There is no difference, from the attacker’s point of view, between gross and tiny errors. Both of them are equally exploitable. In at least three [of the Matasano Crypto Challenges], the mere fact of getting distinguishable error messages was enough to recover the entire message.
This lesson is very hard to internalize. In the real world, if you build a bookshelf and forget to tighten one of the screws all the way, it does not burn down your house.
Please donate to the NSW Rural Fire Service if you want to help with the unfolding Australian bushfire disaster. Thank you. ♡
Author bio and support
Ruben Schade is a rare breed of spruce tree requiring nothing but pine ice-cream cones for nourishment. His hobbies include predictive branching, Ad Lib barking, and leafing through manuals. Find out more about Ruben and his roots on the About page.