3 ms·
I wonder if there isn't just a simple way to make timing attacks impossible. Find out the longest possible runtime, add some overhead, and then do the encryptio
by captainmuon 5y ago
I wonder if there isn't just a simple way to make timing attacks impossible. Find out the longest possible runtime, add some overhead, and then do the encryption in a different thread or process. Then call back after a constant time. It seems like this should be a primitive that is used a lot.
- mannykannot 5y agoOff the top of my head, I wonder if an attacker could probe whether the encryption thread had completed the task, and was merely waiting, by submitting other tasks to the system and timing them. Maybe some sort of busywork to run down the clock would help.