The UnboundCompute blog
Writing on web security
-
ECB Mode Weakness: Why Identical Blocks Leak and Forge
The ecb mode weakness makes identical plaintext blocks encrypt alike, leaking structure and enabling cut and paste forgery. Learn the risk and…
-
Predictable IV Attack: How a Guessable IV Breaks CBC
A predictable iv attack turns CBC encryption into a guess confirming oracle. Learn how a reused or guessable IV breaks semantic security,…
-
CBC Bit Flipping Attack: Tampering Without the Key
A cbc bit flipping attack changes decrypted data without the key. See how flipped ciphertext bits rewrite plaintext fields, and how to…
-
Biased Nonce Attack: How a Few Predictable Bits Leak a Signing Key
A biased nonce attack recovers an ECDSA private key when the signature nonce is slightly predictable. See how a lattice turns a…
-
Invalid Curve Attack: How a Bad Point Leaks Your Private Key
An invalid curve attack feeds an elliptic curve implementation a point on a weaker curve to leak the private key. See how…
-
Small Subgroup Confinement Attack: Leaking a Diffie Hellman Key
A small subgroup confinement attack leaks a Diffie Hellman private key when a party skips public key validation. See the group theory…
-
RSA Timing Attack: Recovering a Key From Response Latency
An rsa timing attack recovers a private key by measuring how long the private operation takes. See how blinding and constant time…
-
RSA Signature Forgery: Forging a Signature With a Loose Verifier
A loose verifier plus a low exponent enable rsa signature forgery, forging a valid signature with no private key. See the cube…
-
The Bleichenbacher Attack: an RSA Padding Oracle That Recovers Plaintext
A bleichenbacher attack recovers RSA plaintext without the key by abusing a server that reveals PKCS#1 v1.5 padding validity. See the oracle…
-
Cryptographic Oracle Attacks: One Bit at a Time
Cryptographic oracle attacks recover secrets without breaking the cipher, reading one bit from padding, timing, or length. Learn the families and fixes.