Limited Entropy Dot Com Not so random thoughts on security featured by Eloi Sanfèlix

1Jun/092

Timing attack in Google Keyczar library

Javi mailed it to me last week, and now I came across it again while reading my feeds. Nate Lawson found and described on his blog a timing (side channel) attack in Google Keyzcar library.

Take a look at his post, it's a typical problem found in string/array comparisons, and you should take it into account when programming embedded devices and any other security-related code in general.

PD: I said very soon, didn't I? :P

PDF    Send article as PDF   

Posted by Eloi Sanfèlix

Comments (2) Trackbacks (0)
  1. Je, estoy melon… se me olvido anyadir el link. Ahora edito la entrada xD

    Gracias Javi


Leave a comment

(required)

No trackbacks yet.