Hold your sessions: An attack on Java session-id generation

DOI10.1007/978-3-540-30574-3_5MaRDI QIDQ5710849zbMATH OpenOpenAlexFDO

Authors Zvi Gutterman, Dahlia Malkhi

Publication date 8 December 2005

Published in Lecture Notes in Computer Science (Search for Journal in Brave)

Full work available at URL https://doi.org/10.1007/b105222

zbMATH Keywords

HTTPpseudo random number generatorsspace-time tradeoffweb security

Mathematics Subject Classification ID

Cryptography (94A60)

Recommendations

• Attacking RSA-based sessions in SSL/TLS.
• Cryptanalysis of the alleged securID hash function
• Cryptanalytic attacks on pseudorandom number generators
• Applied cryptography and network security. 9th international conference, ACNS 2011, Nerja, Spain, June 7--10, 2011. Proceedings
• Attacks on the RC4 stream cipher

Cited in

(2)

• Security Against Related Randomness Attacks via Reconstructive Extractors
• Cut-\&-paste attacks with Java

This page was built for publication: Hold your sessions: An attack on Java session-id generation

Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q5710849)