KeyTrap Algorithmic Complexity Attacks Exploit Fundamental Design Flaw in DNSSEC
• 10 min read
KeyTrap - described by some as 'the worst attack on DNS ever discovered' - is capable of exhausting CPU resources and stalling widely used DNS implementations and public DNS providers, like Google Public DNS and Cloudflare. The research team from ATHENE explain how they discovered the attack.