Collected research

Revisiting SSL/TLS Implementations: New Bleichenbacher Side Channels and Attacks

Christopher Meyer, Juraj Somorovsky, Eugen Weiss, Jörg Schwenk, Sebastian Schinzel and Erik Tews · usenix.org

Four new Bleichenbacher oracles in the TLS RSA handshake: a JSSE error-message difference, OpenSSL timing, Java exception-handling timing, and a Cavium NITROX chip that leaks whether decrypted data starts 0x?? 02. Three are practical over a switched network, letting an attacker decrypt a recorded PreMasterSecret and with it the whole session.

Record

Researcher

Christopher Meyer, Juraj Somorovsky, Eugen Weiss, Jörg Schwenk, Sebastian Schinzel and Erik Tews

Published by

usenix.org

Topic

Crypto

In the archive

• Collected in the 2014 research round

Tags

• side-channel
• timing-attack
• tls
• https
• java
• info-leak
• tooling
• owasp-a02-2021

This page is the archive's own catalogue record. The research is the work of Christopher Meyer, Juraj Somorovsky, Eugen Weiss, Jörg Schwenk, Sebastian Schinzel and Erik Tews, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 14 August 2026.