SSH gets protection against side-channel attacks

Re:SSH gets protection against side-channel attacks by spacephysics on Friday June 21, 2019 @08:29AM (#20241884)

If I were writing a cryptographic algorithm in C++, how would I ensure the CPU cache was used for private keys? Would it have to be written in a lower level language, or does there exist a library for C/C++?

[ Parent | on HN ]

Re:SSH gets protection against side-channel attacks by Zarathustra_ on Friday June 21, 2019 @08:33AM (#20241909)

Previous thread with lots of relevant information: https://news.ycombinator.com/item?id=8542405

Short answer is yes usually, and if not, you can always do inline asm. Of course, you're really, really, really not supposed to write your own crypto.

[ Parent | on HN ]

Re:SSH gets protection against side-channel attacks by vinay_ys on Friday June 21, 2019 @12:12PM (#20243818)

If everyone follows this advice, who will write the crypto code? If anything we need lot more people who are formally trained to write proper crypto code and find bugs in such code etc.

[ Parent | on HN ]

Re:SSH gets protection against side-channel attacks by Zarathustra_ on Friday June 21, 2019 @01:47PM (#20244759)

Let me qualify that. You're right, we do need a lot more people. But the answer is, don't write your own, write as part of a team. Ideally, a public and peer-reviewed project. The short answer is many people will work on it together, but don't write your own.

[ Parent | on HN ]