Editing Transport Layer Security (section)

====Plaintext attack against DTLS====
In February 2013 two researchers from Royal Holloway, University of London discovered a timing attack<ref name="praad-tls">{{cite conference |title=Plaintext-recovery attacks against datagram TLS |last1=AlFardan |first1=Nadhem |last2=Paterson |first2=Kenneth G |conference=Network and distributed system security symposium (NDSS 2012) |year=2012 | url=http://www.isg.rhul.ac.uk/~kp/dtls.pdf | archive-url=https://web.archive.org/web/20120118070007/http://www.isg.rhul.ac.uk/~kp/dtls.pdf | archive-date=2012-01-18 | url-status=unfit}}</ref> which allowed them to recover (parts of the) plaintext from a DTLS connection using the OpenSSL or GnuTLS implementation of DTLS when [[Cipher Block Chaining]] mode encryption was used.