Issue No. 03 - March (1996 vol. 29)
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/2.485898
<p>Sophisticated new methods designed to break cryptographic systems have unsettled the industry's sense of security. Although most encryption algorithms are theoretically secure and remain impervious to even the most sophisticated cryptanalytic techniques, new attackslike the timing attack exploit the engineering side of network security. Factors such as branching and conditional statements, RAM cache hits, and processor instructions that run in nonfixed time all contribute to predictability and therefore to the probability of key decryption. his article discusses the implications of Paul Kocher's recent timing attack against the Diffie-Hellman key exchange protocol and Goldberg and Wagner's breach of the Netscape SSL protocol for secure transactions. </p>
S. Hamilton and E. English, "Network Security Under Siege: The Timing Attack," in Computer, vol. 29, no. , pp. 95-97, 1996.