Content-Type: multipart/oracle – Tapping Into Format Oracles in...

on YouTube ↗37m

" summary

Surveys 19 OpenPGP and S/MIME clients and shows two practical exploits: Google Workspaces’ SMTP behavior creates a CBC padding oracle enabling classic Bleichenbacher-style decryption, and Apple’s iOS Mail leaks decryption state via MIME/IMAP quirks (an empty-line oracle plus multipart fetching). Exploit decrypts a 60-byte CBC block with about 900 automatic emails (~7 minutes), uses multipart/alternative and multipart/mixed manipulation and passive IMAP side‑channels, and recommends authenticated encryption and protocol fixes.

AI-written summary · about

" chapters (13)

1. 0:00Email format oracles intro
2. 3:34IMAP basics and fetching
3. 8:51Decryption oracles explained
4. 13:23Previous oracle limitations
5. 15:30Exploiting Google S/MIME
6. 17:17Email clients as oracles
7. 20:24Testing S/MIME and PGP libraries
8. 22:32Finding vulnerable clients
9. 24:16Apple Mail exploit
10. 28:05Demo: Decrypting ciphertext
11. 31:11Why clients resist attacks
12. 34:21Fixes and solutions
13. 36:07Conclusion and countermeasures

" related talks

• 22mEfail: Breaking S/MIME and OpenPGP Email Encryption using Exfiltration ChannelsDamian Poddebniak · USENIX Security '18
• 34mHacking the Oracle Application FrameworkDavid Byrne · OWASP AppSecUSA 2014
• 40mStealing With Style: Using CSS to Exploit ProtonMail & FriendsPaul Gerste · Black Hat Asia 2023
• 29mDancing on the Lip of the Volcano: Chosen Ciphertext Attacks on Apple iMessageMatthew Green, Ian Miers, Christina Garman, Gabriel Kaptchuk, Michael Rushanan · USENIX Security '16
• 43mHunting for Bugs, Catching DragonsNicolas Joly · Black Hat USA 2019
• 24mReturn Of Bleichenbacher’s Oracle Threat (ROBOT)Hanno Bock · USENIX Security '18
• 45mPadding Oracle Attacks on Smart CardsMichał Trojnara · Oh My H@ck 2020
• 51mMaking the most of Security TestsPaweł Krzywicki · NDC Oslo 2019