Raccoon
lorecryptography
A 2020 timing attack on TLS-DH that can recover the session key in rare cases.
The Raccoon attack exploited how TLS derived the premaster secret from Diffie-Hellman, where leading zero bytes and timing could leak enough to reconstruct the key. It is another reason ephemeral DH parameters and constant-time code matter.
Also known as: Raccoon, Raccoon attack, CVE-2020-1968
Sources
- CVE-2020-1968 (2020)