Differences

This shows you the differences between two versions of the page.

--- pgpfan:oracle [2020/08/22 18:21] – social engineering b.walzer
+++ pgpfan:oracle [2022/09/25 12:03] – Clearer. b.walzer
@@ Line 1: / Line 1: @@
-======Oracle Attack Immunity======
+ ======Oracle Attack Immunity======
 An [[https://www.drdobbs.com/understanding-oracle-attacks-on-informat/184405917|oracle attack]] is a powerful technique used to discover information about the internal state of some system. The system is tested in some way, usually repetitively, and the response is analyzed.
@@ Line 7: / Line 7: @@
 This immunity to oracle attacks comes from the simplicity of PGP. There are no low level automated subsystems to interact with. You are always interacting with a person.
-This might seem to be a trivial observation and that I am giving PGP credit for something intrinsic to the application. Sometimes the name of a particular attack is matched to the name of a particular encryption method without checking for the prerequisites that could make that attack possible. This is common for the case of oracle attacks.
+This might seem to be a trivial observation and that I am giving PGP credit for something intrinsic to the application but this is a common source of confusion. It is often incorrectly assumed that oracle attacks applicable to online, connection oriented media are also relevant for the offline, non-connection oriented media where PGP is used.
-[[pgpfan:index|PGP FAN index]]
+[[pgpfan:index|PGP FAN index]]\\
+[[em:index|Encrypted Messaging index]]\\
+[[:start|Home]]