3 ms·

Not really, if this attack is doable over the internet, which will have latencies randomly[1] distributed (in a normal curve), rand does not actually do anythin

Not really, if this attack is doable over the internet, which will have latencies randomly[1] distributed (in a normal curve), rand does not actually do anything, well maybe require a few more sample points to get that noise out.

naz 17y ago
That makes sense, maybe sleep(rand(1.0 - time_spent))
- naz 17y ago
  Or just sleep(1.0 - time_spent)
  - JacobK 17y ago
    Or just don't short circuit ever, and do the entire computation every time.