Side-Channel Attacks

A Simple Password Checker

char *secret

1. Guess a password a, b, c…
2. Correct guess ⇒ runs longer
3. ⇒ “H” is the first letter
4. Guess “Ha”, “Hb”, “Hc”…

The intuition is that timing differences are key.

Prime and Probe