[tor-bugs] #11333 [Firefox Patch Issues]: Audit requestAnimationFrame() and possible timing attacks

Thu Mar 27 08:26:06 UTC 2014

#11333: Audit requestAnimationFrame() and possible timing attacks
----------------------------------+---------------------------
 Reporter:  gk                    |          Owner:  mikeperry
     Type:  task                  |         Status:  new
 Priority:  major                 |      Milestone:
Component:  Firefox Patch Issues  |        Version:
 Keywords:                        |  Actual Points:
Parent ID:  #3059                 |         Points:
----------------------------------+---------------------------
 We should investigate how effective the timing attacks are against Tor
 Browser if we time the rendering process with requestAnimationFrame().

 Some examples to study are mentioned in:

 https://dl.acm.org/citation.cfm?id=2516712
 http://www.contextis.com/files/Browser_Timing_Attacks.pdf

 Ideally, the audit would contain suggestions on how to mitigate possible
 issues.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/11333>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online