10 ms·
The attack doesn't give them access to all information from another VPS on the same host. The are using timing analysis to detect what code the other VPS is ex
by neopallium 10y ago
The attack doesn't give them access to all information from another VPS on the same host. The are using timing analysis to detect what code the other VPS is executing and finding the private key from the noise caused by the victims VPS.
Crypto libraries can be fixed to prevent side-channel attacks like this. The article says that libgcrypt has already been patched.