↓ Skip to main content

“Hertzbleed is a real, and practical, threat to the security of cryptographic software.”

Yingchen Wang, Riccardo Paccagnella, Elizabeth Tang He, Hovav Shacham, Christopher Fletcher and David Kohlbrennerhertzbleed.com ↗

Modern x86 chips change clock speed depending on the data they crunch. That turns power draw into timing, and timing can be measured over a network. The researchers pulled a full SIKE key out of code written to be “constant time.” Constant time was always a promise about instructions, not about the silicon underneath.