ronutz

Lucky Thirteen

lore

cryptography

A 2013 timing attack against CBC padding in TLS.

Lucky Thirteen measured tiny timing differences in how TLS processed CBC padding to recover plaintext byte by byte. It reinforced the case for moving away from CBC mode toward AEAD ciphers.

Also known as: Lucky Thirteen, Lucky 13, CVE-2013-0169

Sources

  • CVE-2013-0169 (2013)

← All glossary entries