Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Only alphabet values in secret string is a bit misleading. #29

Open
SkybuckFlying opened this issue Aug 6, 2018 · 0 comments
Open

Only alphabet values in secret string is a bit misleading. #29

SkybuckFlying opened this issue Aug 6, 2018 · 0 comments

Comments

@SkybuckFlying
Copy link

SkybuckFlying commented Aug 6, 2018

When trying to develop my own spectre attack I keep running into cache line issues at different byte values.

It seems spectre attack is not very reliable for byte ranges from 0 to 255.

Doing a spectre attack for ascii values from A to Z and a to z is probably much easier and more reliable.

Thus I find this technique misleading, it's not very "generic".

I could be wrong about this, but you/anybody could prove me wrong, by changing the secret string to be more of a secret byte array (where the entire byte value range of 0 to 255 is used as secret values) and then trying to recover that instead.

For now I am willing to bet the spectre attack will fail under these conditions. Since some variables used will cause "false" cache line hits and thus through off results.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant