full-disclosure - Re: Flush+Reload: a High Resolution, Low Noise, L3 Cache Side-Channel Attack

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20130726233405.GA32568@debjann.fritz.box>
Date: Sat, 27 Jul 2013 01:34:05 +0200
From: Jann Horn <jann@...jh.net>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Flush+Reload: a High Resolution, Low Noise,
 L3 Cache Side-Channel Attack

On Fri, Jul 26, 2013 at 03:47:41PM -0400, Jeffrey Walton wrote:
> Dr. Bernstein puts a lot of effort into defending against timing
> attacks and other side channels in his NaCl library. I'm not aware of
> any other libraries which go to the same depths. On the downside, NaCl
> is not easy to work with (for example, change compilers or
> cross-compile for iOS or Android); its not really portable (lots of C
> language violations); nor is it easy to get analysis tools on it.

Also, there's no support for AES or RSA as far as I can see. Does anyone know a
library for RSA and/or AES with similar security against side-channel attacks?

Download attachment "signature.asc" of type "application/pgp-signature" (837 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/