3 ms·
Is this an attack that can be mitigated by a firmware update?
by hart_russell 8y ago
Is this an attack that can be mitigated by a firmware update?
- pietjepuk88 8y ago> Lascar stands for Ledger’s Advanced Side Channel Analysis Repository. Its goal is to gather and provide common tools and techniques used in the field of Side Channel Analysis, within an open, customizable library. It's not an attack. It's just something that the Ledger security team has been working on.
- anfractuosity 8y agohttps://en.wikipedia.org/wiki/Side-channel_attack#Countermeasures https://en.wikipedia.org/wiki/Side-channel_attack#Countermea... might be of interest especially this part: "In the case of timing attacks against targets whose computation times are quantized into discrete clock cycle counts, an effective countermeasure against is to design the software to be isochronous, that is to run in an exactly constant amount of time, independently of secret values. This makes timing attacks impossible.[14] Such countermeasures can be difficult to implement in practice, since even individual instructions can have variable timing on some CPUs."