3 ms·

So, how much closer are we to an actual exploit with this attack? > The main advantage of the timeless timing attacks is that these are much more accurate, so

• robocat 6y ago
  They used it to exploit 2 known timing attacks that were not previously fixed because they were thought infeasible to attack: From article: In case of the HackerOne bug, it was already reported at least three times (bug IDs #350432, #348168, and #4701), but was not fixed, as the attack was considered infeasible to exploit. I then created a basic PoC with the timeless timing attacks. From article: Mathy Vanhoef, one of the co-authors of the paper, had previously discovered a potential timing leak in WPA3’s handshake protocol. But the timing was either too small to exploit on high-performance devices or could not be exploited against servers. “With the new timeless timing attacks, we show that it is in fact possible to exploit the WiFi authentication handshake (EAP-pwd) against servers, even if they use performant hardware,” Van Goethem says.