CacheBleed: A Timing Attack on OpenSSL Constant Time RSA

The scatter-gather technique is a commonly-implemented approach to prevent cache-based timing attacks. In this paper we show that scatter-gather is not constant-time. We implement a cache timing attack against the scatter-gather implementation used in the modular exponentiation routine in OpenSSL version

• Type: Journal
• Year: 2016
• Where: IACR
• Authors: Yuval Yarom, Daniel Genkin, Nadia Heninger
• Keywords: Biometrics, IACR 2016