Security of OpenSSL ECDSA signatures
Damien Miller
djm at mindrot.org
Tue May 24 16:57:28 EST 2011
On Tue, 24 May 2011, Damien Miller wrote:
> random delays will not help because you can sample to eliminate them. I
> think you would want something like the following, that rounds signing
> operations up to the next power of two milliseconds.
FYI this sleeps for around 30ms on my old IBM x40 laptop* using ECDSA
in a 256 bit curve field.
-d
* cpu0: Intel(R) Pentium(R) M processor 1200MHz ("GenuineIntel" 686-class) 1.20 GHz
More information about the openssh-unix-dev
mailing list