Remote timing attacks are practical

Computer Networks

Volumn 48, Issue 5, 2005, Pages 701-716

  Brumley, David ^a   Boneh, Dan ^b  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b Stanford University   (United States)

Author keywords

Chinese remainder; Montgomery reductions; RSA; SSL; Timing attack

Indexed keywords

COMPUTER SOFTWARE; MOBILE COMPUTING; SECURITY SYSTEMS; SERVERS; TIMING DEVICES; WORLD WIDE WEB;

CHINESE REMAINDER; MONTOGOMERY REDUCTIONS; RSA; SSL; TIMING ATTACKS;

COMPUTER NETWORKS;

EID: 18844454571     PISSN: 13891286     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.comnet.2005.01.010     Document Type: Article

References (24)

1. M. Blaze, Simple UNIX time quantization package, Available from
2. D. Boneh, R.A. DeMillo, and R.J. Lipton On the importance of checking cryptographic protocols for faults Lecture Notes in Computer Science vol. 1233 1997 Springer Berlin 37 51
3. D. Coppersmith Small solutions to polynomial equations, and low exponent RSA vulnerabilities Journal of Cryptology 10 1997 233 260
4. S.A. Crosby, D.S. Wallach, Opportunities and limits of remote timing attacks, Manuscript
5. J.-F. Dhem, F. Koeune, P.-A. Leroux, P. Mestre, J.-J. Quisquater, J.-L. Willems, A practical implementation of the timing attack, in: CARDIS, 1998, pp. 167-182
6. P. Gutmann, Cryptlib, Available from < http://www.cs.auckland.ac.nz/ pgut001/cryptlib/>
7. Intel, Vtune performance analyzer for linux v1.1, Available from
8. Intel, Using the RDTSC instruction for performance monitoring, Technical report, Intel, 1997
9. Intel, IA-32 intel architecture optimization reference manual, Technical report 248966-008, Intel, 2003
10. P. Kocher, J. Jaffe, B. Jun, Differential power analysis: Leaking secrets, in: Crypto 99, 1999, pp. 388-397
11. P. Kocher Timing attacks on implementations of diffie-hellman, RSA, DSS, and other systems Advances in Cryptology 1996 104 113
12. A. Menezes, P. Oorschot, and S. Vanstone Handbook of applied cryptography 1996 CRC Press Boca Raton, FL
13. mod_SSL Project. mod_ssl, Available from < http://www.modssl.org>
14. P. Montgomery Modular multiplication without trial division Mathematics of Computation 44 170 1985 519 521
15. GNU Project. libgcrypt, Available from < http://www.gnu.org/directory/ security/libgcrypt.html>
16. OpenSSL Project, Openssl, Available from < http://www.openssl.org>
17. J.R. Rao, P. Rohatgi, EMpowering side-channel attacks, Technical report 2001/037, IBM T.J. Watson Research Center, 2001
18. RSA Press Release, Available from < http://www.otn.net/onthenet/rsaqa. htm>, 1995
19. W. Schindler, A timing attack against RSA with the chinese remainder theorem, in: CHES 2000, 2000, pp. 109-124
20. W. Schindler A combined timing and power attack Lecture Notes in Computer Science vol. 2274 2002 Springer Berlin 263 279
21. W. Schindler Optimized timing attacks against public key cryptosystems Statistics and Decisions 20 2002 191 210
22. W. Schindler, F. Koeune, and J. Quisquater Improving divide and conquer attacks against cryptosystems by better error detection/correction strategies Lecture Notes in Computer Science vol. 2260 2001 Springer Berlin 245 267
23. W. Schindler, F. Koeune, J.-J. Quisquater, Unleashing the full power of timing attack, Technical report CG-2001/3, UCL Microelectronics Laboratory, 2001
24. Stunnel project, Stunnel, Available from < http://www.stunnel.org>