oss-sec mailing list archives

Re: Data operand dependent timing on Intel and Arm CPUs

From: Demi Marie Obenour <demi () invisiblethingslab com>
Date: Mon, 30 Jan 2023 14:13:10 -0500

On Mon, Jan 30, 2023 at 10:43:16AM -0600, Mark Hack wrote:

This is a concern, but if you look into the crypto implementations,
data blinding is applied to mitigate both instruction and power side
channel attacks


Can you provide examples?  I have never seen blinding used for symmetric
cryptography outside of embedded systems.
-- 
Sincerely,
Demi Marie Obenour (she/her/hers)
Invisible Things Lab

Attachment: signature.asc
Description:

Current thread:

Data operand dependent timing on Intel and Arm CPUs Eric Biggers (Jan 25)
- Re: Data operand dependent timing on Intel and Arm CPUs Solar Designer (Jan 25)
  - Re: Data operand dependent timing on Intel and Arm CPUs Eric Biggers (Jan 27)
    - Re: Data operand dependent timing on Intel and Arm CPUs Mark Hack (Jan 30)
    - Re: Data operand dependent timing on Intel and Arm CPUs Demi Marie Obenour (Jan 30)
    - Re: Data operand dependent timing on Intel and Arm CPUs Mark Hack (Jan 30)
- Re: Data operand dependent timing on Intel and Arm CPUs John Runyon (Jan 30)