Eliptic Curve Cryptography in OpenSSL might not be so Cryptographic

[Zac Slade]

It seems there are timing based attacks against the Elliptic Curve
digital signatures in OpenSSL that are quite severe. When using the
ECDSA keys for Elliptic Curve Cryptography in OpenSSL an attacker can
guess the server's private key with great accuracy.

The H has the details:
http://www.h-online.com/security/news/item/Successful-timing-attacks-on-elliptic-curve-cryptography-1247772.html

--
Zac Slade
krak...@gmail.com

[Boyd Stephen Smith Jr.]

On 2011-05-31 14:12:23 Zac Slade wrote:
>It seems there are timing based attacks against the Elliptic Curve
>digital signatures in OpenSSL that are quite severe. When using the
>ECDSA keys for Elliptic Curve Cryptography in OpenSSL an attacker can
>guess the server's private key with great accuracy.

http://en.wikipedia.org/wiki/Side-channel_attack
--
Boyd Stephen Smith Jr. ,= ,-_-. =.
b...@iguanasuicide.net ((_/)o o(\_))
ICQ: 514984 YM/AIM: DaTwinkDaddy `-'(. .)`-'
http://iguanasuicide.net/ \_/

[Joey Kavanaugh]

Great link Stephen !