LINKED LIST [txt mode] ▸ A Lesson In Timing Attacks (or, Don't...

home explore | log in

A Lesson In Timing Attacks (or, Don't use MessageDigest.isEquals)

codahale.com · first added by @afreshcup · 2026-09-30 · 1 upvotes

log in to save, upvote or flag this.

─── In 0 lists ─────────────────────────────────────────

(not in any lists yet)

* Rack News (from the discussion)

─── Discussions ────────────────────────────────────────

* A Lesson In Timing Attacks (or, Don't use MessageDigest.isEquals)

113 pts · 30 comments · node

* A lesson in timing attacks

77 pts · 15 comments · node

─── From the discussion ────────────────────────────────

* http://crypto.stanford.edu/~dabo/papers/ssl-timing.pdf

crypto.stanford.edu · node

* http://www.cs.rice.edu/~dwallach/pub/crosby-timing2009.pdf

cs.rice.edu · node

* Blackhat 2010 Exploiting Timing Attacks In widespread Systems Nate Lawson Taylor Nelson Part 00

youtube.com · node

* http://cr.yp.to/antiforgery/cachetiming-20050414.pdf

cr.yp.to · node

* GoLang constant time

gist.github.com · node