Bugtraq mailing list archives
Re[2]: A new TCP/IP blind data injection technique?
From: Marius Huse Jacobsen <mahuja () c2i net>
Date: Sat, 13 Dec 2003 01:59:56 -0800
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello Valdis, Thursday, December 11, 2003, 9:06:26 AM, you wrote: VKve> However, it's a trivial matter to take the original text, the replacement text, VKve> and compute an original such that the checksum comes out "the same". Only this is a scenario where we don't have the "original text". If we had, we could have just ripped out the sequence numbers and skipped the whole problem. As long as we don't know anything of the original data we have to guess the correct checksum. Still, 1 of 65535 is a lot better than... what is it, 2**64 ? - -- Best regards, Marius mailto:mahuja () c2i net -----BEGIN PGP SIGNATURE----- iQA/AwUBP9rjLJfZ2CSWpu1rEQIDnwCeI0wMODSSAJLgob1jSl+IDFw3uWMAoLhM zR9zJ8TPn/0lOWXgJvBq2lZG =CvFw -----END PGP SIGNATURE-----
Current thread:
- A new TCP/IP blind data injection technique? Michal Zalewski (Dec 10)
- Re: A new TCP/IP blind data injection technique? Nick Cleaton (Dec 11)
- Re: A new TCP/IP blind data injection technique? Valdis . Kletnieks (Dec 11)
- Re[2]: A new TCP/IP blind data injection technique? Marius Huse Jacobsen (Dec 13)
- Breaking the checksum (a new TCP/IP blind data injection technique) Michal Zalewski (Dec 15)
- Re: A new TCP/IP blind data injection technique? Valdis . Kletnieks (Dec 11)
- Re: A new TCP/IP blind data injection technique? Kris Kennaway (Dec 11)
- Re: A new TCP/IP blind data injection technique? Casper Dik (Dec 11)
- RE: A new TCP/IP blind data injection technique? David Gillett (Dec 11)
- Message not available
- Message not available
- Re: A new TCP/IP blind data injection technique? Michal Zalewski (Dec 12)
- Re: A new TCP/IP blind data injection technique? Barney Wolff (Dec 12)
- Re: A new TCP/IP blind data injection technique? Michal Zalewski (Dec 12)
- Re: A new TCP/IP blind data injection technique? Stephen Frost (Dec 12)
- Message not available
- Re: A new TCP/IP blind data injection technique? Nick Cleaton (Dec 11)
- <Possible follow-ups>
- RE: A new TCP/IP blind data injection technique? Michael Wojcik (Dec 11)
- Re: A new TCP/IP blind data injection technique? stanislav shalunov (Dec 12)