Editing Transport Layer Security (section)

====Sweet32 attack====
The Sweet32 attack breaks all 64-bit block ciphers used in CBC mode as used in TLS by exploiting a [[birthday attack]] and either a [[man-in-the-middle attack]] or injection of a malicious [[JavaScript]] into a web page. The purpose of the man-in-the-middle attack or the JavaScript injection is to allow the attacker to capture enough traffic to mount a birthday attack.<ref>{{Cite news|url=https://arstechnica.com/security/2016/08/new-attack-can-pluck-secrets-from-1-of-https-traffic-affects-top-sites|title=HTTPS and OpenVPN face new attack that can decrypt secret cookies|first=Dan|last=Goodin|newspaper=Ars Technica|date=August 24, 2016|access-date=August 24, 2016|url-status=live|archive-url=https://web.archive.org/web/20160824181630/http://arstechnica.com/security/2016/08/new-attack-can-pluck-secrets-from-1-of-https-traffic-affects-top-sites|archive-date=August 24, 2016}}</ref>