Skip to main content

CRYPTO LABSource All labs

Compression Leak

BREACH · gzip · AES-GCM

Compress and encrypt synthetic responses and discover what ciphertext length reveals.

WHY IT MATTERS

Compressing private data together with attacker-controlled text can make the encrypted response length depend on secret matches. Authentication still succeeds: the leaked information comes from length, not broken AES.

Preparing the lab…

So whether you eat or drink or whatever you do, do it all for the glory of God. — 1 Corinthians 10:31