News for hackers. Stuff that matters.
Re:CacheBleed: A Timing Attack on OpenSSL Constant Time RSA by apawloski on Tuesday March 01, 2016 @10:26AM (#11203163)
These side-channel attacks are so cool. In 2012, Zhang et al demonstrated a similar cache-based side channel attack across the Xen hypervisor to extract private keys [1]. That is, one virtual machine could extract the keys of a separate virtual machine living on the same hardware.

As cool as these are, most papers indicate the difficulty of pulling these attacks off -- especially given the easier vectors out there.

[1] https://www.cs.unc.edu/~reiter/papers/2012/CCS.pdf

There are no comments on this comment yet.