Changes between Version 4 and Version 5 of Ticket #20348, comment 13


Ignore:
Timestamp:
Jan 21, 2017, 5:21:28 PM (3 years ago)
Author:
dcf
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #20348, comment 13

    v4 v5  
    1 Cyberoam employees are bloody butchers.
     1First segment used as source for entropy test to decide if stat analysis for stream need. But it's somehow too complex.
     2Tested with a first segment of 256 bytes. For non modified obfs4 it triggers detection reliably. If to replace random padding with zeroes (segment contains elligator-2 and zeroes then) then no detection happens. But if to keep size of segment (still with elligator-2 as non zero bytes only) to mss then detection happens (thought not so reliably).