The Patching Friars' AlmanacA calendar of CVE saints

April 17

Ring-RoadHoly card for ring-road, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 ***** Ring-Road LONGITUDO PRODIT
🤖 Image and text generated with AI

⬇ Download holy card: ·

⚔ Commemorated today: The Scourge of Costa Rica (2022)

Embed on your site

Blessed Ring-Road, Who Measured Passwords From Outside

Patron of fast protocols, unpadded packets, and short passwords.

Life

In 2017 Robert Morton, Austin Klasa and Daniel Sokoler of Purdue University described Ring-Road: in QUIC, Google's experimental protocol, AES-GCM encryption leaves the message exactly as long as the original. Anyone watching the traffic could therefore infer the length of a password during sign-in, without reading it. According to the researchers, that was enough to make guessing it much easier.

Prayer

O Blessed Ring-Road, who counts characters without seeing them, let our protocols pad their secrets and our passwords be long. Amen.

How to celebrate

Celebrated by turning on two-step verification and choosing a password so long that measuring it is pointless.

Know the length, and you're halfway there.

Technical record

Disclosed on
April 17 2017
CVE
No CVE: blessed, not yet canonized by MITRE

Sources: ringroadbug.com · cerias.purdue.edu

Commemorated today

Also remembered today

Shortcuts: ← → to move, D day, W week, M month, T today.

📅 Add to your calendar

Saints:Google CalendarApple, Outlook and others (.ics)

Observances (feasts, scourges and miracles):Google CalendarApple, Outlook and others (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.