What classes of side-channel attacks are applicable to RSA implementation and what is the efficiency rate ?
$\begingroup$
$\endgroup$
2
-
6$\begingroup$ Actually, you don't have a side channel attack on "RSA" (or any crypto primitive); you have a side channel attack on an implementation of RSA. Some implementations will be vulnerable to a variety of side channel attacks; others will be far more resistant (the hard-core side channel guys will say nothing is totally immune...) $\endgroup$– ponchoSep 22, 2018 at 13:00
-
$\begingroup$ Other relevant questions: crypto.stackexchange.com/q/59334 crypto.stackexchange.com/q/25163 crypto.stackexchange.com/q/52214 $\endgroup$– Squeamish OssifrageJun 17, 2019 at 19:11
Add a comment
|
2 Answers
$\begingroup$
$\endgroup$
0
One type of side channel attacks on RSA is timing attack. It explots the timing variability of operation implementation. To secure against RSA timing attack, constant-time operations are implemented.
$\begingroup$
$\endgroup$
1
As far as I can find out there one of "Paul Carl Kocher" development was Timing Attack, that can break implementations of RSA, a timing attack is a side channel attack that attacker attempts to compromise a cryptosystem by analyzing the time taken to execute cryptographic algorithms.
-
3$\begingroup$ Actually, Paul's work was far more focused on various power side channel attacks (for one, those give far more information to the attacker than a simple timing measurement). $\endgroup$– ponchoSep 22, 2018 at 12:57