AES implementation vulnerable to side-channel attacks #1

Question

AES implementation vulnerable to side-channel attacks #1

Opened this issue 7 years ago · 2 comments

https://github.com/jsakkine-intel/sgx-le/issues/1

Answer 1 · 2017-05-22T22:27:27.000Z

TinyCrypt is not considering cache timing attacks and we also suggest you use AES-NI.

Answer 2 · 2017-05-22T22:27:40.000Z

Fixing cache-timing attacks is not trivial for AES. As you can see in [1], the issue comes from AES design itself.
[1]: Bernstein, Daniel J. "Cache-timing attacks on AES." (2005).