Comment

Comment by 201984

In general, can timing attacks on a vulnerable implementation be prevented if sonething else guarantees the operation takes constant time?

For example, if I add a sleep after a non-constant-time operation to ensure it always takes 1s, would that prevent timing attacks? At least with this you can use a faster algorithm, and let the OS do useful work with the rest of the time.

parent 201984 2 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton