Subject: [Cfrg] Side channel effectiveness against P256?

From: Dan Brown <[email-masked]>
Date: Thu, 24 Jul 2014 19:54:42 +0000

‎Dan,

Forgot to ask yesterday: is the side channel on naive P256 you described in the CFRG meeting exploitable against ECDHE over Internet via timing?‎ If not, when is it exploitable? Eg,by timing 256 key re-uses on a local network only? By another process in the same machine? I really don't know this area. Should we recommend against such settings rather than just relying on side channel countermeasures for P256? 

Best regards, 

-- Dan

PS Sorry if you already answered this in your talk‎.