You're reading from TLS Cryptography In-Depth Explore the intricacies of modern cryptography and the inner workings of TLS

Product type Paperback

Published in Jan 2024

Publisher Packt

ISBN-13 9781804611951

Length 712 pages

Edition 1st Edition

Concepts

Cryptography

Authors (2):

Dr. Roland Schmitz

Dr. Paul Duplys

View More author details

Table of Contents (30) Chapters

Preface

1. Part I Getting Started

2. Chapter 1: The Role of Cryptography in the Connected World FREE CHAPTER

3. Chapter 2: Secure Channel and the CIA Triad

4. Chapter 3: A Secret to Share

5. Chapter 4: Encryption and Decryption

6. Chapter 5: Entity Authentication

7. Chapter 6: Transport Layer Security at a Glance

8. Part II Shaking Hands

9. Chapter 7: Public-Key Cryptography

10. Chapter 8: Elliptic Curves

11. Chapter 9: Digital Signatures

12. Chapter 10: Digital Certificates and Certification Authorities

13. Chapter 11: Hash Functions and Message Authentication Codes

14. Chapter 12: Secrets and Keys in TLS 1.3

15. Chapter 13: TLS Handshake Protocol Revisited

16. Part III Off the Record

17. Chapter 14: Block Ciphers and Their Modes of Operation

18. Chapter 15: Authenticated Encryption

19. Chapter 16: The Galois Counter Mode

20. Chapter 17: TLS Record Protocol Revisited

21. Chapter 18: TLS Cipher Suites

22. Part IV Bleeding Hearts and Biting Poodles

23. Chapter 19: Attacks on Cryptography

24. Chapter 20: Attacks on the TLS Handshake Protocol

25. Chapter 21: Attacks on the TLS Record Protocol

26. Chapter 22: Attacks on TLS Implementations

27. Bibliography

28. Index

29. Other Books You Might Enjoy

22.8 Cloudbleed

In 2017, Tavis Ormandy, a vulnerability researcher in Google’s Project Zero team, reported a security vulnerability in Cloudflare’s edge servers [76]. Cloudflare is a large Content Delivery Network (CDN) that operates a global network of servers that cache and deliver website content to end users from the server location closest to them.

Because of the vulnerability, the software running on Cloudflare’s edge servers – more precisely, an HTML parser – was reading past the end of a buffer and returning contents from the servers’ internal memory such as HTTP cookies, authentication tokens, and the bodies of HTTP POST requests.

Cloudflare reported that during the peak time, a period of about five days, 1 in every 3,300,000 HTTP requests to Cloudflare’s edge servers potentially resulted in a memory leak [76].

The proof of concept by Tavis Ormandy returned private messages from major dating sites, full messages from...

The rest of the chapter is locked

You're reading from TLS Cryptography In-Depth Explore the intricacies of modern cryptography and the inner workings of TLS

Table of Contents (30) Chapters

22.8 Cloudbleed

Unlock this book and the full library FREE for 7 days

Authors (2)

Personalised recommendations for you