PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

What Application Developers Need To Know About TLS Early Data (0RTT)

blog.trailofbits.com | blog | #web-security | #tls | #tls13 | #0rtt | #replay-attacks
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

TLS 1.3's 0-RTT early data enables replay attacks on apps lacking anti-replay defenses—upgrading TLS alone can introduce vulnerabilities. It covers mitigations at CDN, proxy, and application layers.
Published
Collected

Related coverage

blog · blog.trailofbits.com
We build X.509 chains so you don’t have to
Trail of Bits and the Python Cryptographic Authority built a pure-Rust X.509 path validation implementation for the cryptography library plus the x509-limbo conformance test suite.
blog · blog.trailofbits.com
Publishing Trail of Bits’ CodeQL queries
Trail of Bits published custom CodeQL queries for Go and C that uncover issues standard queries miss: (EC)DSA misuse, insecure file permissions, string bugs, and missing TLS minimum versions.
blog · blog.trailofbits.com
Themes from Real World Crypto 2020
Trail of Bits recaps Real World Crypto 2020, where 642 attendees explored themes from pervasive crypto bugs and the cryptographer shortage to new uses like Apple's Find My key derivation.
blog · blog.trailofbits.com
Crypto 2019 Takeaways
Takeaways from IACR Crypto 2019: attacks on OCB2 and ECDSA nonce reuse, automated TLS padding oracle discovery, efficient zero-knowledge proofs, and progress toward post-quantum cryptography.
blog · blog.trailofbits.com
A Guide to Post-Quantum Cryptography
A primer on post-quantum cryptography for harvest-now-decrypt-later threat models, surveying lattice-, code-, isogeny-, and hash-based algorithm families.
blog · blog.trailofbits.com
Fault Analysis on RSA Signing
A Trail of Bits intern modeled RSA-CRT fault attacks at the machine level, using Manticore to flip bits and show how a faulty partial signature lets attackers factor n and recover private keys.
Back