Re:Hertzbleed Attack
by FabHK on Tuesday June 14, 2022 @03:21PM
(#31744660)
> Hertzbleed is a real, and practical, threat to the security of cryptographic software. We have demonstrated how a clever attacker can use a novel chosen-ciphertext attack against SIKE to perform full key extraction via remote timing, despite SIKE being implemented as “constant time”.
[ Parent
| on HN ]
Re:Hertzbleed Attack
by jessermeyer on Tuesday June 14, 2022 @04:37PM
(#31745727)
Please. If you actually read the paper you'll come to learn that "practical" here means "we've conclusively shown under strict laboratory conditions that this works".