「OpenSSL 0.9.8 リリース」記事へのコメント

covert channel 対策

[earth2001y (22213)]

BSDCan2005で Colin Percival が報告した covert channel に対する対策は何かやったのかしら？

http://www.daemonology.net/hyperthreading-considered-harmful/

Re:covert channel 対策

[deleted user (19654)]

なんとなく

Make a new fixed-window mod_exp implementation the default for
RSA, DSA, and DH private-key operations so that the sequence of
squares and multiplies and the memory access pattern are
independent of the particular secret key. This will mitigate
cache-timing and potential related attacks.

これじゃないかなあ、と思います。