Commit Graph

13 Commits

Author SHA1 Message Date
Martin Willi 39e1ddec2e scripts: Add a tool that tries to guess MAC/ICV values using validation times
This tool shows that it is trivial to re-construct the value memcmp() compares
against by just measuring the time the non-time-constant memcmp() requires to
fail.

It also shows that even when running without any network latencies it gets
very difficult to reconstruct MAC/ICV values, as the time variances due to the
crypto routines are large enough that it gets difficult to measure the time
that memcmp() actually requires after computing the MAC.

However, the faster/time constant an algorithm is, the more likely is a
successful attack. When using AES-NI, it is possible to reconstruct (parts of)
a valid MAC with this tool, for example with AES-GCM.

While this is all theoretical, and way more difficult to exploit with network
jitter, it nonetheless shows that we should replace any use of memcmp/memeq()
with a constant-time alternative in all sensitive places.
2015-04-14 11:51:54 +02:00
Tobias Brunner e34905ce7b scripts: Ignore settings-test script 2014-05-20 18:56:43 +02:00
Andreas Steffen db4a072ca9 Added scripts/aes-test to .gitignore 2013-08-28 22:52:30 +02:00
Martin Willi 40f2a5306a scripts: add a simple test utility to do some malloc() benchmarking/profiling 2013-05-06 15:15:24 +02:00
Reto Guadagnini d786cbda5c Implemented the resolver test script "dnssec" 2013-02-19 11:57:21 +01:00
Martin Willi 8217c099ce Add a tool to burn hashers 2012-07-17 17:32:08 +02:00
Martin Willi a8a7a31700 Added simple fetcher tool to test fetcher implementations 2011-01-17 18:19:59 +01:00
Martin Willi 7240e2266c Added command line tool for OID to DER conversion function 2011-01-05 16:46:02 +01:00
Martin Willi f1a74a3cab Implemented a TLS utility to test on any TLS secured TCP connection 2010-08-25 12:57:13 +02:00
Martin Willi 37e52c3fbf Added a crypto transform stress test for profiling 2010-08-19 19:05:14 +02:00
Martin Willi a4caeac76e moved publickey speed test to a standalone program
This reverts commit 08874d6ae2.
2009-06-10 16:25:32 +02:00
Martin Willi 3e3de01b28 moved Diffie-Hellman speed test to a standalone program
This reverts commit 1e6050bfae.
2009-06-10 14:58:58 +02:00
Martin Willi 466f11bfaf added .gitignore files, ready for the switch 2009-04-30 07:42:30 +00:00