[ThreatPost]Attack Exploits Weakness in RC4 Cipher to Decrypt User Sessions

[igor51]

Attack Exploits Weakness in RC4 Cipher to Decrypt User Sessions

It's been more than 25 years since Ron Rivest invented his RC4 stream cipher, and after all that time it's still being used widely, which is something of an achievement in the crypto world. However, for more than 15 years researchers have known about a weakness in RC4 that could enable an attacker to decrypt the keystream. Now, a cryptographer has published an attack that exploits that vulnerability and causes serious problems with TLS implementations.

read more

Source: Attack Exploits Weakness in RC4 Cipher to Decrypt User Sessions