[Cryptech Tech] RSA timing experiments with multiple cores

Pavel Shatov meisterpaul1 at yandex.ru
Tue Apr 17 11:37:33 UTC 2018


11.04.2018 22:42, Rob Austein пишет:

> Which of course also raises the question of whether we *should* be
> preserving key components in the signer cores.  Doctrine for the C
> code has been to wipe any copy of private key components immediately
> after use; we're not currently doing that for the signer cores (oops)
> but adding code to do that would be straightforward.  Adding code to
> be more clever about keeping key components in signer cores seems like
> a fun source of additional complexity; we do have a notion of an
> "open" key object, so presumably we could somehow hook into that,
> perhaps with some kind of LRU mechanism for reclaiming cores when
> there are too many open keys for the number of cores available.
> 

Note, that we can disconnect outputs of the buffers, where signer cores 
store the private key, making them "write-only memory" :)

-- 
With best regards,
Pavel Shatov


More information about the Tech mailing list