4 ms·
> timing attacks you say. erm, not remotely connected. Fine, I'll trust your overwhelming evidence instead of the many timing attacks described against RSA imp
by kaoD 10y ago
> timing attacks you say. erm, not remotely connected.
Fine, I'll trust your overwhelming evidence instead of the many timing attacks described against RSA implementations.
- mSparks 10y agoAll those attacks are "theoretical". As opposed to actually having been usefull in the wild - FUD (heartbleed otoh.....). padding -> irrelevent to an RSA public key, everyone has to know the exact modulus and product, even the bad guys (although I recommend keeping public keys relatively secret) timing -> irrelevent to an RSA public key, there is nothing you can get from how long it takes to decrypt or encrypt even 1024 bits of data (which is more than most impliementations even send), sometimes the exact same data will take 1ms, sometimes 100ms, it depends what else the machine is doing at the time.