Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to evaluate the correlation between key length and the number of messages that needs to be send to server during Cache timing Attack.

I read both D. Bernstein, “Cache-timing attacks on AES,” April 2005. Department of Mathematics, Statistics, and Computer Science University of Illinois at Chicago. Robert G. Salembier, "Analysis of Cache Timing Attacks against AES"

But it doesn't give me the answer. At the beginning Bernstein identified one byte of key after sending around 4,2 million 400-byte long messages. Attack described was done on the 128-bit AES key, and it required 32 million 800-byte packages, 32 million 600 byte packets, and 128 million 400-byte packets. But in conclusions (Future works) D.Bernstein write: "I wouldn't be surprised if the first million (2^20) 800-byte and 600-byte packets were sufficient to identify the key"

Additional information can be found in [7]. But there is still no direct correlation between key length and message numbers.

Is there any correlation ?

share|improve this question
Depends a lot on how well you can measure the timing. Bernstein used a setup with pretty accurate timing information. – CodesInChaos Oct 12 '13 at 10:10

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.