TLS/Protocol Downgrade

Принуждаване към по-стар TLS/protocol version или слаб cipher/mode.

Какво е

Принуждаване към по-стар TLS/protocol version или слаб cipher/mode.

Как работи

Attacker interferes with negotiation или разчита на legacy fallback и използва weakness, която modern mode е премахнал.

Как да се предотврати

Disable legacy SSL/TLS versions/ciphers, enforce minimum versions, use modern libraries и test external TLS configuration.

Други в Криптографски, hardware и side-channel атаки

SSL/TLS Stripping Padding-Oracle Attack Timing Side-Channel Attack Power-Analysis Side Channel Electromagnetic (EM) Side Channel Cache Side-Channel Attack Spectre Meltdown Rowhammer Cold-Boot Attack DMA Attack Fault Injection Weak Random Number Generator / Predictable Nonce Nonce/IV Reuse Hash Collision/Birthday Attack Private-Key Theft Rogue/Compromised Certificate Authority Cryptographic Failure through Weak/Deprecated Algorithms