3 ms·
So I take it when they say "constant time" for things like SIKE, they aren't sleeping for X milliseconds, but are just using some operation that is thought to b
by sam0x17 4y ago
So I take it when they say "constant time" for things like SIKE, they aren't sleeping for X milliseconds, but are just using some operation that is thought to be effectively constant time, hence this vulnerability? What is the countermeasure for this? Are crypto systems that always wait a full second using system timers, for example, immune to this sort of thing, or is it still detectable even in those circumstances?
- syrrim 4y ago>Are crypto systems that always wait a full second using system timers, for example, immune to this sort of thing No. Such a crypto system would still leak information via the amount of power it consumes, which might change the frequency of the cpu, which could be measured by an attacker through the other processes of the computer.
- sam0x17 4y agoah ok I was assuming over public internet timing attacks. This requires local hardware access or a local ssh account. Got it