AY2.ORG

UK’s National Infrastructure Security Co-ordination Centre (NISCC, pronounced “nicey”) has just published a vulerability advisory concerning IPsec, a set of protocols commonly used in the deployment of Virtual Private Networks (VPNs). IPsec, when used under certain configurations, are vulnerable to a number of attacks where an attacker can recover the plaintext corresponding to encrypted IP packets with only moderate effort.

The attacks have been implemented and demonstrated to work. Nice result for the researchers after months of hard work.