article
When it comes to designing secure protocols, I have a principle that goes like this: if you have to perform any cryptographic operation before verifying the MAC on a message you’ve received, it will somehow inevitably lead to doom.
1. Vaudenay Attack
2. SSH Plaintext Recovery
In Conclusion
When it comes to designing secure protocols, I have a principle that goes like this: if you have to perform any cryptographic operation before verifying the MAC on a message you’ve received, it will somehow inevitably lead to doom.
We are not affiliated with Moxie Marlinspike or Signal. This unofficial audio edition is available to listen to and share for free. Read the originals on moxie.org.
Duration
~6 minutes (6K characters)
Release date
Dec 13, 2011