Chunking attacks on Tarsnap (and others)

287 · Colin Percival · March 21, 2025, 5:08 p.m.
Summary
This blog post discusses a research paper detailing chosen-plaintext attacks on Tarsnap and others, revealing how chunking parameters can be extracted by malicious actors. It highlights improvements made in Tarsnap version 1.0.41 to counter these attacks and mentions ongoing efforts to enhance security further.