[openssl-dev] curve25519

Salz, Rich rsalz at akamai.com
Sun Jun 21 22:00:33 UTC 2015


Your analysis is incorrect for servers over the Internet, where the only thing that an attacker can measure is time.  Power and radiation require close proximity and, often, physical intervention. Those are reasonable attacks to have in the threat model, but comes after timing considerations.


--
Senior Architect, Akamai Technologies
IM: richsalz at jabber.at Twitter: RichSalz
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20150621/0360b1bd/attachment.html>


More information about the openssl-dev mailing list