Skip to main content
5 events
when toggle format what by license comment
Jul 3, 2019 at 15:33 comment added John Deters @inf3rno , you’re probably thinking of a “Padding oracle attack” en.wikipedia.org/wiki/Padding_oracle_attack which uses tests against compression to check the output length. This is similar to the type of attack that Lie Ryan was referring to. A defense might include fixed size records, and possibly using relationships to data in other tables. You also have to consider your threat model-outsiders might not have the same visibility to the database as insiders.
Jul 1, 2019 at 15:14 comment added inf3rno Isn't adding a padding dangerous? I remember reading about some sort of padding related attack maybe a year ago.
Jul 1, 2019 at 15:11 vote accept inf3rno
Jul 1, 2019 at 12:56 history edited John Deters CC BY-SA 4.0
added 287 characters in body
Jul 1, 2019 at 12:43 history answered John Deters CC BY-SA 4.0