Timeline for How can I prevent side-channel attacks against authentication?
Current License: CC BY-SA 4.0
24 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 11, 2019 at 12:37 | vote | accept | dalearn | ||
| S Nov 11, 2019 at 8:58 | history | bounty ended | CommunityBot | ||
| S Nov 11, 2019 at 8:58 | history | notice removed | user163495 | ||
| S Nov 8, 2019 at 12:07 | history | bounty started | CommunityBot | ||
| S Nov 8, 2019 at 12:07 | history | notice added | user163495 | Reward existing answer | |
| Nov 1, 2019 at 2:01 | comment | added | ThoriumBR |
return hash_equals($passwordStored, $passwordCalculated);
|
|
| Oct 31, 2019 at 11:56 | answer | added | William Jockusch | timeline score: 0 | |
| Oct 31, 2019 at 6:00 | history | tweeted | twitter.com/StackSecurity/status/1189784191162036225 | ||
| Oct 31, 2019 at 4:50 | answer | added | Squeamish Ossifrage | timeline score: 39 | |
| S Oct 31, 2019 at 1:47 | history | suggested | Bergi | CC BY-SA 4.0 |
Fix grammar
|
| Oct 30, 2019 at 23:46 | review | Suggested edits | |||
| S Oct 31, 2019 at 1:47 | |||||
| Oct 30, 2019 at 22:26 | history | became hot network question | |||
| Oct 30, 2019 at 17:26 | comment | added | dalearn | @ConorMancone I have clarified that I am looking at timing attacks only. | |
| Oct 30, 2019 at 16:09 | history | edited | dalearn | CC BY-SA 4.0 |
Clarified that I am looking for timing-based attacks only
|
| Oct 30, 2019 at 15:47 | comment | added | Conor Mancone | To avoid being too broad, can you narrow down the scope a bit? "How can I protect [arbitrary code] that does [arbitrary thing] against timing attacks" is only slightly less broad then, "How do I secure my application?" Is there a particular kind of side channel attack you are interested in (password checks, authentication checks, etc...)? | |
| Oct 30, 2019 at 15:44 | history | edited | Conor Mancone | CC BY-SA 4.0 |
added 14 characters in body
|
| Oct 30, 2019 at 15:10 | answer | added | avicoder | timeline score: 1 | |
| Oct 30, 2019 at 15:04 | answer | added | Philipp | timeline score: 6 | |
| Oct 30, 2019 at 15:02 | comment | added | ThoriumBR |
On PHP, use hash_equals, it's a timing safe string comparison function.
|
|
| Oct 30, 2019 at 15:01 | answer | added | user163495 | timeline score: 13 | |
| Oct 30, 2019 at 14:47 | comment | added | user | Hopefully you're not checking a password against plaintext passwords that you store somewhere. | |
| Oct 30, 2019 at 14:27 | history | edited | user163495 | CC BY-SA 4.0 |
added 4 characters in body
|
| Oct 30, 2019 at 14:25 | review | First posts | |||
| Oct 30, 2019 at 14:45 | |||||
| Oct 30, 2019 at 14:22 | history | asked | dalearn | CC BY-SA 4.0 |