Unanswered 'timing-attack' Questions

3

votes

0answers

111 views

Attacking Scrypt Under Access Pattern Leakage

Could cache-timing channels (such as exist for certain block ciphers) somehow be made use of in order to extract memory-access pattern information if both the attacker and user are NOT in a shared ...

asked Jun 24 '16 at 14:26

McJohnson

1231 silver badge3 bronze badges

3

votes

0answers

210 views

Timing Attack on OpenSSL by Brumley

I am referring to this paper by David Brumley and Dan Boneh: Remote Timing Attacks are Practical (In proceedings of the 12th Usenix Security Symposium, 2003). In this paper on page 4, Brumley ...

tls openssl attack timing-attack

asked Nov 4 '14 at 11:52

dudedev

312 bronze badges

2

votes

1answer

106 views

How to ensure that a cryptographic implementation is reasonably sound/robust?

I know from the bottom of my heart how bad the idea of custom-crypto is. I absolutely concur with the recommendation that it should only be done by professionals who specialize in implementing crypto ...

implementation randomness entropy cryptographic-hardware timing-attack

asked Mar 12 at 21:15

krkhan

635 bronze badges

2

votes

0answers

53 views

RSA: Blinding versus fixed-time computation

For RSA, what is the standard solution against timing attacks? I know about RSA blinding as one solution. Another solution is to always compute both the squared value and square-and-multiply values, ...

rsa side-channel-attack timing-attack

asked Mar 20 '19 at 22:02

Myria

1,7356 silver badges17 bronze badges

2

votes

0answers

80 views

Is timing attack practical in a web developer's perspective?

Let's say my server has a non-constant-time compare function for checking if the visitor has a valid session id. The time it takes for the comparator to run would be very insignificant, usually within ...

authentication timing-attack

asked Aug 11 '18 at 10:03

longcc

211 bronze badge

2

votes

0answers

235 views

RSA Key Blinding

I was looking the answer to the following question (Timing attack on modular exponentiation), discussing the Private Key Blinding as a countermeasure for timing attacks. Therefore I'm asking if ...

rsa reference-request timing-attack blinding

asked May 12 '14 at 17:29

Filosopher

211 bronze badge

1

vote

0answers

272 views

Question about RSA timing attack and a Chosen Ciphertext Attack on RSA

I am quite new to the RSA and I have a couple of questions that confuse me. Q1: A Timing attack on RSA can be prevented _____________________________ A. By performing the “square and multiply” ...

encryption rsa cryptanalysis timing-attack

asked Nov 11 '19 at 19:54

Godfrey

112 bronze badges

1

vote

0answers

85 views

Side channel attack: Why building an eviction set is possible?

I'm learning about the side channel attack on the cache. I came to know that most of the attack (EVICT + TIME, PRIME + PROBE, PRIME + ABORT) on the cache is initiated by building an eviction set(a ...

side-channel-attack timing-attack cpu

asked Jun 13 '19 at 2:15

randomUser

211 bronze badge

1

vote

0answers

175 views

Kocher Timing Attack - Error Correction

In class, we learned the Kocher Timing Attacke on modular exponentiation. For determining whether the (e.g., LSB) is 0 or 1, we specified two values: $T_1 = T_M - (TMult(1, y) + (\omega -1)ExpTMult)$ ...

timing-attack

asked Oct 4 '16 at 12:24

Christine

3231 silver badge4 bronze badges

1

vote

0answers

86 views

Cache Attacks on Cloud Infrastructures

I read something about cache attacks like this: Enter KSM (Kernel SamePage Merging). KSM enables the kernel to examine two or more already running programs and compare their memory. If any memory ...

timing-attack

asked Apr 21 '15 at 16:07

byteBiter

1535 bronze badges

1

vote

0answers

468 views

RSA timing attack

Given an RSA implementation that uses Montgomery multiplications and CIOS exp algo, but NOT CRT. Given a decryption1 oracle that takes chosen cipher text and responds the plain text and the time it ...

rsa timing-attack montgomery-multiplication

asked Mar 20 '14 at 18:37

user1547360

112 bronze badges

0

votes

0answers

64 views

Can someone explain the timing attack on RSA with Montgomery multiplication?

I have read several articles on the temporal attack against Montgomery multiplication to speedup RSA computations. However, I do not quite get the principle. I understood that there is a additional ...

rsa cryptanalysis attack timing-attack montgomery-multiplication

asked May 10 '20 at 3:34

Black cryptographer

112 bronze badges

0

votes

0answers

37 views

exfiltrating salts with timing attacks?

It seems to me that it's theoretically possible to exfiltrate a salt against a hashing algorithm that isn't constant time using specially crafted inputs. Are there any examples of this being done in ...

password-hashing timing-attack

asked Nov 11 '19 at 6:51

Daniel Hill

1404 bronze badges

0

votes

0answers

40 views

One time code appended to password

Apologies in advance, I'm a beginner and my knowledge of terminology in this field probably reflects that. I have a question about one-time codes being used with passwords. What inspires me to ask ...

timing-attack one-time-password

asked Mar 29 '19 at 18:31

MadisonCooper

101

0

votes

0answers

38 views

Is it okay to bail out early when length mismatch is detected?

Is it okay to bail out early when length mismatch is detected? Specifically, when verifying authenticated encryption, is it okay to bail out early if the wrong amount of ciphertext or the wrong ...

authentication authenticated-encryption timing-attack

asked Feb 23 '16 at 2:30

Demi

4,5111 gold badge14 silver badges34 bronze badges

0

votes

0answers

185 views

Importance of timing attack resistance with AES

I've implemented AES in my library with several variations: a straight C version, a version using x86 SSSE3, and a version using x86 AES-NI. The SSSE3 and AES-NI implementations are constant-time, ...

aes timing-attack

asked Feb 18 '16 at 5:22

Myria

1,7356 silver badges17 bronze badges

0

votes

0answers

55 views

Is a timing side channel attack effective when the leaked information is related to the result of a hash?

I'm writing a function to act as a cryptographic hash of a number within a range that returns another number of the same range. The catch is that the result needs to have certain properties. I run a ...

hash format-preserving timing-attack

asked Oct 5 '15 at 6:10

Daffy

2,25713 silver badges26 bronze badges

Stack Exchange Network

current community

your communities

more stack exchange communities

Questions tagged [timing-attack]

Attacking Scrypt Under Access Pattern Leakage

Timing Attack on OpenSSL by Brumley

How to ensure that a cryptographic implementation is reasonably sound/robust?

RSA: Blinding versus fixed-time computation

Is timing attack practical in a web developer's perspective?

RSA Key Blinding

Question about RSA timing attack and a Chosen Ciphertext Attack on RSA

Side channel attack: Why building an eviction set is possible?

Kocher Timing Attack - Error Correction

Cache Attacks on Cloud Infrastructures

RSA timing attack

Can someone explain the timing attack on RSA with Montgomery multiplication?

exfiltrating salts with timing attacks?

One time code appended to password

Is it okay to bail out early when length mismatch is detected?

Importance of timing attack resistance with AES

Is a timing side channel attack effective when the leaked information is related to the result of a hash?

Hot Network Questions

Questions tagged [timing-attack]

Related Tags