Twitter Feed
@kennyog replied to a tweet by @kennyog:
Both attacks get us to the desired ECB decryption oracle. They need quite a lot of client logins - about 600 for the faster of the two. So quite hard to pull off - but not much harder than the previous, broken version of MEGA. (8/16)