninitialized memory at a time.
When a client supplies a Session ID together with a Session Ticket, the server is supposed to echo back the Session ID to signal acceptance of the ticket. Session IDs can be anywhere between 1 and 31 bytes in length.
The F5 stack always echoes back 32 bytes of memory, even if the Session ID was shorter. An attacker providing a 1-byte Session ID would then receive 31 bytes of uninitialized memory.

The Lucky13 attack is a cryptographic attack that exploits a vulnerability in the TLS protocol which is used to encrypt Internet traffic.
The attack takes advantage of the timing differences between the MAC computation of encrypted and unencrypted packets. By manipulating the timing of the packets, an attacker can cause the server to take longer to process the encrypted packets, thus allowing them to decrypt the traffic.

Return Of Bleichenbacher’s Oracle Threat
security vulnerability that affects the encryption of SSL/TLS connections and allows attackers to decrypt the encrypted traffic by exploiting a flaw in the PKCS #1 v1.5 signature padding scheme.

Thank you