Opportunities and Limits of Remote Timing Attacks

摘要: Many algorithms can take a variable amount of time to complete depending on the data being processed. These timing differences sometimes disclose confidential information. Indeed, researchers have been able reconstruct an RSA private key purely by querying SSL Web server and results. Our work analyzes limits attacks based accurately measuring network response times jitter over local across Internet. We present design filters significantly reduce effects jitter, allowing attacker measure events with 15-100μs accuracy Internet, as good 100ns network. Notably, security-related servers other need be carefully engineered avoid channel leaks at demonstrated in this article.