Tag: timing attacks

Timing Attack on SQL Queries Through Lobste.rs Password Reset

Post author By Soatok
Post date August 20, 2021
3 Comments on Timing Attack on SQL Queries Through Lobste.rs Password Reset

Just to assuage any panic, let me state this up front. If you’re reading this blog post wondering if your Lobste.rs account is at risk, good news: I didn’t publish it until after the vulnerability was mitigated, so you’re safe. You don’t need to change your passwords or anything. This write-up is purely for education […]

Tags authentication, computer security, cryptography, Cybersecurity, databases, Lobste.rs, password reset, Ruby on Rails, security, side-channels, timing attacks

Cryptography Software Security

Dead Ends in Cryptanalysis #2: Timing Side-Channels

Post author By Soatok
Post date June 7, 2021
1 Comment on Dead Ends in Cryptanalysis #2: Timing Side-Channels

Previously on Dead Ends in Cryptanalysis, we talked about length-extension attacks and precisely why modern hash functions like SHA-3 and BLAKE2 aren’t susceptible. The art and science of side-channel cryptanalysis is one of the subjects I’m deeply fascinated by, and it’s something you’ll hear me yap about a lot on this blog in the future. […]

Tags cryptanalysis, crypto, cryptography, dead ends in cryptanalysis, ECDSA, side-channels, Technology, timing attacks

Ad-blocker not detected

Consider installing a browser extension that blocks ads and other malicious scripts in your browser to protect your privacy and security. Learn more.