Linked Questions
11 questions linked to/from How practical are side-channel attacks and how much of a concern are they?
19
votes
2
answers
5k
views
How is encryption broken today?
There are often articles in the news that state that a certain country or hacker has been able to decrypt/hack highly protected systems: Some examples are the Lockheed Martin RQ-170 Sentinel that was ...
14
votes
2
answers
1k
views
Interesting implementation practices in popular crypto library
So reading through the salsa20 implementation for the crypto library for go-lang, I noticed something interesting. Specifically this portion. It looks like something I would expect from someone ...
12
votes
2
answers
2k
views
Are there any signature schemes for underpowered devices (8-bit microcontroller)?
I am currently researching into a small scale home automation system, aiming for cost. The system architecture is basically one master and several slaves which are connected in parallel.
Recently i'...
7
votes
1
answer
3k
views
What is a smart card?
In many cryptographic protocols, some information is transmitted within smart cards. So, what is a smart card? Is it a physical card? What are they used for in cryptographic protocols?
4
votes
2
answers
19k
views
How insecure is AES-128-CTR to encrypt any kind of data using the Ethereum keystore file format?
I am using the Ethereum keystore file format to encrypt any other data such a plain text or JSON.
Here is an example of pseudocode of the implementation:
...
6
votes
1
answer
8k
views
SHA256 HMAC brute force with chosen plaintext attacks
This is a follow up to Is It Possible To Reconstruct a Cryptographic Hash's Key
I am using a SHA-256 HMAC function on a single-word input: sha256hmac(privatekey,word) = output. The private key length ...
8
votes
2
answers
3k
views
Timing attack on modular exponentiation
It is known that computing $a^x \bmod N$ takes $O(|x| + \mathrm{pop}(x))$ multiplications modulo $N$, where $|x|$ is the number of bits of $x$ and $\mathrm{pop}(x)$ is the number of $1$ bits (Hamming ...
3
votes
2
answers
3k
views
How are these AES MixColumn multiplication tables calculated?
I'm using the mul2, mul3, mul9, mul11, mul13 and mul14 tables for the MixColumn and InvMixColumn steps in AES-128. However, I got these off some Github repository, and now I'm looking for an actual ...
3
votes
1
answer
10k
views
Attacks on Aes (128-192-256) [duplicate]
I have a direct question
Is there any practical attacks on the AES cryptosystem (128-192-256 keys)
9
votes
1
answer
577
views
Do people not care about side channel resistance?
Recently, I have been browsing a lot through libraries that implementing Shamir secret sharing. I see a lot of code that implements this cryptographic algorithm without any side channel (timing/branch/...
4
votes
1
answer
435
views
Have crypto side-channel attacks happened in the wild?
I'm aware of attacks extracting information via timing and volume. But none that care or attack the actual cryptographic algorithm implementation or end up extracting the key.
Seeking examples if any ...