Constant time crypto operations
Closed this issue · 1 comments
jot2re commented
Currently the crypto implementation in both backend and frontend is not constant time, since it didn't really seem like a feasible attack model. However, for completeness and because ECDSA is so sensitive to timing attacks it is better to make it constant time.
One could imagine an attacks of someone trying to continuously querying attestation.id for certificates on emails and time the response time to try to learn information about the secret signing key.
SmartLayer commented
closed per #248