Poly1305
1
MENTIONS
1
EPISODES
1
PODCASTS
Search complete. 1 mention across 1 episode found for "Poly1305".
Oct 29, 2026
Christopher WhiteHOST
Four.
Christopher WhiteHOST
TLS traffic over DHE ciphers have a one-byte secret, 04, meaning anyone can do communications to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS, DHE, RSA with Chaka20, Poly1305, underscore SHA-256, which is extremely likely.
Christopher WhiteHOST
LibreSSL MTLS has been completely bypassed, meaning anyone can connect over MTLS.
Christopher WhiteHOST
If you have one of these devices listening on the internet and are expecting MTLS to protect it from attackers, take it offline.