Editing OpenSSL (section)

=== SSL, TLS and DTLS plaintext recovery attack ===

In handling CBC cipher-suites in SSL, TLS, and DTLS, OpenSSL was found vulnerable to a timing attack during the MAC processing. Nadhem Alfardan and Kenny Paterson discovered the problem, and published their findings<ref>{{cite web|url=http://www.isg.rhul.ac.uk/tls/|title=On the Security of RC4 in TLS|publisher=Royal Holloway Department of Information Security|access-date=April 29, 2014|archive-date=March 15, 2013|archive-url=https://web.archive.org/web/20130315084623/http://www.isg.rhul.ac.uk/tls/|url-status=dead}}</ref> on February 5, 2013. The vulnerability was assigned the CVE identifier {{CVE|2013-0169}}.