Other Directory Sites: SeekWonder | Directory Owners Forum
The following archive was created by hippie-mail 7.98617-22 on Fri Aug 21 1998 - 17:19:04 ADT
burt rosenberg (burt@passaic.cs.miami.edu)
Thu, 25 Jun 1998 11:52:38 -0400 (EDT)
Umm, there's a disconnect here:
> From Alex Alten
> Paul Kocher and team have found a way to break
> smart cards cheaply.
> ...
>
> From Mike Rosing
> So fix the multiply function to always take the same time
> no matter what it's inputs are. Fix the exponential function
> to do a "dummy multiply" which could be a whole bunch of
> nops.
What I'm suggesting is a way to defeat all timing attacks,
whether it be timing, power analysis, electromagnetic radiation ...
whatever ... by leaking provably NO information per calculation,
by randomizing over the set of possible algorithms, rather than
ad hoc patches to disguise particular features of a single algorithm.
As an example, a smart card using the suggested randomized approach
to exponentiation for immunity to timing attacks is ALREADY
also immune to DPA.
No one else working on these?
-burt
The following archive was created by hippie-mail 7.98617-22 on Fri Aug 21 1998 - 17:19:04 ADT