2

The, common, assumption used in that paper is that an attacker can DPA a fixed secret when it's mixed with known (to the attacker) and varying data. The proposed solution was to add random after the key to fill the SHA-512 block size. By doing this: the first SHA-512 computation processes the fixed secret and varying but unknown data, so the attacker can'...


Only top voted, non community-wiki answers of a minimum length are eligible