Software, Security, Cryptography, and Furries

Tag: timing attacks

Timing Attack on SQL Queries Through Lobste.rs Password Reset

Post author By Soatok
Post date August 20, 2021
3 Comments on Timing Attack on SQL Queries Through Lobste.rs Password Reset

Just to assuage any panic, let me state this up front. If you’re reading this blog post wondering if your Lobste.rs account is at risk, good news: I didn’t publish it until after the vulnerability was mitigated, so you’re safe. You don’t need to change your passwords or anything. This write-up is purely for education […]

Tags authentication, computer security, cryptography, Cybersecurity, databases, Lobste.rs, password reset, Ruby on Rails, security, side-channels, timing attacks, Vulnerability

Cryptography Software Security

Dead Ends in Cryptanalysis #2: Timing Side-Channels

Post author By Soatok
Post date June 7, 2021
1 Comment on Dead Ends in Cryptanalysis #2: Timing Side-Channels

Previously on Dead Ends in Cryptanalysis, we talked about length-extension attacks and precisely why modern hash functions like SHA-3 and BLAKE2 aren’t susceptible. The art and science of side-channel cryptanalysis is one of the subjects I’m deeply fascinated by, and it’s something you’ll hear me yap about a lot on this blog in the future. […]

Tags cryptanalysis, crypto, cryptography, dead ends in cryptanalysis, ECDSA, side-channels, timing attacks