News for hackers. Stuff that matters.

A comment on Fast base64 encoding and decoding. Parent comment

Re:Fast base64 encoding and decoding by CiPHPerCoder on Wednesday January 17, 2018 @06:42PM (#16173169)
Side-channel attacks against base64 encoding have yet to be proven, but constant-time implementations are available just in case.

My contribution is here: https://github.com/paragonie/constant_time_encoding

[ Parent | on HN ]
Re:Fast base64 encoding and decoding by nickpsecurity on Wednesday January 17, 2018 @09:15PM (#16174091)
I'll add a high-assurance implementation from Galois to that which is probably not constant time. Their blog and Github has quite a few useful tools.

https://galois.com/blog/2013/09/high-assurance-base64/

Also, anyone wanting constant time implementation might just run a verified implementation through something like FaCT or Jasmin:

https://cseweb.ucsd.edu/~dstefan/pubs/cauligi:2017:fact.pdf

https://acmccs.github.io/papers/p1807-almeidaA.pdf

[ Parent | on HN ]