New answers tagged

6

I was wondering about whether the usage of a precomputed sbox (kind of a lookup table) could be a serious security issue when using AES. Well, that rather depends on the type of side channel attacks you are interested in protected against. You specifically mention Power Analysis (SPA and DPA) type attacks; the first obvious question would be: could those ...


3

Here's a classic timing attack against SSH: http://people.eecs.berkeley.edu/~daw/papers/ssh-use01.pdf As SSH is an encrypted terminal, it would send a packet each time you press a key. As you type your password, for example, you leaked the length of your password and also the timing. This could be used to reconstruct your likely password and make it ...


4

The classic one that I can think of off the top of my head, that also happened relatively recently and posed a pretty widespread threat, was the Heartbleed bug. It was a big security vulnerability that would reveal authentication info in one of the most common ways communication gets encrypted over the internet, SSL/TLS. Most computers were affected, if I ...



Top 50 recent answers are included