Catégorie: Conférence avec actes
Auteurs: Florian Maury, Jean-René Reinhard, Olivier Levillain et Henri Gilbert
Date: avril 2015

The principle of padding oracle attacks has been known in the cryptography research community since 1998. It has been generalized to exploit any property of decrypted ciphertexts, either stemming from the encryption scheme, or the application data format. However, this attack principle is being leveraged time and again against proposed standards and real-world applications. This may be attributed to several factors, e.g. the backward compatibility with standards selecting oracle-prone mechanisms, the difficulty of safely implementing decryption operations, and the misuse of libraries by non cryptography-savvy developers. In this article, we present several format oracles discovered in applications and libraries implementing the OpenPGP message format, among which the popular GnuPG application. We show that, if the oracles they implement are made available to an adversary, e.g. by a front-end application, he can, by querying repeatedly these oracles, decrypt all OpenPGP symmetrically encrypted packets. The corresponding asymptotic query complexities range from 2 to 256 oracle requests per plaintext byte to recover.

Publié dans les actes Topics in Cryptology - The Cryptographer's Track at the RSA Conference 2015 (pages 220 à 236)

Présenté lors de la conférence CT-RSA à San Francisco, CA, USA en avril 2015

BibTeX Document Présentation