Minerva: Practically exploitable side-channel leakage in ECDSA implementations

Re:Minerva: Practically exploitable side-channel leakage in ... by exabrial on Thursday October 03, 2019 @02:48PM (#21150580)

Finally, read this: "If You’re Typing the Letters A-E-S Into Your Code You’re Doing It Wrong"

https://www.nccgroup.trust/us/about-us/newsroom-and-events/b...

[ Parent | on HN ]

Re:Minerva: Practically exploitable side-channel leakage in ... by pilsetnieks on Thursday October 03, 2019 @03:32PM (#21151085)

Now that's a deep cut even for a Dan Harmon fan.

[ Parent | on HN ]

Re:Minerva: Practically exploitable side-channel leakage in ... by aidenn0 on Thursday October 03, 2019 @06:26PM (#21152926)

For anyone else wondering what the Dan Harmon reference was:

https://en.wikipedia.org/wiki/Heat_Vision_and_Jack

[ Parent | on HN ]

Re:Minerva: Practically exploitable side-channel leakage in ... by bob1029 on Thursday October 03, 2019 @05:36PM (#21152508)

What's wrong with using AES in CBC mode?

[ Parent | on HN ]

Re:Minerva: Practically exploitable side-channel leakage in ... by exabrial on Friday October 04, 2019 @10:51AM (#21158269)

See my original comment about attack surface. Given the correct set of circumstances, transmitting the IV in the clear with CBC could possibly open you up to chosen ciphertext/plaintext attacks. And you better be doing encrypt-then-prepend-IV-then-MAC with CBC. Just a lot of gotchas that may or may not be relevant, depending on your environment.

[ Parent | on HN ]