Re:The Cryptographic Doom Principle (2011)
by api on Sunday August 25, 2024 @01:28PM
(#41349269)
This applies all the way down to machine code. It can be dangerous to branch on secret data or on unauthenticated data, at least if your threat model includes possible timing attacks.
[ Parent
| on HN ]
Re:The Cryptographic Doom Principle (2011)
by woodruffw on Sunday August 25, 2024 @03:32PM
(#41350509)
The corollary to this is that digital signature implantations tend not to be timing hardened, with the assumption that signed-over inputs are not secret. If your scheme assumes that signed-over inputs also need to remain secret, you’re likely misusing your digital signature primitive!