1Jun/092
Timing attack in Google Keyczar library
Javi mailed it to me last week, and now I came across it again while reading my feeds. Nate Lawson found and described on his blog a timing (side channel) attack in Google Keyzcar library.
Take a look at his post, it's a typical problem found in string/array comparisons, and you should take it into account when programming embedded devices and any other security-related code in general.
PD: I said very soon, didn't I? 😛
June 2nd, 2009 - 13:21
Link al post en concreto:
http://rdist.root.org/2009/05/28/timing-attack-in-google-keyczar-library/
June 2nd, 2009 - 14:58
Je, estoy melon… se me olvido anyadir el link. Ahora edito la entrada xD
Gracias Javi