Security gap found in SSL
Security gap found in SSL…(In an upcoming paper, Brice Canvel (EPFL), Alain Hiltgen (UBS), Serge
Vaudenay (EPFL), and Martin Vuagnoux (EPFL, Ilion) describe and
demonstrate a timing-based attack on CBC ciphersuites in SSL and TLS.
Patched in OpenSSL 0.9.6i and OpenSSL 0.9.7a.)
