3 ms·
That's an interesting criticism of OpenSSL. Do you know of a general purpose cryptographic library that has done a better job than OpenSSL at hardening against
by brl 18y ago
That's an interesting criticism of OpenSSL. Do you know of a general purpose cryptographic library that has done a better job than OpenSSL at hardening against side-channel attacks?
By default, OpenSSL has: RSA blinding, constant time montgomery multiplication, careful review and correction of the conditional branches which were attacked in that amazing series of branch prediction papers.
Doesn't seem to me that OpenSSL developers are careless and indifferent about side-channel attacks.
- cperciva 18y agoDo you know of a general purpose cryptographic library that has done a better job than OpenSSL at hardening against side-channel attacks? No, I don't know of any better cryptographic library. (This is why I said a few days ago that writing a better cryptographic library was something I'd like to do if I was rich.) Doesn't seem to me that OpenSSL developers are careless and indifferent about side-channel attacks. They're playing whack-a-mole. There are over a thousand conditional branches in the large integer arithmetic code alone. The fact that nobody has pointed out how to exploit them yet doesn't mean that they're not exploitable.