Practical New Developments in The Breach Attack
summary
Extends BREACH to work against block ciphers and noisy endpoints and demonstrates a persistent command‑and‑control over injected HTTP that issues authenticated HTTPS requests from victims’ browsers. Introduces statistical sampling (typically 16 requests per candidate) plus divide‑and‑conquer and request‑soup/browser parallelization optimizations that cut complexity toward O(n log σ) and claim up to ~500× speedup; demoed tool Rupture (MIT) decrypts bytes in tens of seconds under realistic noise. Recommends first‑party cookies as an effective mitigation.
AI-written summary · about
chapters (29)
- 0:00Introduction
- 0:22Who are we
- 0:36HTTPS is broken
- 1:25Overview
- 2:04Original Research
- 3:51Breach Assumptions
- 7:11Methodology
- 8:42Other Contributions
- 9:21Alternative Secrets
- 9:58Call Methods
- 11:25Artificial Noise
- 13:00New Block
- 13:52Noises
- 16:14Optimizations
- 17:09Example
- 20:16Requests Soup
- 22:14Browser Polarization
- 23:32Rupture
- 26:39Rapture Components
- 29:21Attack Diagram
- 34:00Persistence
- 35:20Repo
- 36:16Backend
- 39:04Lengths
- 42:23Mitigation
- 43:48First Party Cookies
- 45:14Future Work
- 46:00Takeaways
- 46:27Questions
related talks
45mHTTP Desync Attacks: Smashing Into The Cell Next Door
50mHTTP Desync Attacks: Smashing into the Cell Next Door
42mBreak Crypto like a Pro!
48mA Weakness In Chrome & A New Hacking Technique
43mAttacking Modern Web Technologies
53mThe BEAST Wins Again: Why TLS Keeps Failing to Protect HTTP
33mOffensive Javascript Techniques for Red Teamers
35mBreaking Endpoint Anti-Ransomware: Going... (Nishant Sharma, Vivek Ramachandran)