3 ms·
Some of the vulnerabilities are harder to test as they are side channels specific to the hardware the code is running on. Sure you can check that basic timing
by extrapickles 9y ago
Some of the vulnerabilities are harder to test as they are side channels specific to the hardware the code is running on.
Sure you can check that basic timing side channels don’t exist, but the more esoteric ones would require a bunch of hardware to make sure they aren’t leaking data via power use and other channels.
- jf 9y agoCan you go into more details on situations that would be hard to test? This has all only been a thought experiment for me so far, and in my thought experiment I handwave these sort of issues away by thinking "that's what emulation/simulation is for" – but I hadn't considered leading data via power use, so clearly I need to learn more there.