Re: Algorimic Complexity Attacks

2003-06-23 Thread Pavel Kankovsky
On Sun, 8 Jun 2003, Nicholas Weaver wrote: IF the hash is good, FINDING collisions doesn't necessarily help the attacker, as the attacker really needs to generate lots of collisions to make the searches O(n) instead of O(1), since that is teh key behind this attack. First, I myself assume

Re: Algorimic Complexity Attacks

2003-06-02 Thread Solar Designer
On Thu, May 29, 2003 at 03:33:06PM -0500, Scott A Crosby wrote: They exploit the difference between 'typical case' behavior versus worst-case behavior. For instance, in a hash table, the performance is usually O(1) for all operations. However in an adversarial environment, the attacker

Algorimic Complexity Attacks

2003-05-30 Thread Scott A Crosby
Hello. This is to announce a new class of attack which we have named 'Algorithmic Complexity Attack'. These attacks can perform denial of service and/or cause the victim to consume more CPU time than expected. We have a website for our research paper and project and tentative source code