yeah... you are right! Thanks for the clarification.
I've been meaning to read the Stegotorus paper soon.
Cheers!
David
On Mon, Nov 18, 2013 at 9:24 AM, Zack Weinberg wrote:
> On Mon, Nov 18, 2013 at 10:47 AM, David Stainton
> wrote:
>>> Super-simple framing protocols often fall victim to at
On Mon, Nov 18, 2013 at 10:47 AM, David Stainton wrote:
>> Super-simple framing protocols often fall victim to attacks in which the
>> adversary messes with the length in the frame header. See, for example,
>> "Plaintext Recovery Attacks Against SSH":
>> http://www.isg.rhul.ac.uk/~kp/SandPfinal.p
>> It seems like the solution is to write a super simple "framing
>> protocol"... which is to say that I can first send a frame length; and
>> on the receiving end simply read until frame length worth of data is
>> consumed... and then apply the crypto_stream cipher on that frame with
>> the correc
> Super-simple framing protocols often fall victim to attacks in which the
> adversary messes with the length in the frame header. See, for example,
> "Plaintext Recovery Attacks Against SSH":
> http://www.isg.rhul.ac.uk/~kp/SandPfinal.pdf
>
> So be careful here.
>
>- Ian
Over Tor it won't be
On Sun, Nov 17, 2013 at 07:33:12PM -0800, David Stainton wrote:
> Hi,
>
> I noticed that because the obfsproxy api can sometimes buffer and
> resend smaller chunks of data. My simple use of Nacl stream_crypto to
> wrap each incoming data buffers will not work... that is because the
> client and se
On Sun, Nov 17, 2013 at 07:33:12PM -0800, David Stainton wrote:
> It seems like the solution is to write a super simple "framing
> protocol"... which is to say that I can first send a frame length; and
> on the receiving end simply read until frame length worth of data is
> consumed... and then app
Hi,
I noticed that because the obfsproxy api can sometimes buffer and
resend smaller chunks of data. My simple use of Nacl stream_crypto to
wrap each incoming data buffers will not work... that is because the
client and server must keep synchronized nonce counters for the
decrypt/encrypt to work..
