A Messy State of the Union: Taming the Composite State Machines of TLS
We systematically test popular TLS implementations and find unexpected transitions in many of their state machines that have stayed hidden for years. We show how some of these flaws lead to critical security vulnerabilities.
