Re:CacheBleed: A Timing Attack on OpenSSL Constant Time RSA
by yborg on Tuesday March 01, 2016 @10:34AM
(#11203237)
Is such an attack really possible on a real system with real workloads running something in addition to an OpenSSL implementation processing keys and the attack code?
[ Parent
| on HN ]
Re:CacheBleed: A Timing Attack on OpenSSL Constant Time RSA
by exDM69 on Tuesday March 01, 2016 @12:36PM
(#11204401)
Yes, it most likely is. Adding noise in the form of other workloads only increases the time it takes. This attack takes some minutes of wall clock time, so it remains a viable attack even if there is noise, it should still be a manageable amount of time.