News for hackers. Stuff that matters.
Re:CacheBleed: A Timing Attack on OpenSSL Constant Time RSA by EwanG on Tuesday March 01, 2016 @08:45AM (#11202492)
Overview direct from the article - "CacheBleed is a side-channel attack that exploits information leaks through cache-bank conflicts in Intel processors. By detecting cache-bank conflicts via minute timing variations, we are able to recover information about victim processes running on the same machine. Our attack is able to recover both 2048-bit and 4096-bit RSA secret keys from OpenSSL 1.0.2f running on Intel Sandy Bridge processors after observing only 16,000 secret-key operations (decryption, signatures). This is despite the fact that OpenSSL's RSA implementation was carefully designed to be constant time in order to protect against cache-based (and other) side-channel attacks.

While the possibility of an attack based on cache-bank conflicts has long been speculated, this is the first practical demonstration of such an attack."

Re:CacheBleed: A Timing Attack on OpenSSL Constant Time RSA by Gratsby on Tuesday March 01, 2016 @11:18PM (#11208066)
> 16,000 secret-key operations (decryption, signatures).

I have to assume that decryption or signatures themselves are more than one operation. I don't think most people have encrypted 16,000 documents in their life times.

Am I missing something? I'm probably missing something.