[Haskell-cafe] Tor project
friedrichwiemer at gmail.com
Fri Aug 1 08:02:23 UTC 2014
> Well, how about something like
> inConstantTime :: timeBudget -> (functionToPerform :: CryptoResult)
> -> IO (Maybe CryptoResult)
> I'm no expert, but aren't timing attacks also possible with something
> like that. If your `functionToPerform' touches the cache in funny ways,
> the program after resuming from the timeout might have different timings
> as there could be cache misses in one scenario, but not the other.
One would need to add countermeasures for this sidechannel, too, I guess.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 538 bytes
Desc: OpenPGP digital signature
More information about the Haskell-Cafe