BREACH: Reviving the CRIME Attack

Come have lunch with Papers We Love and enjoy good food and geeky talk. We'll be discussing the paper "BREACH: Reviving the CRIME Attack," which describes a compression side channel attack on TLS. The authors demonstrate the attack with a proof of concept attack on Outlook Web Access. The paper is quite easy to read, demonstrates both the specific attack and the general class of attacks, and has some thoughts on mitigation.

You can get a free copy of the paper here: http://breachattack.com/resources/BREACH%20-%20SSL,%20gone%20in%2030%20seconds.pdf

As always, please feel free to attend if the subject matter interests you, whether or not you read the paper ahead of time. Reading the paper in advance is helpful, but don't let it stop you from coming!