Cryptology ePrint Archive: Report 2019/1083

What's in a Downgrade? A Taxonomy of Downgrade Attacks in the TLS Protocol and Application Protocols Using TLS

Eman Salem Alashwali and Kasper Rasmussen

Abstract: A number of important real-world protocols including the Transport Layer Security (TLS) protocol have the ability to negotiate various security-related choices such as the protocol version and the cryptographic algorithms to be used in a particular session. Furthermore, some insecure application-layer protocols such as the Simple Mail Transfer Protocol (SMTP) negotiate the use of TLS itself on top of the application protocol to secure the communication channel. These protocols are often vulnerable to a class of attacks known as downgrade attacks which targets this negotiation mechanism. In this paper we create the first taxonomy of TLS downgrade attacks. Our taxonomy classifies possible attacks with respect to four different vectors: the protocol element that is targeted, the type of vulnerability that enables the attack, the attack method, and the level of damage that the attack causes. We base our taxonomy on a thorough analysis of fifteen notable published attacks. Our taxonomy highlights clear and concrete aspects that many downgrade attacks have in common, and allows for a common language, classification, and comparison of downgrade attacks. We demonstrate the application of our taxonomy by classifying the surveyed attacks.

Category / Keywords: foundations / TLS, SSL, Downgrade attacks, Taxonomy, Survey, Transport, Applicatoin, Protocol

Original Publication (in the same form): SecureComm 2018 Workshop on Applications and Techniques in Cyber Security

Date: received 23 Sep 2019

Contact author: eman alashwali at gmail com

Available format(s): PDF | BibTeX Citation

Version: 20190924:070603 (All versions of this report)

Short URL:

[ Cryptology ePrint archive ]