exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from Nicola Tuveri

Remote Timing Attacks Are Still Practical

Posted May 25, 2011

Authored by Nicola Tuveri, Billy Bob Brumley

This whitepaper describes a timing attack vulnerability in OpenSSL's ladder implementation for curves over binary fields. They use this vulnerability to steal the private key of a TLS server where the server authenticates with ECDSA signatures. Using the timing of the exchanged messages, the messages themselves, and the signatures, they mount a lattice attack that recovers the private key. Finally, they describe and implement an effective countermeasure.

tags | exploit, paper, cryptography, vulnerability

SHA-256 | a639445448cf4d50a71d847a0554fa7ab0640e8c63cc63998bd97f803f5b3b40

Download | Favorite | View