News for hackers. Stuff that matters.

A comment on Technical feasibility of decrypting https by replacing the computer's PRNG. Parent comment

Re:Technical feasibility of decrypting https by replacing th... by tptacek on Sunday July 14, 2013 @12:00PM (#6041196)
This is a baffling comment given that researchers have alrady found multiple side channels in Intel CPUs that have created viable key leaking attacks. It's possible to have this problem merely by accident.
[ Parent | on HN ]
Re:Technical feasibility of decrypting https by replacing th... by nightcracker on Sunday July 14, 2013 @12:54PM (#6041352)
Such side channels can be avoided in a proper implementation by avoid things like table lookups and conditionals based on secret data.
[ Parent | on HN ]
Re:Technical feasibility of decrypting https by replacing th... by hannibal5 on Sunday July 14, 2013 @12:15PM (#6041253)
Comparing potential side channel attack to the possibility to weakening practically all ssl keys that use Intel chips makes massive error in scale.

Side channel attacks would work against specific targeted people. Weakening random numbers would work at the mass surveillance level.

[ Parent | on HN ]