University of Cambridge > Talks.cam > Microsoft Research Cambridge, public talks > Protecting encrypted cookies from compression side-channel attacks

  Browse A-Z

Log in

University Account External (via Google)

🔐 Log In

Information on

Subscribing to talksdetails Finding a talkdetails Adding a talkdetails Disseminating talksdetails Help and Documentationdetails

ℹī¸ Information

Protecting encrypted cookies from compression side-channel attacks

Download to your calendar using vCal

If you have a question about this talk, please contact Microsoft Research Cambridge Talks Admins .

This event may be recorded and made available internally or externally via http://research.microsoft.com. Microsoft will own the copyright of any recordings made. If you do not wish to have your image/voice recorded please consider this before attending

Compression is desirable for network applications as it saves bandwidth; however, when data is compressed before being encrypted, the amount of compression leaks information about the amount of redundancy in the plaintext. This side channel has led to successful CRIME and BREACH attacks on web traffic protected by the Transport Layer Security (TLS) protocol. The general guidance in light of these attacks has been to disable compression, preserving confidentiality but sacrificing bandwidth. In this paper, we examine two techniques—-heuristic separation of secrets and fixed-dictionary compression—-for enabling compression while protecting high-value secrets, such as cookies, from attack. We model the security offered by these techniques and report on the amount of compressibility that they can achieve.

Joint work with Janaka Alawatugoda (QUT) and Colin Boyd (NTNU).

This talk is part of the Microsoft Research Cambridge, public talks series.

This talk is included in these lists:

Note that ex-directory lists are not shown.

Other lists

Zoom Meeting ID: 928 9045 3974 Passcode: 313781 Homerton College, Mary Allan Building, Bouling 8 & 9, Hills Road, Cambridge, CB2 8PQ Todd-Hamied Room, Department of Chemistry

Other talks

Group Work Morning Break Morning Tea and Coffee Haematology and Palliative Care Title to be confirmed Novel neuroimaging methods in Lewy body dementia
 

Š 2006-2025 Talks.cam, University of Cambridge. Contact Us | Help and Documentation | Privacy and Publicity