Live briefing
Everything about Padding oracle attack
Cryptography attack
In cryptography, a padding oracle attack is an attack which uses the padding validation of a cryptographic message to decrypt the ciphertext. In cryptography, variable-length plaintext messages often have to be padded (expanded) to be compatible with the underlying cryptographic primitive. The attack relies on having a "padding oracle" which freely responds to queries about whether a message is correctly padded or not. The information could be directly given, or leaked through a side-channel. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Padding oracle attackA 5-minute orientation
- Pick up a classic book: An introduction to mathematical cryptographyThe most-reprinted book on the subject
- Read the landmark paper: Attacking GlobalPlatform SCP02-compliant Smart Cards Using a Padding Oracle AttackCited 5 times
- Go sideways: Adaptive chosen-ciphertext attackA closely related topic
- Go sideways: Chosen-ciphertext attackA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
Attacking GlobalPlatform SCP02-compliant Smart Cards Using a Padding Oracle Attack
Padding Oracle Attack on Block Cipher with CBC|CBC-Double Mode of Operation using the BOZ-PAD
Safety Analysis of Various Padding Techniques on Padding Oracle Attack
‘Oracle padding’ crypto attack affects millions of ASP.NET apps
Analysis of Padding Oracle Attack Possibility about Application Environment; SRTP, MIKEY, CMS, IPSec, TLS, IPTV
📚 Books worth reading
An introduction to mathematical cryptographyJeffrey Hoffstein · 2008
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Adaptive chosen-ciphertext attack An adaptive chosen-ciphertext attack (abbreviated as CCA2) is an interactive form of chosen-ciphertext attack in which an attacker first sends a number…
- Chosen-ciphertext attack A chosen-ciphertext attack (CCA) is an attack model for cryptanalysis in which the cryptanalyst can gather information by obtaining the decryptions of…
- Block cipher mode of operation In cryptography, a block cipher mode of operation is an algorithm that uses a block cipher to provide information security such as confidentiality or authentici…
- PKCS 1 In cryptography, PKCS #1 is the first of a family of standards called Public-Key Cryptography Standards (PKCS), published by RSA Laboratories. It provides…
- Authenticated encryption Authenticated encryption (AE) is any encryption scheme which simultaneously assures the data confidentiality (also known as privacy: the encrypted message…
- Cramer–Shoup cryptosystem The Cramer–Shoup system is an asymmetric key encryption algorithm, and was the first efficient scheme proven to be secure against adaptive chosen ciphertext…
- CBC-MAC In cryptography, a cipher block chaining message authentication code (CBC-MAC) is a technique for constructing a message authentication code (MAC) from…
- RSA cryptosystem The RSA (Rivest–Shamir–Adleman) cryptosystem is a family of public-key cryptosystems (one of the oldest), widely used for secure data transmission. The…