Take the 2-minute tour ×
Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. It's 100% free, no registration required.

Recent fast elliptic curve implementations, for example a presentation at Eurocrypt 2014 (earlier presentation slides, the paper) talks about protection against only timing attacks. Why only timing attacks?

If these methods are implemented in hardware then I think it should have been protected against power attack and fault attack also.

share|improve this question
Some people care about software implementations and talk about the relevant performance and side channels, other people care about hardware implementations and talk about the relevant performance and side channels. The linked talk falls in the software category. –  CodesInChaos 2 days ago
@CodesInChaos You are probably right, but does it invalidate the question enough to close it? –  owlstead 2 days ago

1 Answer 1

It all comes down to your threat model, right? Just because an implementation is done in hardware does not mean that power and fault attacks must be considered. If I host the hardware in my secure facility with armed guards at the door, but the hardware is connected to a machine which is connected to the internet, I might feel that it is okay to not be concerned about power and fault injection attacks. On the other hand, if my hardware is being deployed "behind enemy lines" where it could be captured, you better believe that I should be worried about those sorts of attacks.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.