News for hackers. Stuff that matters.
Re:Hertzbleed Attack by FabHK on Tuesday June 14, 2022 @03:21PM (#31744660)
> Hertzbleed is a real, and practical, threat to the security of cryptographic software. We have demonstrated how a clever attacker can use a novel chosen-ciphertext attack against SIKE to perform full key extraction via remote timing, despite SIKE being implemented as “constant time”.
Re:Hertzbleed Attack by jessermeyer on Tuesday June 14, 2022 @04:37PM (#31745727)
Please. If you actually read the paper you'll come to learn that "practical" here means "we've conclusively shown under strict laboratory conditions that this works".