6 ms·
You'd think that, but it is possible. Google "timing attacks over the internet".
by jcoglan 14y ago
You'd think that, but it is possible. Google "timing attacks over the internet".
- yuliyp 14y agoI don't see string comparisons on tiny strings as feasible from either the Crosby/Wallach (suggests you need hundreds of nanoseconds of difference in execution time to be detectable) paper nor the Brumley/Boneh paper (which talks about a specific vulnerability in modular exponentiation which ends up revealing key details, not string comparison).