The TLS session ticket decryption in the ticketer implementation is vulnerable to a partitioning oracle…
The TLS session ticket decryption in the ticketer implementation is vulnerable to a partitioning oracle…: a task in LegoFlow-SWE (Harbor dataset). By observing whether resumption occurs, an attacker can determine which key(s) the server is using, breaking the confidentiality of the STEK rotation.
The task
By observing whether resumption occurs, an attacker can determine which key(s) the server is using, breaking the confidentiality of the STEK rotation.
Part of Lego-X/LegoFlow-SWE.