11:40
-
11:55
-
11:55
Day 2
Trust the Math, Fear the Compiler: How Optimizations Undermine Cryptographic Software
<p>Computer systems can unintentionally leak bits of secret information through observable variations in their behavior such as runtime or power consumption. These so-called "side-channels" can be harmful for the security of cryptographic systems where just a few bytes of leaked key material may compromise loads of sensitive data.</p>
<p>In this talk, we will explore how we mitigate typical side-channels in <a href="https://github.com/randombit/botan">the open-source cryptography toolkit "Botan"</a> and why this has increasingly become a game of cat and mouse against modern compiler optimizations. We will also present how established open-source tools such as valgrind can help find subtle side-channels in a semi-automatic way.</p>