Remote timing attacks are practical

Proceedings of the 12th USENIX Security Symposium

Volumn , Issue , 2003, Pages 1-13

  Brumley, David ^a   Boneh, Dan ^a  

^a STANFORD UNIVERSITY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

SIDE CHANNEL ATTACK; SMART CARDS; TIMING CIRCUITS;

COMPUTING DEVICES; LOCAL NETWORKS; NETWORK SERVER; OPEN SSL; PRIVATE KEY; SOFTWARE SYSTEMS; WEB SERVERS;

NETWORK SECURITY;

EID: 85032541897     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (23)

1. Matt Blaze. Quantize wrapper library. http://islab.oregonstate.edu/documents/People/blaze.
2. Dan Boneh, Richard A. DeMillo, and Richard J. Lipton. On the importance of checking cryptographic protocols for faults. Lecture Notes in Computer Science, 1233:37-51, 1997.
3. D. Coppersmith. Small solutions to polynomial equations, and low exponent RSA vulnerabilities. Journal of Cryptology, 10:233-260, 1997.
4. Jean-Francois Dhem, Francois Koeune, PhilippeAlexandre Leroux, Patrick Mestre, Jean-Jacques Quisquater, and Jean-Louis Willems. A practical implementation of the timing attack. In CARDIS, pages 167-182, 1998.
5. Peter Gutmann. Cryptlib. http://www.cs.auckland.ac.nz/~pgut001/cryptlib/.
6. Intel. Vtune performance analyzer for linux v1.1. http://www.intel.com/software/products/vtune.
7. Intel. Using the RDTSC instruction for performance monitoring. Technical report, 1997.
8. Intel. Ia-32 intel architecture optimization reference manual. Technical Report 248966-008, 2003.
9. P. Kocher, J. Jaffe, and B. Jun. Differential power analysis: Leaking secrets. In Crypto 99, pages 388-397, 1999.
10. Paul Kocher. Timing attacks on implementations of diffie-hellman, RSA, DSS, and other systems. Advances in Cryptology, pages 104-113, 1996.
11. Alfred Menezes, Paul Oorschot, and Scott Vanstone. Handbook of Applied Cryptography. CRC Press, October 1996.
12. Mod SSL Project. mod ssl. http://www.modssl.org.
13. Peter Montgomery. Modular multiplication without trial division. Mathematics of Computation, 44(170):519-521, 1985.
14. GNU Project. libgcrypt. http://www.gnu.org/directory/security/libgcrypt.html.
15. OpenSSL Project. Openssl. http://www.openssl.org.
16. Rao, Josyula, Rohatgi, and Pankaj. Empowering side-channel attacks. Technical Report 2001/037, 2001.
17. RSA Press Release. http://www.otn.net/onthenet/rsaqa.htm, 1995.
18. Werner Schindler. A timing attack against RSA with the chinese remainder theorem. In CHES 2000, pages 109-124, 2000.
19. Werner Schindler. A combined timing and power attack. Lecture Notes in Computer Science, 2274:263-279, 2002.
20. Werner Schindler. Optimized timing attacks against public key cryptosystems. Statistics and Decisions, 20:191-210, 2002.
21. Werner Schindler, Franois Koeune, and JeanJacques Quisquater. Improving divide and conquer attacks against cryptosystems by better error detection/correction strategies. Lecture Notes in Computer Science, 2260:245-267, 2001.
22. Werner Schindler, Franois Koeune, and JeanJacques Quisquater. Unleashing the full power of timing attack. Technical Report CG-2001/3, 2001.
23. Stunnel Project. stunnel. http://www.stunnel.org.