Skip to content
Free planNo credit card requiredStart writing

article · 2012

Technical Analysis of Countermeasures against Attack on XML Encryption -- or -- Just Another Motivation for Authenticated Encryption

Juraj Somorovsky, Jörg Schwenk

Cited by 11Abstract and details only

Abstract

At CCS'11 a new chosen-ciphertext attack on XML Encryption [13] has been presented. This attack is of high relevance, since it allows one to decrypt arbitrary encrypted XML payload by issuing 14 server requests per byte on average. In this paper we discuss several countermeasures against this attack, which have been considered by different framework developers for different scenarios. We analyze the scenarios and show why these countermeasures do not work. Thereby, we motivate for the application of authenticated encryption in the XML Encryption specification.

Cite this paper

APA 7

Somorovsky, J., & Schwenk, J. (2012). Technical Analysis of Countermeasures against Attack on XML Encryption -- or -- Just Another Motivation for Authenticated Encryption. https://doi.org/10.1109/services.2012.6

MLA 9

Somorovsky, Juraj, and Jörg Schwenk. “Technical Analysis of Countermeasures against Attack on XML Encryption -- or -- Just Another Motivation for Authenticated Encryption.” vol. 2332, 2012, pp. 171–78, https://doi.org/10.1109/services.2012.6.

Chicago

Somorovsky, Juraj, and Jörg Schwenk. 2012. “Technical Analysis of Countermeasures against Attack on XML Encryption -- or -- Just Another Motivation for Authenticated Encryption.” https://doi.org/10.1109/services.2012.6.

Harvard

Somorovsky, J. and Schwenk, J. (2012) ‘Technical Analysis of Countermeasures against Attack on XML Encryption -- or -- Just Another Motivation for Authenticated Encryption’. Available at: https://doi.org/10.1109/services.2012.6.

BibTeX
@article{somorovsky2012technical,
  title = {{Technical Analysis of Countermeasures against Attack on XML Encryption -- or -- Just Another Motivation for Authenticated Encryption}},
  author = {Somorovsky, Juraj and Schwenk, Jörg},
  volume = {2332},
  pages = {171--178},
  year = {2012},
  doi = {10.1109/services.2012.6}
}

Made from the index record. Check names, capitalisation and page numbers against the paper. Need another style? AI for Research has over 10,000.