[prev in list] [next in list] [prev in thread] [next in thread] 

List:       full-disclosure
Subject:    Re: [Full-disclosure] Flush+Reload: a High Resolution, Low Noise, L3 Cache Side-Channel Attack
From:       Jann Horn <jann () thejh ! net>
Date:       2013-07-26 23:34:05
Message-ID: 20130726233405.GA32568 () debjann ! fritz ! box
[Download RAW message or body]

[Attachment #2 (multipart/signed)]


On Fri, Jul 26, 2013 at 03:47:41PM -0400, Jeffrey Walton wrote:
> Dr. Bernstein puts a lot of effort into defending against timing
> attacks and other side channels in his NaCl library. I'm not aware of
> any other libraries which go to the same depths. On the downside, NaCl
> is not easy to work with (for example, change compilers or
> cross-compile for iOS or Android); its not really portable (lots of C
> language violations); nor is it easy to get analysis tools on it.

Also, there's no support for AES or RSA as far as I can see. Does anyone know a
library for RSA and/or AES with similar security against side-channel attacks?

["signature.asc" (application/pgp-signature)]

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

[prev in list] [next in list] [prev in thread] [next in thread]