Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top
  1. Given an RSA implementation that uses Montgomery multiplications and CIOS exp algo, but NOT CRT.
  2. Given a decryption1 oracle that takes chosen cipher text and responds the plain text and the time it took to decrypt it.
  3. Given a decryption2 oracle that takes N,d,c and uses the same code as decryption1 oracle, it responds the time again it took to decrypt it and the plain text.

Can you please point me out on how I can implement an actual timing attack on this?

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.