Timing attacks, Twofish housekeeping

Robert J. Hansen rjhansen at inav.net
Mon Sep 23 19:27:01 CEST 2002

> So I wanted to ask the list: are timing attacks an issue for us at
> all?  How much effort is it worth to eliminate them?

For the vast majority of users, timing attacks are not part of the
threat model.  Patching the code throughout to eliminate timing attacks
would be an awful lot of work for very little gain.  IMO, at least.  :)

Geek Code: GAT d- s+:+ a27 C++(+++)$ ULB++>++++ P++ L+++>++++ E W+ N+ w
           PS+ PE++ Y++ PGP++ t+ 5++ X-- R tv b+++ DI++ D--- G+ e++ h*
           r* y+* 

More information about the Gnupg-devel mailing list