3 ms·
Exactly. The paper is frustratingly unclear on what the exploit scenario is. "...we wrote a custom SSH client that launches our spy program, the spy program co
by joeyrideout 10y ago
Exactly. The paper is frustratingly unclear on what the exploit scenario is.
"...we wrote a custom SSH client that
launches our spy program, the spy program collects the timing
signals during the handshake..."
I have a bad feeling that this means an attacker with a custom client can extract private key information over the network by repeatedly establishing connections with a vulnerable server.
- tptacek 10y agoI believe they're talking about a test harness they built, to synchronize collection of cache traces with the execution of the handshake. FLUSH+RELOAD requires a co-resident attacker (they need to be on the same hardware, though not necessarily the same VM).