A breach beyond CRIME

LZ77  ->  Google in google -> Google in g(2, 5)

Huffman Encoding

Prerequest:  

ORACLE: Guess security token byte by byte. The package length will change (shorter) if a right guess is made.

How to against Huffman Encoding

Two sets

== abcX {}{}{}{}

== abc {}{}{}{}X

and == abcX {a-Z} {0-9}  // Guess with full set of characters as padding characters. Move one out with every guess.

Reference:

https://www.youtube.com/watch?v=CoNKarq1IYA //27:20

http://en.wikipedia.org/wiki/CRIME_(security_exploit)